last executing test programs: 7m54.866173983s ago: executing program 32 (id=186): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 6m51.288808411s ago: executing program 33 (id=548): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0x1d0, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x184, 0x2, [@TCA_BASIC_EMATCHES={0x18, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x168, 0x3, [@m_sample={0x88, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x51, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d8db6ee7a95acb45665d419103d3630ef3c99f3729bf251659b35ee457bb1f0377974ae753b08d9ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xdc, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0x8d, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9edbb86dd5ae3f174ba8489176ed907a788dd2e877be404d047e0ef287164365"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80d313}, [@generic={0x91, 0x1, 0x1, 0x5}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 6m22.830654823s ago: executing program 3 (id=830): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffce0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) pipe(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, 0x0, 0x84) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x904, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x1, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 6m21.950776831s ago: executing program 3 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e78", 0xa) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 6m18.8833688s ago: executing program 3 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) setrlimit(0x2, &(0x7f00000000c0)={0x8, 0xffffffffffffffff}) (async) r2 = syz_clone(0xc020500, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) (async) tkill(r2, 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2014448, &(0x7f0000000880), 0x0, 0x545, &(0x7f0000001300)="$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") (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async, rerun: 32) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) getpeername$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000001b00)=ANY=[@ANYBLOB="18010000", @ANYRES16=r3, @ANYBLOB="02002dbd7000ffdbdf2509000000200001801400020070696d7265670000000000efd7bb3fd343c40d6fef5be58f000000000024bb1ce81a08000100ec8d272fb9f8a0c78b2db818cd2aa10113acb1a706f4da658aadb38552a4c8580aa2dfb826e272b35efa03500b5fc4d792d8eebed846b33c71b385fa0231b6f681078a3650ea887e4337e6e7b0867012022acc37d7", @ANYRES32=0x0, @ANYBLOB="1c000180080003000300000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5400018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000300010000001400020073797a6b616c6c6572300000000000001400020070696d72656731000000000000000000580001800800030003000000080003000000000008000300020000001400020076657468300000000000000000000000140002007663616e300000000000000000000000140002006970365f7674693000000000000000001c0001800800030002000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB], 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) (rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) (async) io_setup(0x3fc, &(0x7f0000000500)) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001880)={'tunl0\x00', &(0x7f0000000540)={'tunl0\x00', r5, 0x40, 0x7800, 0x6, 0x42, {{0x37, 0x4, 0x1, 0x2, 0xdc, 0x64, 0x0, 0x5f, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x1c, 0x7b, 0x0, 0xe, [0x1, 0x5, 0x9, 0x3, 0x222, 0x1000]}, @timestamp_addr={0x44, 0x1c, 0xe6, 0x1, 0x7, [{@multicast2, 0xffff7fff}, {@multicast1, 0xe}, {@private=0xa010100, 0x6}]}, @timestamp_prespec={0x44, 0x3c, 0xf, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast2, 0x8433}, {@remote, 0x6}, {@empty, 0x6}, {@multicast1}, {@multicast2, 0x2}, {@remote, 0x7}]}, @timestamp_addr={0x44, 0x54, 0x39, 0x1, 0x3, [{@remote, 0xec4c}, {@rand_addr=0x64010101, 0xf7}, {@private=0xa010101}, {@multicast2}, {@broadcast, 0xfffffbff}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0x4}, {@remote, 0x4}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010101, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}}}) (rerun: 64) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x804}, 0x4001) (async) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0500000070000000080003000700000005000500050000000a4a8cb5ecec12940bebec367f424f9b01da9da668e6a2e289d82c95ce40fa9fdbadc7709fb484611c752e2a250e478a2f69cda5ef4cac325edc"], 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000001a80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="100028bd7000fbdbdf25020000000500050001000000140004000600000001000000f7ffffff95ffffff08000300050000000500050004000000e7ff0300050000000800030000020000"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async, rerun: 64) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 6m18.724122301s ago: executing program 3 (id=860): futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000040), 0x42fffffe) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7WimlTpS56HmqVGTmdnMaoZFJUQlNiCVkLghxImj2ClN1EUCuy5YIBBIiAV7/gI2dEWFhFjDHrFARVCCBEhIRvfabhM3DhakMc39/aTbnPuwv3NifafnHt+bG0BmnU3+yUUMRsRHEXG0vrr9gLP1H5t3b0wnSy5qtctf5tLjkvXmoc3XHYmI9Yjoi4gn/hfxbO7BuJXVtfmpUqm43Fgfri4sDVdW1y7MLUzNFmeLi6MTFycnJ0bGxyb3rK03X37+5qV3H+t959uX7tx+5f33kmoNNvZtbcdeqje9J45v2XYoIv7zMIJ1QaHRnv5uV4SfJfn8fhcR59L8PxqF9NMEsqBWq9V+qB1ut3u9BhxY+XQMnMsPRUS9nM8PDdXH8L+PgXypXKn+42p5ZXGmPlY+Fj35q3Ol4kjjXOFY9OSS9dG0fH99rGV9PCIdA79a6E/Xh6bLpZn97eqAFkda8v+bQj3/gYxwyg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9lV6HYFgK7x/z9k0uOXLiVLrXn/+8y11ZX58rULM8XK/NDCyvTQdHl5aWi2XJ5N79lZ+Kn3K5XLS6P/jJXrw9VipTpcWV27slBeWaxeSe/rv1Ls2ZdWAZ04fubWJ7mIWP9Xf7okehv75CocbLVaLrp9DzLQHab+ILtM/UF2OccHWv9Eb+u4oK/dC5fuzxcCj5Z8tysAdM35U77/g6wy/w/ZZf4fsssYH9jhEX3b7Db/DzyazP9Ddg22ef7Xb7Y8u2skIn4bER8Xeg43n/UFHAT5z3ON8f/5o38ZbN3bm/su/YqgNyJeePPy69enqtXl0WT7V/e2V99obB/b8sK2JwxAtzTztJnHAEB2bd69Md1c9jPuF/+tX4TwYPxDjbnJvvQ7yoHN3LZrFXJ7dO3C+kZEnNwpfq7xvPP6iczAZuGB+CcaP3P1t0jreyh9bvr+xD+1Jf6ft8Q//Yt/K5ANt5L+Z2Sn/MunOR338m97/zO4R9dOtO//8vf6v0Kb/u9MhzGee+vFz9rG34g4vWP8Zry+NFZr/KRu5zuMf+fpJ//Qbl/t7fr77BS/KSkNVxeWhiuraxfmFjZmi7PFxdGJi5OTEyPjY5PDV+dKxT8daR//3yc/vL1b+wca8Xui8/Yn2/7WYfu//+MHT53dJf5fz+38+Z/YJX5/RPy9w/hfj336TLt9SfyZNr///C7xk23jHcavvPb/wx0eCgDsg8rq2vxUqVRcVlBQ6Eph49dRjZZCt3sm4GGrrCan5knSd7smAAAAAAAAAAAAQKf243LibrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg+DEAAP//KbnRCQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000008000000000fdffffff18120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000100)=0x9, 0x0, 0x4) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x20008a0, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x5405, 0x0, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6m17.625346142s ago: executing program 3 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x20044804) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x42}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x22040080}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x24}, 0x94) 6m14.532535053s ago: executing program 3 (id=884): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000036cbbbd18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf090000000000005509010000000080950000000000000045000400010000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000000780)=""/4097, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = eventfd2(0x5, 0x800) ppoll(&(0x7f0000000200)=[{r1, 0xa4}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0x4]}, 0x8) 6m14.454467349s ago: executing program 34 (id=884): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000036cbbbd18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf090000000000005509010000000080950000000000000045000400010000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000000780)=""/4097, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = eventfd2(0x5, 0x800) ppoll(&(0x7f0000000200)=[{r1, 0xa4}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0x4]}, 0x8) 5m2.226489489s ago: executing program 6 (id=1645): recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000000440)={0x77359400}) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004680)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0x3}]}, 0x4c}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001fc0)={0x28c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0xfffffffffffffef7}, {0x8, 0x4, 0x87fff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x4, 0x2, 0x0, 0x1, [{0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x8}}, {0x0, 0x6, r6}}}, {0x0, 0x1, @lb_hash_stats={{{}, {}, {0x0, 0x4, 0x100}}}}, {0x0, 0x1, @notify_peers_interval={{}, {}, {0x0, 0x4, 0x2}}}, {0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0xfffffffe}}}, {0x0, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash_to_port_mapping\x00'}}}, {0x0, 0x1, @enabled={{}, {0x0, 0x6, r6}}}, {0x0, 0x1, @lb_hash_stats={{{}, {}, {0x0, 0x4, 0x7}}}}, {0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x3}}}, {0x0, 0x1, @name={{}, {}, {0x0, 0x4, 'roundrobin\x00'}}}, {0x0, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20008000}, 0x2002c815) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) r10 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) getuid() (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f00000000c0)={0x661f8c25, 0x0, 0xafe, 0x7f, 0x16, "0c09000000f19dd026d700", 0xed, 0x2}) (async) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000080)=0x9) r12 = fsmount(r10, 0x0, 0x0) openat$cgroup_procs(r12, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32=r8, @ANYBLOB="5a006708060005"], 0x24}}, 0x0) (rerun: 32) 5m2.116072376s ago: executing program 6 (id=1646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000084aac007afd91d250000", @ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x19) unshare(0x2a020400) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 5m2.011027874s ago: executing program 6 (id=1648): r0 = openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4090) r1 = msgget(0x2, 0x200) (async) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000004}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x002P\x00', @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008001b0000000000"], 0x3c}}, 0x0) (async) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f00000005c0)}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)}) (async) mlockall(0x1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000500100005000000050000000100", @ANYRES16=r5, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES16=r5], 0x50) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xa, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90010000160001002cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400060a0000a03b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000bb000004d36c00000000000000000000000000f8ffffff000109000000000000000000000000000000010000000000000000000000003000000902000000000000000000000000000001800000000000004ed2000000000000d0acffffffffffff050000000000000003000000000000003d640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004000000950001"], 0x190}, 0x1, 0x0, 0x0, 0x2004c094}, 0x24040000) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r7, 0x0}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) msgctl$IPC_RMID(r1, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f0000000700)=""/194, 0xc2}, {&(0x7f0000000800)=""/105, 0x69}, {&(0x7f0000000880)=""/165, 0xa5}], 0x5, 0x21, 0x0) (async) msgget(0x0, 0x710) 5m1.351414486s ago: executing program 6 (id=1655): pipe(&(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(r0, &(0x7f00000002c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0) rmdir(&(0x7f0000000000)='./file0/file3\x00') r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0xce22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x33}, {0xfffffffffffffffd, 0xfffffffffffffffd, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d4, 0x32}, 0x2, @in6=@private1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x38, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000100)={&(0x7f00000003c0)=""/224, 0xe0}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="3f2ad1f64909eeb99db757a51c8fe22b1f2749f5", 0x14}], 0x1, 0x2) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x201000, &(0x7f0000000640)={[{@dioread_nolock}, {@resuid}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020"]) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r7, 0xa9525000) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000080), 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78000000180025", 0x7, 0x0, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000300)={0x4}, 0x4) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f00000000c0), 0x4) 5m0.891817656s ago: executing program 6 (id=1663): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x0, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0xb, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x40000004, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000000880)={0x27, r3, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) io_uring_setup(0x1b7b, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r7, 0x1, 0x5, 0x81, 0x7f, "ac9bd7bd5acfa55c671a1faa56be23c227fbfa7cc5b97ace68e62fffaf2026bd38e4d826e0b8841ced7000ef68ee5f43cf376e05ac7bc04fe3e65d741256b2", 0xc}, 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) close(r2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5m0.467638014s ago: executing program 6 (id=1668): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_clone3(&(0x7f00000002c0)={0x100080, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x1e}, &(0x7f0000001180)=""/4096, 0x1000, &(0x7f0000000440)=""/207, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000580)={r1, &(0x7f0000000140)='.\x00', 0xa101, &(0x7f0000000200)={@align=0x10001, {0x3, 0x7, 0x0, 0xae}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000540)=0x3}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x8001, 0x400, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa00000008000300"], 0x68}}, 0x64000004) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x2000000100000001, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 4m59.567829003s ago: executing program 35 (id=1668): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_clone3(&(0x7f00000002c0)={0x100080, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x1e}, &(0x7f0000001180)=""/4096, 0x1000, &(0x7f0000000440)=""/207, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000580)={r1, &(0x7f0000000140)='.\x00', 0xa101, &(0x7f0000000200)={@align=0x10001, {0x3, 0x7, 0x0, 0xae}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000540)=0x3}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x8001, 0x400, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa00000008000300"], 0x68}}, 0x64000004) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x2000000100000001, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="196a348fbba6e75ce3e37fd3d3fc", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 2m44.484295594s ago: executing program 4 (id=2926): unshare(0x62040200) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) rename(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000040)='./file1/file4/file5\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000002000018787000000000000000200000008000a00ff070000080004"], 0x34}}, 0x0) 2m44.453974446s ago: executing program 4 (id=2927): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@deltaction={0x1d8, 0x31, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5fc}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf0d}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x120}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x880}, 0x8010) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2m44.190530294s ago: executing program 4 (id=2930): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x3, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', '', [{0x20, 'GPL\x00'}, {0x20, 'memory.events.local\x00'}, {0x20, '\':!'}, {0x20, 'memory.events.local\x00'}]}, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m44.068110862s ago: executing program 4 (id=2931): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x12, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ldst={0x1, 0x1, 0xd08aa58af2993954, 0x2, 0x3, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001100)='syzkaller\x00', 0x8, 0x78, &(0x7f0000001140)=""/120, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x0, 0xfffffffa, 0xfffffffe}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0xffffffffffffffff], &(0x7f0000001280)=[{0x4, 0x5, 0x6, 0x1c}, {0x1, 0x4, 0xe, 0xa}], 0x10, 0x2a8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "1fec3497f3dbd724"}]}}}]}, 0x80}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000014c0)={0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r0, r2, 0x25, 0x5, @val=@uprobe_multi={&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=[0x9, 0x3], &(0x7f0000001480)=[0x0], 0x2, 0x2, 0x0, r3}}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$security_capability(r5, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}], r6}, 0x18, 0x1) setuid(r6) ustat(0x8000000000000001, &(0x7f0000000000)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff}, 0x4000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) syz_clone(0x800d400, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') 2m43.768355571s ago: executing program 4 (id=2939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsv0}]}, 0x6, 0x61f, &(0x7f0000000a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0xaf, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x44004) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r3, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xa, 0xffffffffffffffff, 0x4}, 0x38) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x58}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x80078b, &(0x7f00000009c0)={[{@mb_optimize_scan}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") 2m43.559470264s ago: executing program 4 (id=2944): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 2m43.559044624s ago: executing program 36 (id=2944): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 2m17.66407866s ago: executing program 9 (id=3263): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="af2178d12dd14c1ac862abd8b7fcf7ae604f7d0a81", 0x15}], 0x1, 0x2) r1 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fadvise64(r2, 0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x3) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x188, 0x10, 0x831, 0x870bd2b, 0x0, {{@in=@local, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7f}, {0x0, 0x400800}, {}, 0x0, 0x0, 0x2, 0x4, 0x3, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_aead={0x4c, 0x12, {{'gcm_base(ecb-aes-neonbs,cmac(aes))\x00'}}}]}, 0x188}}, 0x4050) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000", @ANYRES16=r6, @ANYRES16=r5], 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt(r11, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) write(r9, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\r', 0x1}, {&(0x7f0000000100)='k', 0x1}], 0x2, 0x0) tee(r8, r10, 0xfffffffffffffffd, 0x0) close(r9) r12 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r12, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r12, &(0x7f0000000100)="d5c0", 0x2) 2m16.796133056s ago: executing program 9 (id=3275): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000abc000000090a010400000000000000000a0000040900020073797a310000000008000a40000000010900010073797a3100000000080005400000000d7800128014110180090001006c6173740000000004000280100001800c000100636f756e74657200100001800b0001006e756d67656e0000100001800a0001006c696d6974000000100001800b00010072656a6563740000200001800700010072740000140002800800024000000001080002400000000408000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2m16.730639791s ago: executing program 9 (id=3276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xe, 0xffffffffffffffb4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70, 0x6007}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000001340)=""/4085, 0xff5}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x410000, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4, 0x2}}, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2m16.646363966s ago: executing program 9 (id=3278): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x0, 0xffffff7c) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='ufs\x00', 0x808080, 0x0) 2m16.564912411s ago: executing program 9 (id=3280): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x3, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) fallocate(r0, 0x0, 0x0, 0x8800000) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x0, 0x1, 0x7}, 0x400}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x11, 0x5000, 0x0, 0x3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) 2m14.682389504s ago: executing program 9 (id=3298): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x1, r5, 0x14}, 0x10) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) r6 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a", 0x0, 0x0, 0x0}, 0x38) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="62bf6e5fe864da66eeb73694b17a01b90f76df761cef7ce450ebf06bd93a8df05f3e3f9897cbf759eb03b8bb48e0c12436f765f81939fc93be71a43d3cf6", 0x3e}], 0x1}, 0x4) (async) sendto$inet6(r11, &(0x7f0000001400)='D', 0x1, 0x4000005, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) shutdown(r11, 0x0) splice(r11, 0x0, r9, 0x0, 0x406f413, 0x0) (async) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1m59.714129788s ago: executing program 37 (id=3298): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x1, r5, 0x14}, 0x10) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) r6 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a", 0x0, 0x0, 0x0}, 0x38) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="62bf6e5fe864da66eeb73694b17a01b90f76df761cef7ce450ebf06bd93a8df05f3e3f9897cbf759eb03b8bb48e0c12436f765f81939fc93be71a43d3cf6", 0x3e}], 0x1}, 0x4) (async) sendto$inet6(r11, &(0x7f0000001400)='D', 0x1, 0x4000005, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) shutdown(r11, 0x0) splice(r11, 0x0, r9, 0x0, 0x406f413, 0x0) (async) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1m36.418222575s ago: executing program 2 (id=3756): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000000)={0x5, 0x16, 0x4000000000, 0x7, 0x8}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) listen(0xffffffffffffffff, 0xd3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xd0, 0x0, &(0x7f0000000080)) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m35.468363056s ago: executing program 2 (id=3765): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x3, 0x100) (rerun: 32) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x71) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async, rerun: 64) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) (rerun: 64) 1m35.4129897s ago: executing program 2 (id=3767): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) getdents64(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0010000007000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xc0400, 0x0) r7 = dup2(r1, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r8 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1ed500000000000000048000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r7, 0x14, 0x0, @void}, 0x10) syz_open_procfs(r8, &(0x7f0000000240)='mountstats\x00') 1m34.880272005s ago: executing program 2 (id=3771): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xdb) r1 = gettid() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYBLOB="0100280000000c000000000000000000f400", @ANYRES32=r4, @ANYBLOB="24002f800c000b000000000000000000080001"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40000024, 0x800000000004, @tid=r1}, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000003000000000000630000009500"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0, @ANYRESOCT], 0x40c}}, 0x40000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001a80)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f00000008c0)='./file0\x00', 0x100000, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r0], 0x6, 0x2c5, &(0x7f0000000f80)="$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") timer_getoverrun(0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYBLOB="1497ce488106f0d71f66772468fd0b8bac31b92fcaaff0960e0a9cb85f81fbd0ef5205a9941ddcc0e2aca0759d36a447814c3c3ae91869441edeca0457ba2ef111b2d3d13527fbae4e2eb10670af7b54b45b67d6f50a0bc3435a9349639910bda7ad274ed1817f70feb7b532344043cc48e1cb75d3c8b3e036bc2a382235bd0268d5a76c620bc471383eb614ae34b0c86c35dce8d17d886d2ffe718b9ea8af1659c0530250923022eab2c2d4cc78399d2fcd5425115775c134ef86606fbcb634f69e387a05e0369355520d025dcca83ba2458023e8439ab80e837dac"], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_tables_matches\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r6, &(0x7f0000000d40)=""/27, 0x1b) r7 = syz_io_uring_setup(0x31c0, &(0x7f0000000180)={0x0, 0xc7ca, 0x40, 0x2, 0x1bc}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000000740)={0xd3, r6, 'id1\x00'}) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xf3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000500)='-\x00', 0x420043, &(0x7f0000000540)={@_ha_fsid={[0xf35, 0x2]}, {0x6, 0x9, 0x3, 0x2}}, 0x100, &(0x7f0000000580), &(0x7f00000005c0)}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r10) syz_clone(0x5000100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c0000003f0001002abd7040fed9df250100000008000100", @ANYRES8=r9], 0x1c}, 0x1, 0x0, 0x0, 0x2004084d}, 0x404c0f0) 1m34.608070362s ago: executing program 2 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4018}, 0x8040) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0004050900010073797a31000000005c000480580001800a000100696e6e6572000000480002800800044000000017240005800c0801007061796c6f61640014000280080003400000009208000240000000010800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000a"], 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x84}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x1, 0xa, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) 1m34.17642103s ago: executing program 2 (id=3780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="d3255a21"], 0x28}, 0xc000) r5 = socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010804000002fdfff1ae259f4bc16487fdffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000052004001c002b80080003001900000008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r9, @in6={{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}}, 0xfffffffa, 0x3, 0x5, 0x90b, 0x32, 0x0, 0x2}, 0x9c) 1m34.106811905s ago: executing program 38 (id=3780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="d3255a21"], 0x28}, 0xc000) r5 = socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010804000002fdfff1ae259f4bc16487fdffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000052004001c002b80080003001900000008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r9, @in6={{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}}, 0xfffffffa, 0x3, 0x5, 0x90b, 0x32, 0x0, 0x2}, 0x9c) 7.345999172s ago: executing program 1 (id=4895): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(0x0, 0x1) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/138, 0xab}], 0x4, &(0x7f0000008640), 0x1, 0x0) socket(0x25, 0x803, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 6.978280786s ago: executing program 1 (id=4903): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000180)={[{@map_off}, {@overriderock}, {@cruft}, {@utf8}, {@unhide}, {@check_strict}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x55a, &(0x7f0000000940)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xffffffffffffff08, [@ptr, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @func_proto]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x8000001}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180), &(0x7f0000000340)) r5 = syz_io_uring_setup(0x83b, &(0x7f0000000140)={0x0, 0x11e, 0x0, 0x1, 0x315}, &(0x7f0000000500), 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) io_uring_enter(r4, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) 5.644362702s ago: executing program 1 (id=4912): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x6, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="01000000090000030000000a004e210000080100020000000000000000000000000082070000001400020002000000ad1414aa00000000000000000d0001007564703a73797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.278274896s ago: executing program 1 (id=4915): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x72, 0x20000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8002}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r5 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r5, 0x202, &(0x7f0000000000)={&(0x7f0000000280)=""/243, 0xf3}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b800000cd99ef229cee41ea6000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000010c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000024000d8014000500fc0200000000000000000000000000000c0003"], 0xb8}}, 0x0) 5.169205164s ago: executing program 7 (id=4917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c9f000/0x2000)=nil, 0x4, &(0x7f00000004c0)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x0, 0x407, 0x800}], 0xc38, 0xa00, 0x1e, 0x0, 0x8, 0x6e}) syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)) r3 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 4.996209595s ago: executing program 1 (id=4920): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x4503, 0x20, 0x0, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) 4.083255624s ago: executing program 0 (id=4927): ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r4, r3, 0x4, r3}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000100)={{0x77359400}, {r5, r6/1000+10000}}, 0x0) unshare(0x2e000200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) 4.018240568s ago: executing program 1 (id=4928): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 3.882630107s ago: executing program 0 (id=4929): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200feffff7f05000200"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.790187913s ago: executing program 0 (id=4930): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x9, 0xce, 0xd, 0x3, 0x0, 0x7, 0x80000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x20, 0x8, 0xfff, 0x3, 0xc, 0xf, 0x1, 0x0, 0x3, 0x0, 0x81}, r0, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x59564471) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x7f, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pwritev2(r3, &(0x7f0000000940), 0x0, 0x7fff, 0xc92, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001280)={'#! ', '', [], 0xa, "02ce00b26cd16126940cfac2"}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000001c0)=0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x23, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x9302, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 2.802947947s ago: executing program 0 (id=4946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x200000000000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000640)=r0, 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x40) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.617377989s ago: executing program 5 (id=4950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8185, 0x4, 0x3, 0x40, 0x9, {0x18, 0x2, 0x8, 0x7, 0x2}, {0x1, 0x0, 0x200, 0x0, 0x5, 0x5}, 0x3, 0x3, 0xff}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2974, 0x43009}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x2af}}]}]}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) 1.99369143s ago: executing program 7 (id=4952): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200feffff7f0500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.657587392s ago: executing program 7 (id=4954): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000006a0001002abd7000fddbdf250a0000000034fe00ce59389d85f001e00a34116f4843958a8dd26d070359350b24eebe4ccf355e8d498800280f2cd8b69f1d6eacaa9b51ec7de15ed1fd44fbe4b1d5f4ab8f59444d8f38873cc29a64455c46df05ccfba0363b4d576dc5f96c9386db53ae89079d8a674f5dce2ebf64d7816142dc5045eea9c8d1567e91"], 0x18}, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000080), 0xfffffffffffff000, 0xa0c40) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0xd, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000081, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r3 = socket(0x10, 0x3, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x24, 0xfffffffffffffffd, &(0x7f00000002c0)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x100, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004040) 1.52822146s ago: executing program 5 (id=4955): statx(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6000, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "824133e30300825e", "ca00", "7ffda206", "2497fb05fa502495"}, 0x28) r2 = syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@usrquota}, {@resuid={'resuid', 0x3d, r0}}, {@noblock_validity}, {@discard}, {@delalloc}, {@auto_da_alloc}, {@grpid}]}, 0x1, 0x490, &(0x7f0000000ac0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x21, 0x0, 0x4) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x8, &(0x7f0000000f80)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000400000b7030000000000006c000000f7ff0000b70000000000000095c98b761f9795fee8232fb2cfd2af979d6613d665e0a6e6145bc9ed06daae7fee96a3c5e6b602cc3d47a7dc43f6b908c237c3e824f798d727bf11ff2aceb6c6dc5a6a1ac1cd02a24899866f529a0cdccd334b37dd9b89974bca91d8e90ab51c68e5a55994a4a34182622fa447eb7abd5c86f07dcfe05dca84f17f9fcc2f65592f3e81226937c183382adaab80931ebfbb36f7f78d776aa3210fc5cb7b33c476c26b9be590bb4ac32458152c7f67f585c8a9a1aa2d676c50fbea8a0361fdeeccc538fe37c94bf6389b019e11b8aea7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.457107335s ago: executing program 7 (id=4956): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) write$cgroup_devices(r0, &(0x7f00000002c0)={'a', ' *:* ', 'r\x00'}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x21, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@remote, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0xff, @empty, @mcast2, {[], {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "42778569ee7ac246c18ba44917e8c94daaac1927983807efd339e5da070c4ce9", "679d165ec13567e8e3a7118dab629644", {"01197cd2fb78f4e0fd39cfecd9700cfe", "65809814935f08703e677d8e3026bd8e"}}}}}}}}}, 0x9e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x200, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000006910a000000000000400000000000000950000000000bfda4efaa7e20843c2fb0cc2050f4b9c0000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.447176846s ago: executing program 8 (id=4957): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0xfc}, 0x4e20, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x8, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x6c}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x1, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x557c96d0fefea758) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x200000000000010c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r10}, &(0x7f0000000a00), &(0x7f0000000a40)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, 0x0, &(0x7f00000008c0)=r9}, 0x20) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) r13 = openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) 1.052196091s ago: executing program 5 (id=4958): r0 = syz_mount_image$vfat(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x1c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x31d, &(0x7f0000000b40)="$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") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="555c9d46b8b5778f21000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0xa0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b00000006000000050020000200"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x2000c004) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x689}], 0x2}, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@remote, 0x0}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e4020000", @ANYRES16=r3, @ANYBLOB="000383c39b2f", @ANYRES32=r8, @ANYBLOB="1400020073697430000000000000000000000000140002006e65747063693000000000000000000020000180080003000100000014000200636169663000000000000000000000001c00038013000500fa9d94c5fcd7d0da413fbd136f7d5900040001001400018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="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"], 0x2e4}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000800)={0x0, 0x200, 0x40000dd, 0x52f751a5, 0x1, "2b73da2ac0c099532d14a00c51e579ff2d187d", 0x536, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe2a) r12 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r12, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) truncate(&(0x7f0000000000)='./file1\x00', 0x4edd) 916.43589ms ago: executing program 7 (id=4959): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c0007800800064000000701050005000a000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) open(0x0, 0x0, 0x1b5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prlimit64(r4, 0xe, &(0x7f0000000140)={0x2000000000a, 0xffffffffffffffc0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000031000/0x3000)=nil, 0x3000, 0xb635773f04ebbeea, 0x8010, 0xffffffffffffffff, 0x88f0b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x33, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x2, 0x0, 0x20000000}}) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000040)={{0x2, 0x4, 0x9, 0x6, 0x10000006}, &(0x7f0000000140)=[{}, {}, {}]}) 870.358433ms ago: executing program 0 (id=4960): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x6, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00', @ANYRES16, @ANYBLOB="01000000090000030000000a004e210000080100020000000000000000000000000082070000001400020002000000ad1414aa00000000000000000d0001007564703a73797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 810.878977ms ago: executing program 0 (id=4961): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000d00)=0x11, 0x4) bind$can_raw(r0, &(0x7f0000000100), 0x10) io_uring_setup(0x4000650b, &(0x7f0000000180)={0x0, 0xed4a, 0x10, 0x101f, 0x4ab}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8000000000000001}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001440), 0x106, 0x4}}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3m\xcf\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) getpeername$packet(r2, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001540)=0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@cgroup=r6, 0x36, 0x0, 0xfff, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0]}, 0x40) sendto$packet(r2, &(0x7f0000000440)="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", 0x7f8, 0x20000000, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x34, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000300), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYRES64=r7], 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x218, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x4, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000080)) mq_timedreceive(r9, &(0x7f00000000c0)=""/72, 0x48, 0xfd, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000cc0)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0xf}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) ftruncate(0xffffffffffffffff, 0x51a9497) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) 446.380791ms ago: executing program 8 (id=4962): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 445.95834ms ago: executing program 5 (id=4963): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xffe1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000011fc0)={&(0x7f0000011f80)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xe3e3f3416e3ae804}, 0x1000) 430.031612ms ago: executing program 8 (id=4964): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200feffff7f0500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 415.617193ms ago: executing program 8 (id=4965): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) 356.327306ms ago: executing program 5 (id=4966): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x7, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r1 = getpid() tgkill(r1, r0, 0xf) 355.990497ms ago: executing program 8 (id=4967): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x4000000) sendmsg$NFT_BATCH(r5, 0x0, 0x24000840) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe78, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xa2313b630ad1f80d}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6, @ANYRES32=r2, @ANYRESOCT=r4], 0x1c}}, 0x2000) (async) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6, @ANYRES32=r2, @ANYRESOCT=r4], 0x1c}}, 0x2000) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r10, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x80000000, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x884) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420880}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x400c0c4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf2507000000080001003900000008000300", @ANYRES32=r13, @ANYBLOB="0a00e800080211000000000014001780040005000400020004000400040005000a00e800080211000001000008001780040001001c00e700d46056928e835dd73b6682dffcf29c1134c44e8ace001b8e0a00e80008021100000100000a00000000001100000000001c00e700021c6e0d160d6ef71659d18c898ac41cdf757b7daaa9bec70a00e80008021100000000000a00e800ffffffffffff00000a001800030303030303000005005380000000000a00180003030303030300000a0018000303030303030000"], 0xec}}, 0x40000) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x138, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "09f1641b14a698e8c814ee8f76"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "db626c7fe3"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a72799843f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ff378a6642a775f176083ad141"}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "ef9cb25fbb"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3b78de22b8"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2bc92b8f34ab37f781ae0d6a6f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f23df50a5bb715b3de408fb2d2"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x13}]]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x138, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "09f1641b14a698e8c814ee8f76"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "db626c7fe3"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a72799843f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ff378a6642a775f176083ad141"}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "ef9cb25fbb"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3b78de22b8"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2bc92b8f34ab37f781ae0d6a6f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f23df50a5bb715b3de408fb2d2"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x13}]]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303000000000000000006000000080003002aee"], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303000000000000000006000000080003002aee"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 20425] EXT4-fs: inline encryption not supported [ 452.162479][T20425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.205863][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 452.205885][ T28] audit: type=1400 audit(2000000017.790:4556): avc: denied { ioctl } for pid=20432 comm="syz.8.3986" path="socket:[69561]" dev="sockfs" ino=69561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 452.467575][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.487304][T20454] lo speed is unknown, defaulting to 1000 [ 452.488400][T20451] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.535296][T20457] loop5: detected capacity change from 0 to 1024 [ 452.584473][T20457] EXT4-fs: inline encryption not supported [ 452.887978][T20468] lo speed is unknown, defaulting to 1000 [ 453.134956][T20457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.249654][T20457] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.264113][T20457] FAULT_INJECTION: forcing a failure. [ 453.264113][T20457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.281140][T20457] CPU: 0 UID: 0 PID: 20457 Comm: syz.5.3991 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.281165][T20457] Tainted: [W]=WARN [ 453.281203][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.281290][T20457] Call Trace: [ 453.281294][T20457] [ 453.281300][T20457] __dump_stack+0x1d/0x30 [ 453.281321][T20457] dump_stack_lvl+0x95/0xd0 [ 453.281337][T20457] dump_stack+0x15/0x1b [ 453.281427][T20457] should_fail_ex+0x263/0x280 [ 453.281444][T20457] should_fail+0xb/0x20 [ 453.281457][T20457] should_fail_usercopy+0x1a/0x20 [ 453.281483][T20457] _copy_to_user+0x20/0xa0 [ 453.281502][T20457] simple_read_from_buffer+0xb5/0x130 [ 453.281518][T20457] proc_fail_nth_read+0x10e/0x150 [ 453.281547][T20457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.281565][T20457] vfs_read+0x1ab/0x7f0 [ 453.281655][T20457] ? __rcu_read_unlock+0x4e/0x70 [ 453.281681][T20457] ? __fget_files+0x184/0x1c0 [ 453.281697][T20457] ? mutex_lock+0x57/0x90 [ 453.281775][T20457] ksys_read+0xdc/0x1a0 [ 453.281809][T20457] __x64_sys_read+0x40/0x50 [ 453.281842][T20457] x64_sys_call+0x2886/0x3020 [ 453.281888][T20457] do_syscall_64+0x12c/0x370 [ 453.281929][T20457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.281953][T20457] RIP: 0033:0x7eff204fcfce [ 453.281972][T20457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.281992][T20457] RSP: 002b:00007eff1ef96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.282016][T20457] RAX: ffffffffffffffda RBX: 00007eff1ef976c0 RCX: 00007eff204fcfce [ 453.282111][T20457] RDX: 000000000000000f RSI: 00007eff1ef970a0 RDI: 0000000000000005 [ 453.282132][T20457] RBP: 00007eff1ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 453.282146][T20457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.282160][T20457] R13: 00007eff207b6038 R14: 00007eff207b5fa0 R15: 00007fffad4e0548 [ 453.282182][T20457] [ 453.531034][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.629192][T20476] syzkaller0: entered promiscuous mode [ 453.635003][T20476] syzkaller0: entered allmulticast mode [ 453.642893][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.645702][T20485] lo speed is unknown, defaulting to 1000 [ 453.698745][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.726939][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.726980][T20498] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.733761][T20489] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 453.774779][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.790326][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.847650][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.854045][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.937470][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.943840][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.952577][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.963072][T20489] hsr0 speed is unknown, defaulting to 1000 [ 453.976370][T20489] hsr0 speed is unknown, defaulting to 1000 [ 454.026042][T20509] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.382902][T20787] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4014'. [ 454.770878][T20799] loop5: detected capacity change from 0 to 1024 [ 454.796405][T20799] EXT4-fs: inline encryption not supported [ 454.846569][T20799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.900004][T20799] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.952708][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.054648][T20836] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.239871][ T28] audit: type=1326 audit(2000000020.840:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20861 comm="syz.1.4030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b94d4c799 code=0x0 [ 455.291389][T20871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=20871 comm=syz.1.4030 [ 455.336428][T20870] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.347048][T20877] loop5: detected capacity change from 0 to 512 [ 455.356138][T20877] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 455.397918][T20877] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4033'. [ 455.633179][T20903] loop5: detected capacity change from 0 to 736 [ 455.930435][T20928] tipc: Started in network mode [ 455.949323][T20928] tipc: Node identity 5eaf0a921a1e, cluster identity 4711 [ 455.960766][T20928] tipc: Enabled bearer , priority 17 [ 456.198637][ T28] audit: type=1326 audit(2000000021.800:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.265858][ T28] audit: type=1326 audit(2000000021.800:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.329305][ T28] audit: type=1326 audit(2000000021.800:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.385502][ T28] audit: type=1326 audit(2000000021.830:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.430448][ T28] audit: type=1326 audit(2000000021.830:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.486556][ T28] audit: type=1326 audit(2000000021.830:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.552076][T20971] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.566503][ T28] audit: type=1326 audit(2000000021.830:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.619181][ T28] audit: type=1326 audit(2000000021.830:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20953 comm="syz.5.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 456.670052][T20955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8198 sclass=netlink_route_socket pid=20955 comm=syz.5.4048 [ 456.688009][T20955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4048'. [ 456.840237][T20990] geneve2: entered promiscuous mode [ 456.863553][ T7973] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 41895 - 0 [ 456.877421][T20967] lo speed is unknown, defaulting to 1000 [ 456.884597][T20967] hsr0 speed is unknown, defaulting to 1000 [ 456.904046][ T7973] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 41895 - 0 [ 457.008085][ T7973] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 41895 - 0 [ 457.046566][ T3419] tipc: Node number set to 1152453266 [ 457.052060][ T7973] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 41895 - 0 [ 457.074520][T20993] lo speed is unknown, defaulting to 1000 [ 457.108042][T20993] hsr0 speed is unknown, defaulting to 1000 [ 457.716694][T21003] FAULT_INJECTION: forcing a failure. [ 457.716694][T21003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.794785][T21003] CPU: 1 UID: 0 PID: 21003 Comm: syz.5.4062 Tainted: G W syzkaller #0 PREEMPT(full) [ 457.794925][T21003] Tainted: [W]=WARN [ 457.794934][T21003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.794949][T21003] Call Trace: [ 457.794959][T21003] [ 457.794970][T21003] __dump_stack+0x1d/0x30 [ 457.795002][T21003] dump_stack_lvl+0x95/0xd0 [ 457.795145][T21003] dump_stack+0x15/0x1b [ 457.795169][T21003] should_fail_ex+0x263/0x280 [ 457.795192][T21003] should_fail+0xb/0x20 [ 457.795291][T21003] should_fail_usercopy+0x1a/0x20 [ 457.795430][T21003] _copy_from_user+0x1c/0xb0 [ 457.795558][T21003] ___sys_sendmsg+0xc1/0x1e0 [ 457.795595][T21003] __x64_sys_sendmsg+0xd4/0x160 [ 457.795628][T21003] x64_sys_call+0x194c/0x3020 [ 457.795710][T21003] do_syscall_64+0x12c/0x370 [ 457.795734][T21003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.795756][T21003] RIP: 0033:0x7eff2053c799 [ 457.795776][T21003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.795798][T21003] RSP: 002b:00007eff1ef97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.795923][T21003] RAX: ffffffffffffffda RBX: 00007eff207b5fa0 RCX: 00007eff2053c799 [ 457.795938][T21003] RDX: 0000000000040000 RSI: 0000200000000580 RDI: 0000000000000003 [ 457.795951][T21003] RBP: 00007eff1ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 457.795966][T21003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.795995][T21003] R13: 00007eff207b6038 R14: 00007eff207b5fa0 R15: 00007fffad4e0548 [ 457.796018][T21003] [ 458.187548][T20993] xt_TPROXY: Can be used only with -p tcp or -p udp [ 458.393627][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4067'. [ 458.508978][T21039] xt_limit: Overflow, try lower: 0/0 [ 458.550486][T21043] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.588284][T21048] netlink: 168 bytes leftover after parsing attributes in process `syz.7.4071'. [ 458.625034][T21051] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=273 sclass=netlink_audit_socket pid=21051 comm=syz.1.4072 [ 458.835980][T21065] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 459.646787][T21088] lo speed is unknown, defaulting to 1000 [ 459.676264][T21088] hsr0 speed is unknown, defaulting to 1000 [ 460.009968][T21114] program syz.5.4089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.038004][T21116] lo speed is unknown, defaulting to 1000 [ 460.044367][T21116] hsr0 speed is unknown, defaulting to 1000 [ 460.054910][T21114] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4089'. [ 460.065645][T21119] netlink: 'syz.7.4091': attribute type 10 has an invalid length. [ 460.074266][T21119] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4091'. [ 460.106600][T21119] bond0: entered promiscuous mode [ 460.116526][T21119] bond_slave_0: entered promiscuous mode [ 460.122256][T21119] bond_slave_1: entered promiscuous mode [ 460.151553][T21119] bridge0: port 3(bond0) entered blocking state [ 460.158248][T21119] bridge0: port 3(bond0) entered disabled state [ 460.164895][T21119] bond0: entered allmulticast mode [ 460.170959][T21119] bond_slave_0: entered allmulticast mode [ 460.177043][T21119] bond_slave_1: entered allmulticast mode [ 460.184330][T21119] bridge0: port 3(bond0) entered blocking state [ 460.190771][T21119] bridge0: port 3(bond0) entered forwarding state [ 460.335273][T21133] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 460.367378][T21131] lo speed is unknown, defaulting to 1000 [ 460.442148][T21131] hsr0 speed is unknown, defaulting to 1000 [ 460.639379][T21142] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4097'. [ 460.713466][T21145] lo speed is unknown, defaulting to 1000 [ 460.720013][T21145] hsr0 speed is unknown, defaulting to 1000 [ 460.870417][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4103'. [ 460.932365][T21166] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62939 sclass=netlink_xfrm_socket pid=21166 comm=syz.1.4104 [ 461.076211][T21176] lo speed is unknown, defaulting to 1000 [ 461.085536][T21176] hsr0 speed is unknown, defaulting to 1000 [ 461.105574][T21182] lo speed is unknown, defaulting to 1000 [ 461.173999][T21182] hsr0 speed is unknown, defaulting to 1000 [ 461.286976][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4113'. [ 461.324034][T21200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.376786][T21207] atomic_op ffff88811b6d4128 conn xmit_atomic 0000000000000000 [ 461.465304][T21213] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.892751][T21215] netlink: 'syz.7.4117': attribute type 15 has an invalid length. [ 462.275397][T21237] lo speed is unknown, defaulting to 1000 [ 462.323217][T21237] hsr0 speed is unknown, defaulting to 1000 [ 462.747817][T21248] loop5: detected capacity change from 0 to 512 [ 462.799043][T21248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 462.839065][T21250] FAULT_INJECTION: forcing a failure. [ 462.839065][T21250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.876779][T21250] CPU: 0 UID: 0 PID: 21250 Comm: syz.1.4127 Tainted: G W syzkaller #0 PREEMPT(full) [ 462.876948][T21250] Tainted: [W]=WARN [ 462.876956][T21250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.876974][T21250] Call Trace: [ 462.876982][T21250] [ 462.877004][T21250] __dump_stack+0x1d/0x30 [ 462.877062][T21250] dump_stack_lvl+0x95/0xd0 [ 462.877085][T21250] dump_stack+0x15/0x1b [ 462.877139][T21250] should_fail_ex+0x263/0x280 [ 462.877168][T21250] should_fail+0xb/0x20 [ 462.877247][T21250] should_fail_usercopy+0x1a/0x20 [ 462.877276][T21250] _copy_from_iter+0xcf/0xea0 [ 462.877307][T21250] ? __alloc_skb+0x4f6/0x690 [ 462.877336][T21250] ? __alloc_skb+0x200/0x690 [ 462.877425][T21250] netlink_sendmsg+0x4ae/0x6f0 [ 462.877455][T21250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.877501][T21250] ____sys_sendmsg+0x5af/0x600 [ 462.877571][T21250] ___sys_sendmsg+0x195/0x1e0 [ 462.877691][T21250] __x64_sys_sendmsg+0xd4/0x160 [ 462.877727][T21250] x64_sys_call+0x194c/0x3020 [ 462.877767][T21250] do_syscall_64+0x12c/0x370 [ 462.877799][T21250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.877877][T21250] RIP: 0033:0x7f5b94d4c799 [ 462.877899][T21250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.877922][T21250] RSP: 002b:00007f5b9379f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.877949][T21250] RAX: ffffffffffffffda RBX: 00007f5b94fc5fa0 RCX: 00007f5b94d4c799 [ 462.877974][T21250] RDX: 0000000000040000 RSI: 0000200000000580 RDI: 0000000000000003 [ 462.878049][T21250] RBP: 00007f5b9379f090 R08: 0000000000000000 R09: 0000000000000000 [ 462.878066][T21250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.878079][T21250] R13: 00007f5b94fc6038 R14: 00007f5b94fc5fa0 R15: 00007fffe8b41178 [ 462.878098][T21250] [ 463.143841][T21248] EXT4-fs (loop5): 1 truncate cleaned up [ 463.156271][T21248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.496699][T21260] cgroup: fork rejected by pids controller in /syz1 [ 463.616135][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.782224][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 463.782247][ T28] audit: type=1400 audit(2000000029.380:4705): avc: denied { accept } for pid=21261 comm="syz.0.4132" path="socket:[71523]" dev="sockfs" ino=71523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 463.997840][T21605] FAULT_INJECTION: forcing a failure. [ 463.997840][T21605] name failslab, interval 1, probability 0, space 0, times 0 [ 464.015163][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4129'. [ 464.032832][T21265] netlink: 'syz.8.4129': attribute type 9 has an invalid length. [ 464.042750][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4129'. [ 464.078694][T21605] CPU: 0 UID: 0 PID: 21605 Comm: syz.5.4138 Tainted: G W syzkaller #0 PREEMPT(full) [ 464.078732][T21605] Tainted: [W]=WARN [ 464.078741][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.078758][T21605] Call Trace: [ 464.078766][T21605] [ 464.078774][T21605] __dump_stack+0x1d/0x30 [ 464.078806][T21605] dump_stack_lvl+0x95/0xd0 [ 464.078830][T21605] dump_stack+0x15/0x1b [ 464.078863][T21605] should_fail_ex+0x263/0x280 [ 464.078971][T21605] should_failslab+0x8c/0xb0 [ 464.078996][T21605] kmem_cache_alloc_noprof+0x66/0x400 [ 464.079021][T21605] ? skb_clone+0x151/0x1f0 [ 464.079053][T21605] skb_clone+0x151/0x1f0 [ 464.079159][T21605] __netlink_deliver_tap+0x2c9/0x500 [ 464.079191][T21605] netlink_unicast+0x66b/0x690 [ 464.079220][T21605] netlink_sendmsg+0x5c8/0x6f0 [ 464.079312][T21605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.079342][T21605] ____sys_sendmsg+0x5af/0x600 [ 464.079377][T21605] ___sys_sendmsg+0x195/0x1e0 [ 464.079426][T21605] __x64_sys_sendmsg+0xd4/0x160 [ 464.079481][T21605] x64_sys_call+0x194c/0x3020 [ 464.079507][T21605] do_syscall_64+0x12c/0x370 [ 464.079528][T21605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.079629][T21605] RIP: 0033:0x7eff2053c799 [ 464.079648][T21605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.079667][T21605] RSP: 002b:00007eff1ef97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.079691][T21605] RAX: ffffffffffffffda RBX: 00007eff207b5fa0 RCX: 00007eff2053c799 [ 464.079709][T21605] RDX: 0000000000040000 RSI: 0000200000000580 RDI: 0000000000000003 [ 464.079731][T21605] RBP: 00007eff1ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 464.079811][T21605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.079825][T21605] R13: 00007eff207b6038 R14: 00007eff207b5fa0 R15: 00007fffad4e0548 [ 464.079859][T21605] [ 464.336897][T21265] macvlan1: entered promiscuous mode [ 464.342245][T21265] team0: entered promiscuous mode [ 464.355101][T21695] loop5: detected capacity change from 0 to 1024 [ 464.369725][T21695] EXT4-fs: inline encryption not supported [ 464.377363][T21265] team_slave_0: entered promiscuous mode [ 464.423950][T21265] team_slave_1: entered promiscuous mode [ 464.458355][T21265] macvlan1: entered allmulticast mode [ 464.464526][T21265] team0: entered allmulticast mode [ 464.472756][T21265] team_slave_0: entered allmulticast mode [ 464.481629][T21695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.503103][T21265] team_slave_1: entered allmulticast mode [ 464.509738][T21265] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 464.510743][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.588518][T21711] 9p: Bad value for 'rfdno' [ 465.582920][T21761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.691159][T21777] lo speed is unknown, defaulting to 1000 [ 465.706294][T21777] hsr0 speed is unknown, defaulting to 1000 [ 465.962825][T21802] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4172'. [ 465.974483][T21802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4172'. [ 466.122274][T21817] FAULT_INJECTION: forcing a failure. [ 466.122274][T21817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.141180][T21817] CPU: 1 UID: 0 PID: 21817 Comm: syz.8.4176 Tainted: G W syzkaller #0 PREEMPT(full) [ 466.141215][T21817] Tainted: [W]=WARN [ 466.141223][T21817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.141291][T21817] Call Trace: [ 466.141299][T21817] [ 466.141320][T21817] __dump_stack+0x1d/0x30 [ 466.141352][T21817] dump_stack_lvl+0x95/0xd0 [ 466.141379][T21817] dump_stack+0x15/0x1b [ 466.141404][T21817] should_fail_ex+0x263/0x280 [ 466.141497][T21817] should_fail+0xb/0x20 [ 466.141574][T21817] should_fail_usercopy+0x1a/0x20 [ 466.141598][T21817] _copy_from_user+0x1c/0xb0 [ 466.141632][T21817] kstrtouint_from_user+0x69/0xf0 [ 466.141655][T21817] proc_fail_nth_write+0x50/0x160 [ 466.141702][T21817] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 466.141738][T21817] vfs_write+0x269/0x9f0 [ 466.141845][T21817] ? __rcu_read_unlock+0x4e/0x70 [ 466.141870][T21817] ? __fget_files+0x184/0x1c0 [ 466.141899][T21817] ? mutex_lock+0x57/0x90 [ 466.141990][T21817] ksys_write+0xdc/0x1a0 [ 466.142014][T21817] __x64_sys_write+0x40/0x50 [ 466.142114][T21817] x64_sys_call+0x27e1/0x3020 [ 466.142139][T21817] do_syscall_64+0x12c/0x370 [ 466.142229][T21817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.142251][T21817] RIP: 0033:0x7f7d250bcfce [ 466.142296][T21817] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 466.142317][T21817] RSP: 002b:00007f7d23b56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.142344][T21817] RAX: ffffffffffffffda RBX: 00007f7d23b576c0 RCX: 00007f7d250bcfce [ 466.142408][T21817] RDX: 0000000000000001 RSI: 00007f7d23b570a0 RDI: 0000000000000004 [ 466.142424][T21817] RBP: 00007f7d23b57090 R08: 0000000000000000 R09: 0000000000000000 [ 466.142440][T21817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.142455][T21817] R13: 00007f7d25376038 R14: 00007f7d25375fa0 R15: 00007ffd373a7f98 [ 466.142478][T21817] [ 466.439550][T21831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4181'. [ 466.513916][T21831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21831 comm=syz.1.4181 [ 466.526672][T21832] TCP: TCP_TX_DELAY enabled [ 466.531676][T21834] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.478813][T21879] netlink: 'syz.7.4192': attribute type 14 has an invalid length. [ 467.654756][T21890] lo speed is unknown, defaulting to 1000 [ 467.687647][T21890] hsr0 speed is unknown, defaulting to 1000 [ 467.857509][T21906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.876046][T21906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.450353][T21936] loop5: detected capacity change from 0 to 8192 [ 468.496322][T21936] loop5: p1 p2 p4 [ 468.502229][T21936] loop5: p4 size 262912 extends beyond EOD, truncated [ 468.529428][T21948] lo speed is unknown, defaulting to 1000 [ 468.541376][T21948] hsr0 speed is unknown, defaulting to 1000 [ 468.631622][T21958] lo speed is unknown, defaulting to 1000 [ 468.638632][T21958] hsr0 speed is unknown, defaulting to 1000 [ 468.756400][T21964] bond3: entered allmulticast mode [ 468.786277][T21964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 468.805139][T21964] xt_TCPMSS: Only works on TCP SYN packets [ 468.854571][T21970] lo speed is unknown, defaulting to 1000 [ 468.872588][T21970] hsr0 speed is unknown, defaulting to 1000 [ 468.938749][T21982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4223'. [ 469.000970][T21989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=21989 comm=syz.0.4225 [ 469.367419][T22009] netlink: 'syz.7.4230': attribute type 1 has an invalid length. [ 469.483286][T22014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4230'. [ 469.533334][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4230'. [ 469.546785][T22009] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.585555][T22013] bond4: (slave veth3): Enslaving as an active interface with a down link [ 469.670377][T22018] lo speed is unknown, defaulting to 1000 [ 469.686278][T22018] hsr0 speed is unknown, defaulting to 1000 [ 469.741030][ T28] audit: type=1400 audit(2000000035.310:4706): avc: denied { shutdown } for pid=22019 comm="syz.7.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.932752][T22038] loop5: detected capacity change from 0 to 1024 [ 469.944144][T22030] netlink: 'syz.8.4235': attribute type 39 has an invalid length. [ 469.958067][T22025] bridge0: port 3(bond0) entered disabled state [ 469.964518][T22025] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.971816][T22025] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.983474][T22038] EXT4-fs: inline encryption not supported [ 470.045644][T22038] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 470.083767][T22025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.095050][T22025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.104662][T22025] tipc: Resetting bearer [ 470.222202][T22044] netlink: 4100 bytes leftover after parsing attributes in process `syz.7.4238'. [ 470.297232][ T28] audit: type=1326 audit(2000000035.900:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.336910][ T7968] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.341681][ T28] audit: type=1326 audit(2000000035.900:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.356498][ T7968] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.370068][ T28] audit: type=1326 audit(2000000035.900:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.407297][ T28] audit: type=1326 audit(2000000035.900:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.431014][ T7968] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.438812][ T28] audit: type=1326 audit(2000000035.900:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.440929][ T7968] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.476800][ T28] audit: type=1326 audit(2000000035.900:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.547003][ T28] audit: type=1326 audit(2000000035.900:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.578854][ T28] audit: type=1326 audit(2000000035.900:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.603145][ T28] audit: type=1326 audit(2000000035.900:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.7.4240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb8a834c799 code=0x7ffc0000 [ 470.658758][T22055] 9p: Bad value for 'rfdno' [ 470.798905][T22072] loop5: detected capacity change from 0 to 512 [ 471.016932][T22074] lo speed is unknown, defaulting to 1000 [ 471.028914][T22074] hsr0 speed is unknown, defaulting to 1000 [ 471.649210][T22086] lo speed is unknown, defaulting to 1000 [ 471.655411][T22086] hsr0 speed is unknown, defaulting to 1000 [ 471.845258][T22102] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.225344][T22121] lo speed is unknown, defaulting to 1000 [ 472.241261][T22121] hsr0 speed is unknown, defaulting to 1000 [ 472.307606][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 472.331283][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4265'. [ 472.356660][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 472.368675][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 473.460115][T22152] veth1_macvtap: left promiscuous mode [ 473.549212][T22155] xt_hashlimit: size too large, truncated to 1048576 [ 473.895147][T22169] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4277'. [ 473.950033][T22169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4277'. [ 473.978888][T22171] loop5: detected capacity change from 0 to 128 [ 474.091186][T22175] lo speed is unknown, defaulting to 1000 [ 474.137616][T22175] hsr0 speed is unknown, defaulting to 1000 [ 474.146301][T22185] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.385877][T22132] Bluetooth: hci0: command 0x1003 tx timeout [ 474.426072][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 474.936661][T22220] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.950648][T22222] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4294'. [ 475.019957][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4295'. [ 475.055905][T22224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4295'. [ 475.088293][T22224] geneve2: entered promiscuous mode [ 475.105951][T22224] geneve2: entered allmulticast mode [ 475.116413][ T360] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.141857][ T360] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.178576][ T360] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.196016][ T360] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.269890][ T141] tipc: Subscription rejected, illegal request [ 475.273508][ T28] kauditd_printk_skb: 177 callbacks suppressed [ 475.273580][ T28] audit: type=1107 audit(2000000040.870:4893): pid=22231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 475.453678][T22256] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4304'. [ 475.615792][T22259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4305'. [ 475.699302][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4308'. [ 475.780732][T22276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4312'. [ 475.850550][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 475.885991][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4313'. [ 475.921668][T22287] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4316'. [ 475.998453][T22293] netlink: 'syz.8.4318': attribute type 21 has an invalid length. [ 476.035968][T22293] netlink: 'syz.8.4318': attribute type 1 has an invalid length. [ 476.162212][T22305] IPv6: sit1: Disabled Multicast RS [ 476.177466][T22305] sit1: entered allmulticast mode [ 476.393357][T22322] io-wq is not configured for unbound workers [ 476.394384][T22322] netlink: 'syz.5.4328': attribute type 1 has an invalid length. [ 476.409680][T22322] loop5: detected capacity change from 0 to 128 [ 476.416921][T22322] vfat: Unknown parameter '18446744073709551615' [ 476.863021][T22348] ipip0: entered promiscuous mode [ 477.197331][T22361] lo speed is unknown, defaulting to 1000 [ 477.203391][T22361] hsr0 speed is unknown, defaulting to 1000 [ 477.449958][T22369] loop5: detected capacity change from 0 to 512 [ 477.478392][T22374] netlink: 'syz.8.4346': attribute type 1 has an invalid length. [ 477.503411][T22374] bond2: entered promiscuous mode [ 477.510111][T22374] bond2: entered allmulticast mode [ 477.546213][T22374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.563469][T22375] bridge2: entered promiscuous mode [ 477.576303][T22375] bridge2: entered allmulticast mode [ 477.591053][T22375] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 477.615912][ T360] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 477.668683][T22375] netlink: 'syz.8.4346': attribute type 5 has an invalid length. [ 477.669492][T22372] lo speed is unknown, defaulting to 1000 [ 477.717153][T22372] hsr0 speed is unknown, defaulting to 1000 [ 477.767062][ T30] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 478.268207][T22412] netlink: 'syz.0.4358': attribute type 5 has an invalid length. [ 478.851263][T22447] lo speed is unknown, defaulting to 1000 [ 478.881106][T22447] hsr0 speed is unknown, defaulting to 1000 [ 479.262465][T22467] netlink: 'syz.7.4374': attribute type 39 has an invalid length. [ 479.382725][ T28] audit: type=1326 audit(2000000044.980:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.455889][ T28] audit: type=1326 audit(2000000044.980:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.517772][ T28] audit: type=1326 audit(2000000044.980:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.566130][ T28] audit: type=1326 audit(2000000044.980:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.625837][ T28] audit: type=1326 audit(2000000044.980:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.676439][ T28] audit: type=1326 audit(2000000044.980:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.739718][ T28] audit: type=1326 audit(2000000044.980:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.810447][ T28] audit: type=1326 audit(2000000044.980:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 479.847686][ T28] audit: type=1326 audit(2000000044.980:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22453 comm="syz.8.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250fc799 code=0x7ffc0000 [ 480.227875][T22494] netlink: 'syz.7.4384': attribute type 2 has an invalid length. [ 480.271294][T22494] __nla_validate_parse: 16 callbacks suppressed [ 480.271583][T22494] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4384'. [ 480.304128][T22498] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4385'. [ 480.583899][T22518] Cannot find add_set index 0 as target [ 480.748511][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4392'. [ 480.849061][T22525] hsr_slave_1 (unregistering): left promiscuous mode [ 481.151500][T22531] loop5: detected capacity change from 0 to 512 [ 481.158525][T22531] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 481.204597][T22531] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4396: bad orphan inode 131083 [ 481.242011][T22531] loop5: lost filesystem error report for type 5 error -117 [ 481.242690][T22531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.308996][T22537] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4398'. [ 481.377307][T22537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4398'. [ 481.435626][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.486161][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 481.486177][ T28] audit: type=1400 audit(2000000047.090:4963): avc: denied { unmount } for pid=19970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 481.544402][T22552] lo speed is unknown, defaulting to 1000 [ 481.553676][T22552] hsr0 speed is unknown, defaulting to 1000 [ 481.722702][ T28] audit: type=1400 audit(2000000047.320:4964): avc: denied { create } for pid=22560 comm="syz.5.4406" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.757262][T22564] netlink: 'syz.5.4407': attribute type 1 has an invalid length. [ 481.913037][T22570] lo speed is unknown, defaulting to 1000 [ 481.946794][T22570] hsr0 speed is unknown, defaulting to 1000 [ 482.197691][T22580] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4412'. [ 482.360347][T22570] 9p: Bad value for 'wfdno' [ 482.561844][ T28] audit: type=1400 audit(2000000048.160:4965): avc: denied { search } for pid=22601 comm="syz.8.4418" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 482.602922][ T28] audit: type=1400 audit(2000000048.160:4966): avc: denied { search } for pid=22601 comm="syz.8.4418" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 482.636711][T22602] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4418'. [ 482.645871][ T28] audit: type=1400 audit(2000000048.160:4967): avc: denied { read open } for pid=22601 comm="syz.8.4418" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 482.655518][T22602] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 482.701478][T22602] ipvlan0: entered promiscuous mode [ 482.836824][T22623] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4423'. [ 483.011777][T22640] netlink: 'syz.7.4429': attribute type 9 has an invalid length. [ 483.042286][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4429'. [ 483.064664][T22640] macvlan2: entered promiscuous mode [ 483.095895][T22640] team0: entered promiscuous mode [ 483.105444][T22640] team_slave_0: entered promiscuous mode [ 483.111703][T22640] team_slave_1: entered promiscuous mode [ 483.119252][T22640] macvlan2: entered allmulticast mode [ 483.125468][T22640] team0: entered allmulticast mode [ 483.131137][T22640] team_slave_0: entered allmulticast mode [ 483.137112][T22640] team_slave_1: entered allmulticast mode [ 483.143054][T22640] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.291349][T22658] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4434'. [ 483.389580][T22664] tipc: New replicast peer: 255.255.255.255 [ 483.403543][T22664] tipc: Enabled bearer , priority 10 [ 483.410839][T22664] tipc: Disabling bearer [ 483.430381][T22661] netlink: 'syz.7.4435': attribute type 10 has an invalid length. [ 483.439056][T22661] vxcan1: entered promiscuous mode [ 483.446361][T22661] vxcan1: entered allmulticast mode [ 483.451596][T22661] team0: Device vxcan1 is of different type [ 483.474763][T22670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.490060][T22670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.500280][T22672] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 483.603402][ T28] audit: type=1400 audit(2000000049.190:4968): avc: denied { setattr } for pid=22686 comm="syz.7.4447" name="PACKET" dev="sockfs" ino=76948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 485.117317][ T30] bridge_slave_1: left allmulticast mode [ 485.123011][ T30] bridge_slave_1: left promiscuous mode [ 485.155924][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.215972][T22745] futex_wake_op: syz.8.4463 tries to shift op by -65; fix this program [ 485.246077][ T30] bridge_slave_0: left allmulticast mode [ 485.251924][ T30] bridge_slave_0: left promiscuous mode [ 485.295647][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.669985][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.708170][ T30] bond_slave_0: left promiscuous mode [ 485.730775][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.766871][ T30] bond_slave_1: left promiscuous mode [ 485.789960][ T30] bond0 (unregistering): Released all slaves [ 485.818178][ T30] bond1 (unregistering): Released all slaves [ 485.850508][ T30] bond2 (unregistering): Released all slaves [ 485.938341][ T30] tipc: Disabling bearer [ 485.949483][ T30] tipc: Disabling bearer [ 485.955064][ T30] tipc: Left network mode [ 485.975406][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.003011][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.237376][T22769] __nla_validate_parse: 2 callbacks suppressed [ 487.237395][T22769] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4470'. [ 487.667795][T22791] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4477'. [ 487.679902][T22793] FAULT_INJECTION: forcing a failure. [ 487.679902][T22793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.693320][T22793] CPU: 1 UID: 0 PID: 22793 Comm: syz.0.4478 Tainted: G W syzkaller #0 PREEMPT(full) [ 487.693356][T22793] Tainted: [W]=WARN [ 487.693365][T22793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.693380][T22793] Call Trace: [ 487.693388][T22793] [ 487.693398][T22793] __dump_stack+0x1d/0x30 [ 487.693459][T22793] dump_stack_lvl+0x95/0xd0 [ 487.693481][T22793] dump_stack+0x15/0x1b [ 487.693501][T22793] should_fail_ex+0x263/0x280 [ 487.693525][T22793] should_fail+0xb/0x20 [ 487.693610][T22793] should_fail_usercopy+0x1a/0x20 [ 487.693650][T22793] _copy_to_user+0x20/0xa0 [ 487.693677][T22793] simple_read_from_buffer+0xb5/0x130 [ 487.693703][T22793] proc_fail_nth_read+0x10e/0x150 [ 487.693741][T22793] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 487.693853][T22793] vfs_read+0x1ab/0x7f0 [ 487.693889][T22793] ? __rcu_read_unlock+0x4e/0x70 [ 487.693915][T22793] ? __fget_files+0x184/0x1c0 [ 487.693980][T22793] ? mutex_lock+0x57/0x90 [ 487.694014][T22793] ksys_read+0xdc/0x1a0 [ 487.694121][T22793] __x64_sys_read+0x40/0x50 [ 487.694157][T22793] x64_sys_call+0x2886/0x3020 [ 487.694184][T22793] do_syscall_64+0x12c/0x370 [ 487.694208][T22793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.694283][T22793] RIP: 0033:0x7f9f050fcfce [ 487.694384][T22793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 487.694411][T22793] RSP: 002b:00007f9f03b96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.694432][T22793] RAX: ffffffffffffffda RBX: 00007f9f03b976c0 RCX: 00007f9f050fcfce [ 487.694462][T22793] RDX: 000000000000000f RSI: 00007f9f03b970a0 RDI: 0000000000000006 [ 487.694479][T22793] RBP: 00007f9f03b97090 R08: 0000000000000000 R09: 0000000000000000 [ 487.694508][T22793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.694524][T22793] R13: 00007f9f053b6038 R14: 00007f9f053b5fa0 R15: 00007ffe61e527d8 [ 487.694547][T22793] [ 487.989373][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4480'. [ 488.005923][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4480'. [ 488.326107][T22811] lo speed is unknown, defaulting to 1000 [ 488.336807][T22811] hsr0 speed is unknown, defaulting to 1000 [ 488.643410][T22830] 9p: Bad value for 'rfdno' [ 488.809515][T22846] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4498'. [ 488.932709][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4500'. [ 488.958013][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4500'. [ 489.182885][T22877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4509'. [ 489.677834][T22901] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4516'. [ 489.698302][T22901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4516'. [ 489.749979][T22911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.760831][T22911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.927293][ T28] audit: type=1326 audit(2000000055.530:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22914 comm="syz.1.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 489.971823][ T28] audit: type=1326 audit(2000000055.530:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22914 comm="syz.1.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 490.014374][ T28] audit: type=1326 audit(2000000055.530:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22914 comm="syz.1.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 490.038752][ T28] audit: type=1326 audit(2000000055.530:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22914 comm="syz.1.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 490.066725][ T28] audit: type=1326 audit(2000000055.530:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22914 comm="syz.1.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 490.152271][T22922] batadv0: Caught tx_queue_len zero misconfig [ 490.162132][T22922] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 490.174145][T22922] bridge5: entered promiscuous mode [ 490.183047][T22922] bridge5: entered allmulticast mode [ 492.660610][T22982] netlink: 'syz.8.4540': attribute type 3 has an invalid length. [ 492.689263][T22982] __nla_validate_parse: 6 callbacks suppressed [ 492.689282][T22982] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4540'. [ 492.850077][T22989] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4543'. [ 493.364962][T23025] lo speed is unknown, defaulting to 1000 [ 493.400526][T23025] hsr0 speed is unknown, defaulting to 1000 [ 493.722432][T23045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4555'. [ 493.738418][T23030] lo speed is unknown, defaulting to 1000 [ 493.763335][T23030] hsr0 speed is unknown, defaulting to 1000 [ 493.778365][T23047] netlink: 'syz.1.4556': attribute type 1 has an invalid length. [ 493.833569][T23025] syz.0.4552 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 493.850476][T23047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.855880][T23025] CPU: 0 UID: 0 PID: 23025 Comm: syz.0.4552 Tainted: G W syzkaller #0 PREEMPT(full) [ 493.855915][T23025] Tainted: [W]=WARN [ 493.855923][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.855936][T23025] Call Trace: [ 493.856012][T23025] [ 493.856021][T23025] __dump_stack+0x1d/0x30 [ 493.856050][T23025] dump_stack_lvl+0x95/0xd0 [ 493.856074][T23025] dump_stack+0x15/0x1b [ 493.856164][T23025] dump_header+0x80/0x240 [ 493.856254][T23025] oom_kill_process+0x295/0x350 [ 493.856279][T23025] out_of_memory+0x97d/0xb80 [ 493.856349][T23025] try_charge_memcg+0x62e/0xa10 [ 493.856389][T23025] obj_cgroup_charge_pages+0x23/0xc0 [ 493.856522][T23025] __memcg_kmem_charge_page+0x9e/0x170 [ 493.856558][T23025] __alloc_frozen_pages_noprof+0x18a/0x360 [ 493.856599][T23025] alloc_pages_mpol+0xb3/0x260 [ 493.856630][T23025] alloc_pages_noprof+0x8f/0x130 [ 493.856665][T23025] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 493.856703][T23025] __kvmalloc_node_noprof+0x3d4/0x650 [ 493.856730][T23025] ? futex_hash_allocate+0x190/0x9d0 [ 493.856812][T23025] ? futex_hash_allocate+0x190/0x9d0 [ 493.856893][T23025] futex_hash_allocate+0x190/0x9d0 [ 493.856928][T23025] ? cap_task_prctl+0x13f/0x6e0 [ 493.857009][T23025] futex_hash_prctl+0xd8/0xf0 [ 493.857051][T23025] __se_sys_prctl+0xa3d/0x13f0 [ 493.857081][T23025] __x64_sys_prctl+0x67/0x80 [ 493.857154][T23025] x64_sys_call+0x2533/0x3020 [ 493.857186][T23025] do_syscall_64+0x12c/0x370 [ 493.857252][T23025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.857276][T23025] RIP: 0033:0x7f9f0513c799 [ 493.857294][T23025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.857314][T23025] RSP: 002b:00007f9f03b97028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 493.857337][T23025] RAX: ffffffffffffffda RBX: 00007f9f053b5fa0 RCX: 00007f9f0513c799 [ 493.857409][T23025] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 493.857423][T23025] RBP: 00007f9f051d2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 493.857438][T23025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.857452][T23025] R13: 00007f9f053b6038 R14: 00007f9f053b5fa0 R15: 00007ffe61e527d8 [ 493.857473][T23025] [ 493.857547][T23025] memory: usage 302000kB, limit 307200kB, failcnt 79 [ 494.105919][T23025] memory+swap: usage 292120kB, limit 9007199254740988kB, failcnt 0 [ 494.114219][T23025] kmem: usage 274088kB, limit 9007199254740988kB, failcnt 0 [ 494.135903][T23025] Memory cgroup stats for /syz0: [ 494.136152][T23025] cache 200704 [ 494.177689][T23025] rss 356352 [ 494.180919][T23025] shmem 0 [ 494.183865][T23025] mapped_file 200704 [ 494.226006][T23025] dirty 200704 [ 494.229424][T23025] writeback 0 [ 494.232719][T23025] workingset_refault_anon 937 [ 494.283865][T23030] chnl_net:caif_netlink_parms(): no params data found [ 494.285939][T23025] workingset_refault_file 49 [ 494.295277][T23025] swap 0 [ 494.348251][T23025] swapcached 16596992 [ 494.352278][T23025] pgpgin 706429 [ 494.355741][T23025] pgpgout 706293 [ 494.416838][T23025] pgfault 562008 [ 494.420477][T23025] pgmajfault 133 [ 494.424112][T23025] inactive_anon 356352 [ 494.476719][T23025] active_anon 0 [ 494.480271][T23025] inactive_file 0 [ 494.483923][T23025] active_file 200704 [ 494.538126][T23025] unevictable 0 [ 494.543638][T23025] hierarchical_memory_limit 314572800 [ 494.567806][T23025] hierarchical_memsw_limit 9223372036854771712 [ 494.574086][T23025] total_cache 200704 [ 494.629726][T23025] total_rss 356352 [ 494.633495][T23025] total_shmem 0 [ 494.653015][T23030] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.660342][T23025] total_mapped_file 200704 [ 494.664777][T23025] total_dirty 200704 [ 494.673116][T23030] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.680806][T23030] bridge_slave_0: entered allmulticast mode [ 494.682587][T23025] total_writeback 0 [ 494.687663][T23030] bridge_slave_0: entered promiscuous mode [ 494.691691][T23025] total_workingset_refault_anon 937 [ 494.697689][T23030] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.709791][T23030] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.717194][T23030] bridge_slave_1: entered allmulticast mode [ 494.724088][T23030] bridge_slave_1: entered promiscuous mode [ 494.730911][T23025] total_workingset_refault_file 49 [ 494.754439][T23025] total_swap 0 [ 494.760182][T23030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.773684][T23025] total_swapcached 16596992 [ 494.775083][ T28] audit: type=1400 audit(2000000060.370:4974): avc: denied { write } for pid=23069 comm="syz.1.4560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 494.799224][T23025] total_pgpgin 706429 [ 494.803461][T23025] total_pgpgout 706293 [ 494.808593][T23025] total_pgfault 562008 [ 494.816045][T23025] total_pgmajfault 133 [ 494.816468][ T7968] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.822932][T23025] total_inactive_anon 356352 [ 494.846640][T23030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.865941][T23025] total_active_anon 0 [ 494.876060][T23025] total_inactive_file 0 [ 494.884771][T23025] total_active_file 200704 [ 494.896951][T23025] total_unevictable 0 [ 494.902916][ T7968] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.904284][T23025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4552,pid=23024,uid=0 [ 494.939427][T23030] team0: Port device team_slave_0 added [ 494.956446][T23030] team0: Port device team_slave_1 added [ 494.971110][T23025] Memory cgroup out of memory: Killed process 23025 (syz.0.4552) total-vm:94160kB, anon-rss:1420kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 495.004172][ T7968] netdevsim netdevsim8 netdevsim1 (unregistering): left allmulticast mode [ 495.015987][ T7968] netdevsim netdevsim8 netdevsim1 (unregistering): left promiscuous mode [ 495.034619][ T7968] bridge0: port 3(netdevsim1) entered disabled state [ 495.048939][T23078] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4562'. [ 495.066615][T23078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4562'. [ 495.077684][ T7968] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.096608][T23078] netlink: 'syz.1.4562': attribute type 2 has an invalid length. [ 495.108841][T23030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.125746][T23030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.154352][T23030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.166755][T23030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.173742][T23030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.209262][T23030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.221362][ T7968] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.233890][T23084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4565'. [ 495.263910][T23030] hsr_slave_0: entered promiscuous mode [ 495.286293][T23030] hsr_slave_1: entered promiscuous mode [ 495.295620][T23030] debugfs: 'hsr0' already exists in 'hsr' [ 495.301717][T23030] Cannot create hsr debugfs directory [ 495.394455][T23090] loop5: detected capacity change from 0 to 512 [ 495.460424][T23090] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 495.516605][ T7968] bridge_slave_1: left allmulticast mode [ 495.523260][ T7968] bridge_slave_1: left promiscuous mode [ 495.529655][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.537664][ T7968] bridge_slave_0: left allmulticast mode [ 495.543352][ T7968] bridge_slave_0: left promiscuous mode [ 495.549744][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.697045][ T7968] bond2 (unregistering): (slave bridge2): Removing an active aggregator [ 495.705933][ T7968] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 495.726079][ T7968] bridge2 (unregistering): left promiscuous mode [ 495.732643][ T7968] bridge2 (unregistering): left allmulticast mode [ 495.797680][ T7968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.822069][ T7968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.833861][ T7968] bond0 (unregistering): Released all slaves [ 495.847417][ T7968] bond1 (unregistering): Released all slaves [ 495.866051][ T7968] bond2 (unregistering): Released all slaves [ 495.927624][ T7968] tipc: Left network mode [ 495.971915][T23104] sctp: [Deprecated]: syz.1.4569 (pid 23104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.971915][T23104] Use struct sctp_sack_info instead [ 495.989544][ T7968] hsr_slave_0: left promiscuous mode [ 495.995724][ T7968] hsr_slave_1: left promiscuous mode [ 496.006031][ T7968] team0: left allmulticast mode [ 496.011026][ T7968] team_slave_0: left allmulticast mode [ 496.022820][T23106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4569'. [ 496.047540][ T7968] team_slave_1: left allmulticast mode [ 496.053042][ T7968] team0: left promiscuous mode [ 496.067496][ T7968] team_slave_0: left promiscuous mode [ 496.074132][ T7968] team_slave_1: left promiscuous mode [ 496.125075][ T7968] team0 (unregistering): Port device team_slave_1 removed [ 496.165070][ T7968] team0 (unregistering): Port device team_slave_0 removed [ 496.348187][T23129] lo speed is unknown, defaulting to 1000 [ 496.387072][T23129] hsr0 speed is unknown, defaulting to 1000 [ 496.548499][T23146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4575'. [ 496.749280][T23030] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 497.248162][ T28] audit: type=1400 audit(2000000062.850:4975): avc: denied { lock } for pid=23167 comm="syz.0.4582" path="socket:[78850]" dev="sockfs" ino=78850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 497.311408][T23030] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 497.320747][T23030] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 497.393064][T23170] can0: slcan on ptm0. [ 497.435898][T23030] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 497.455922][T23167] can0 (unregistered): slcan off ptm0. [ 497.643064][T23030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.685944][T23030] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.713664][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.720850][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.764170][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.771385][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.974367][T23224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4587'. [ 498.071626][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'. [ 498.108792][T23232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.154202][T23030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.208072][T23248] netlink: 'syz.5.4590': attribute type 12 has an invalid length. [ 498.239229][T23254] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4592'. [ 498.293833][T23259] tipc: Started in network mode [ 498.296492][T23261] netlink: 'syz.5.4595': attribute type 21 has an invalid length. [ 498.300368][T23259] tipc: Node identity ac14140f, cluster identity 4711 [ 498.307134][T23261] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.333712][T23259] tipc: New replicast peer: 10.1.1.0 [ 498.339768][T23259] tipc: Enabled bearer , priority 10 [ 498.351345][T23259] tipc: New replicast peer: 100.1.1.2 [ 498.359687][ T28] audit: type=1400 audit(2000000063.950:4976): avc: denied { map } for pid=23257 comm="syz.1.4593" path="socket:[79012]" dev="sockfs" ino=79012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 498.407598][T23268] tipc: Enabled bearer , priority 0 [ 498.422911][T23268] syzkaller0: MTU too low for tipc bearer [ 498.429057][T23268] tipc: Disabling bearer [ 498.437820][T23268] xt_hashlimit: size too large, truncated to 1048576 [ 498.445371][T23268] xt_hashlimit: max too large, truncated to 1048576 [ 498.477301][T23265] loop5: detected capacity change from 0 to 8192 [ 498.520952][T23030] veth0_vlan: entered promiscuous mode [ 498.541817][T23265] syz.5.4596: attempt to access beyond end of device [ 498.541817][T23265] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 498.545376][T23030] veth1_vlan: entered promiscuous mode [ 498.570802][T23265] Buffer I/O error on dev loop5, logical block 57847, async page read [ 498.580513][T23265] syz.5.4596: attempt to access beyond end of device [ 498.580513][T23265] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 498.597498][T23265] Buffer I/O error on dev loop5, logical block 57847, async page read [ 498.607495][T23265] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 498.610851][T23030] veth0_macvtap: entered promiscuous mode [ 498.621266][T23265] FAT-fs (loop5): Filesystem has been set read-only [ 498.629027][T23265] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 498.640021][T23274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4598'. [ 498.650920][T23030] veth1_macvtap: entered promiscuous mode [ 498.686286][T23030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.719148][T23030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.758056][ T7973] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.772357][T23279] loop5: detected capacity change from 0 to 512 [ 498.793701][ T7973] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.802820][ T7973] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.815898][ T28] audit: type=1326 audit(2000000064.340:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 498.846405][T23279] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 498.855157][T23288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4603'. [ 498.865127][ T28] audit: type=1326 audit(2000000064.340:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 498.903338][T23279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 498.911595][ T7973] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.922136][ T28] audit: type=1326 audit(2000000064.340:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 498.947698][ T28] audit: type=1326 audit(2000000064.340:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 498.971505][ T28] audit: type=1326 audit(2000000064.340:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 498.995117][ T28] audit: type=1326 audit(2000000064.340:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 499.023540][ T28] audit: type=1326 audit(2000000064.340:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 499.048869][ T28] audit: type=1326 audit(2000000064.340:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23280 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b94d4c799 code=0x7ffc0000 [ 499.050431][T23279] System zones: 1-12 [ 499.098784][T23279] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.4600: corrupted in-inode xattr: e_value size too large [ 499.136009][T23279] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 499.140148][T23279] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4600: couldn't read orphan inode 15 (err -117) [ 499.149454][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 499.149496][ C1] EXT4-fs (loop5): initial error at time 2000000064: ext4_iget_extra_inode:5025: inode 15 [ 499.149541][ C1] EXT4-fs (loop5): last error at time 2000000064: ext4_iget_extra_inode:5025: inode 15 [ 499.201957][T23279] loop5: lost filesystem error report for type 5 error -117 [ 499.202496][T23279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.251884][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.287211][T23310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4609'. [ 499.335089][T23317] batadv_slave_0: Caught tx_queue_len zero misconfig [ 499.354279][T23319] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 499.455887][ T8967] tipc: Node number set to 2886997007 [ 499.459950][T23334] netlink: 'syz.8.4612': attribute type 30 has an invalid length. [ 499.765624][T23356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4622'. [ 500.040798][T23368] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 500.051244][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4626'. [ 500.780302][T23390] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 500.823022][T23390] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 501.100133][T23395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4635'. [ 501.206980][T23403] netlink: 'syz.1.4639': attribute type 29 has an invalid length. [ 501.217153][T23399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4637'. [ 502.114021][T23443] netlink: 'syz.5.4651': attribute type 39 has an invalid length. [ 502.166609][T23443] hsr_slave_1 (unregistering): left promiscuous mode [ 502.271778][T23450] netlink: 'syz.8.4652': attribute type 4 has an invalid length. [ 502.459316][T23460] loop5: detected capacity change from 0 to 1024 [ 502.581185][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 502.581204][ T28] audit: type=1400 audit(2000000068.170:4991): avc: denied { accept } for pid=23474 comm="syz.8.4661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 502.607493][T23460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 502.615743][T23460] System zones: 0-1, 3-8 [ 502.828947][T23460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 502.972701][T23502] 9p: Bad value for 'rfdno' [ 503.191373][T23460] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.599333][T23518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23518 comm=syz.0.4673 [ 503.630623][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 503.705572][T23518] xt_CT: No such helper "snmp_trap" [ 503.773421][T23526] __nla_validate_parse: 6 callbacks suppressed [ 503.773441][T23526] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4674'. [ 503.799381][T23538] netlink: 'syz.1.4680': attribute type 6 has an invalid length. [ 503.844544][T23537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4680'. [ 503.872606][T23550] syzkaller1: entered promiscuous mode [ 503.887355][T23550] syzkaller1: entered allmulticast mode [ 504.020798][T23576] netlink: 220 bytes leftover after parsing attributes in process `syz.8.4692'. [ 504.076877][T23584] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4694'. [ 504.107272][T23550] loop5: detected capacity change from 0 to 512 [ 504.138371][T23586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4695'. [ 504.221160][T23592] xt_hashlimit: max too large, truncated to 1048576 [ 504.254573][T23595] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 504.261141][T23595] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 504.271540][T23595] vhci_hcd vhci_hcd.0: Device attached [ 504.297660][T23598] vhci_hcd: connection closed [ 504.298144][ T7968] vhci_hcd vhci_hcd.1: stop threads [ 504.309584][ T7968] vhci_hcd vhci_hcd.1: release socket [ 504.320739][ T7968] vhci_hcd vhci_hcd.1: disconnect device [ 504.392658][T23550] EXT4-fs (loop5): 1 orphan inode deleted [ 504.433268][T23550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.553887][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.750937][T23618] netlink: 'syz.5.4704': attribute type 1 has an invalid length. [ 504.771710][T23618] bond1: entered promiscuous mode [ 504.782917][T23618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.791344][T23628] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4706'. [ 504.802405][T23618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4704'. [ 504.811740][T23618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4704'. [ 504.838995][T23618] serio: Serial port ptm0 [ 504.855407][T23637] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4710'. [ 504.934321][T23639] bond1: (slave bridge2): making interface the new active one [ 504.944988][T23639] bridge2: entered promiscuous mode [ 504.953474][T23639] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 505.061919][T23652] lo speed is unknown, defaulting to 1000 [ 505.077389][T23652] hsr0 speed is unknown, defaulting to 1000 [ 505.119767][T23657] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4717'. [ 505.355630][T23660] syzkaller0: entered promiscuous mode [ 505.376795][T23660] syzkaller0: entered allmulticast mode [ 505.407561][T23660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23660 comm=syz.7.4718 [ 505.560514][T23666] tipc: Enabled bearer , priority 0 [ 505.572944][T23666] syzkaller0: entered promiscuous mode [ 505.585495][T23666] syzkaller0: entered allmulticast mode [ 505.643006][T23666] tipc: Resetting bearer [ 505.694756][T23665] tipc: Resetting bearer [ 505.783168][T23665] tipc: Disabling bearer [ 506.878161][ T7978] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.889655][T23701] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.896929][T23701] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.942326][ T7978] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.958250][ T7978] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.975861][ T7978] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.052898][T23714] block device autoloading is deprecated and will be removed. [ 507.167317][T23732] syzkaller1: entered allmulticast mode [ 507.187196][T23739] futex_wake_op: syz.0.4746 tries to shift op by -3; fix this program [ 507.218711][T23743] gretap0: entered promiscuous mode [ 507.267849][ T69] tipc: Subscription rejected, illegal request [ 507.444179][ T28] audit: type=1400 audit(2000000073.040:4992): avc: denied { create } for pid=23765 comm="syz.8.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 507.485408][ T28] audit: type=1400 audit(2000000073.070:4993): avc: denied { setopt } for pid=23765 comm="syz.8.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 507.507538][ T28] audit: type=1400 audit(2000000073.070:4994): avc: denied { allowed } for pid=23765 comm="syz.8.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 507.532910][ T28] audit: type=1400 audit(2000000073.070:4995): avc: denied { create } for pid=23765 comm="syz.8.4756" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 507.555706][ T28] audit: type=1400 audit(2000000073.070:4996): avc: denied { map } for pid=23765 comm="syz.8.4756" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=80804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 507.580365][ T28] audit: type=1400 audit(2000000073.070:4997): avc: denied { read write } for pid=23765 comm="syz.8.4756" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=80804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 507.643660][ T28] audit: type=1400 audit(2000000073.110:4998): avc: denied { create } for pid=23762 comm="syz.5.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.675520][ T28] audit: type=1400 audit(2000000073.150:4999): avc: denied { write } for pid=23762 comm="syz.5.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.702690][ T28] audit: type=1400 audit(2000000073.150:5000): avc: denied { read } for pid=23762 comm="syz.5.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.725225][ T28] audit: type=1400 audit(2000000073.210:5001): avc: denied { module_request } for pid=23762 comm="syz.5.4755" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 507.743178][T23763] batman_adv: batadv0: Adding interface: gretap1 [ 507.762911][ T28] audit: type=1400 audit(2000000073.230:5002): avc: denied { sys_module } for pid=23762 comm="syz.5.4755" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 507.763058][T23763] batman_adv: batadv0: Interface activated: gretap1 [ 507.795807][ T28] audit: type=1400 audit(2000000073.390:5003): avc: denied { read } for pid=23775 comm="syz.7.4758" dev="nsfs" ino=4026533944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 507.826447][ T28] audit: type=1400 audit(2000000073.390:5004): avc: denied { open } for pid=23775 comm="syz.7.4758" path="net:[4026533944]" dev="nsfs" ino=4026533944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 507.867242][ T28] audit: type=1400 audit(2000000073.430:5005): avc: denied { ioctl } for pid=23775 comm="syz.7.4758" path="socket:[81078]" dev="sockfs" ino=81078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 507.884560][T23779] syzkaller0: entered promiscuous mode [ 507.910273][T23779] syzkaller0: entered allmulticast mode [ 507.924483][ T28] audit: type=1400 audit(2000000073.520:5006): avc: denied { create } for pid=23780 comm="syz.8.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.957916][ T28] audit: type=1400 audit(2000000073.520:5007): avc: denied { write } for pid=23780 comm="syz.8.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 508.064177][T23799] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.090913][T23802] bond5: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 508.107007][T23802] bond5 (unregistering): Released all slaves [ 508.135232][T23808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.186319][T23814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 508.193563][T23810] bond6: (slave sit0): Device is not bonding slave [ 508.197681][T23815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.201869][T23810] bond6: option active_slave: invalid value (sit0) [ 508.221528][T23814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.226350][T23815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.240952][T23810] bond6 (unregistering): Released all slaves [ 508.241054][T23814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.329404][T23814] @0: renamed from bond_slave_1 [ 508.339307][T23814] netlink: 'syz.7.4770': attribute type 27 has an invalid length. [ 508.425603][T23814] bridge0: port 3(bond0) entered blocking state [ 508.425652][T23814] bridge0: port 3(bond0) entered forwarding state [ 508.429156][T23814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.437364][T23814] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.474564][T23814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.499259][T23831] netlink: 'syz.5.4773': attribute type 1 has an invalid length. [ 510.353770][T23842] netlink: 'syz.7.4775': attribute type 3 has an invalid length. [ 510.515811][T23846] tracefs: Unknown parameter 'k7dPvv"?Ζ_6MCNJ`du-LGN]?Al5cF??W۲' [ 510.905284][T23852] sch_tbf: peakrate 4294959103 is lower than or equals to rate 16517373851444205497 ! [ 511.113926][T23858] loop5: detected capacity change from 0 to 128 [ 511.138988][T23858] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.179796][T23858] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 511.245881][ T7978] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 511.375859][ T7973] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 511.682921][T23896] __nla_validate_parse: 18 callbacks suppressed [ 511.683031][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4793'. [ 511.719616][T23896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4793'. [ 511.849107][T23896] bridge5: entered promiscuous mode [ 511.888941][T23896] bridge5: entered allmulticast mode [ 512.125674][T23915] FAULT_INJECTION: forcing a failure. [ 512.125674][T23915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.222690][T23915] CPU: 0 UID: 0 PID: 23915 Comm: syz.8.4800 Tainted: G W syzkaller #0 PREEMPT(full) [ 512.222782][T23915] Tainted: [W]=WARN [ 512.222789][T23915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.222803][T23915] Call Trace: [ 512.222811][T23915] [ 512.222820][T23915] __dump_stack+0x1d/0x30 [ 512.222880][T23915] dump_stack_lvl+0x95/0xd0 [ 512.222909][T23915] dump_stack+0x15/0x1b [ 512.222930][T23915] should_fail_ex+0x263/0x280 [ 512.222998][T23915] should_fail+0xb/0x20 [ 512.223022][T23915] should_fail_usercopy+0x1a/0x20 [ 512.223047][T23915] _copy_from_user+0x1c/0xb0 [ 512.223072][T23915] input_event_from_user+0x5e/0x190 [ 512.223179][T23915] evdev_write+0x1b0/0x2b0 [ 512.223215][T23915] ? __pfx_evdev_write+0x10/0x10 [ 512.223388][T23915] vfs_write+0x269/0x9f0 [ 512.223417][T23915] ? __schedule+0x93c/0xd40 [ 512.223477][T23915] ? __rcu_read_unlock+0x4e/0x70 [ 512.223503][T23915] ? __fget_files+0x184/0x1c0 [ 512.223539][T23915] ksys_write+0xdc/0x1a0 [ 512.223557][T23915] __x64_sys_write+0x40/0x50 [ 512.223616][T23915] x64_sys_call+0x27e1/0x3020 [ 512.223648][T23915] do_syscall_64+0x12c/0x370 [ 512.223669][T23915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.223690][T23915] RIP: 0033:0x7f83a4f2c799 [ 512.223706][T23915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.223740][T23915] RSP: 002b:00007f83a3987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.223769][T23915] RAX: ffffffffffffffda RBX: 00007f83a51a5fa0 RCX: 00007f83a4f2c799 [ 512.223787][T23915] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 512.223826][T23915] RBP: 00007f83a3987090 R08: 0000000000000000 R09: 0000000000000000 [ 512.223838][T23915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.223882][T23915] R13: 00007f83a51a6038 R14: 00007f83a51a5fa0 R15: 00007ffd2f1fc3e8 [ 512.223902][T23915] [ 512.614444][T23893] loop5: detected capacity change from 0 to 1024 [ 512.651348][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 512.651364][ T28] audit: type=1400 audit(2000000078.250:5106): avc: denied { ioctl } for pid=23935 comm="syz.0.4808" path="socket:[81397]" dev="sockfs" ino=81397 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 512.684312][ T28] audit: type=1400 audit(2000000078.260:5107): avc: denied { bind } for pid=23935 comm="syz.0.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 512.726483][ T28] audit: type=1400 audit(2000000078.320:5108): avc: denied { setopt } for pid=23937 comm="syz.8.4809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.751683][T23893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 512.795134][T23893] System zones: 0-1, 3-36 [ 512.833853][T23893] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.4791: bad orphan inode 134217728 [ 512.839415][T23953] FAULT_INJECTION: forcing a failure. [ 512.839415][T23953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.845918][T23893] loop5: lost filesystem error report for type 5 error -117 [ 512.865981][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 512.880039][ C1] EXT4-fs (loop5): initial error at time 2000000078: ext4_orphan_get:1417 [ 512.888690][ C1] EXT4-fs (loop5): last error at time 2000000078: ext4_orphan_get:1417 [ 512.899339][ T28] audit: type=1400 audit(2000000078.500:5109): avc: denied { read } for pid=23954 comm="syz.7.4815" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 512.929463][T23893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.929832][ T28] audit: type=1400 audit(2000000078.500:5110): avc: denied { open } for pid=23954 comm="syz.7.4815" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 512.929865][ T28] audit: type=1400 audit(2000000078.530:5111): avc: denied { ioctl } for pid=23954 comm="syz.7.4815" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 512.929892][ T28] audit: type=1400 audit(2000000078.530:5112): avc: denied { create } for pid=23954 comm="syz.7.4815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 512.946079][T23953] CPU: 1 UID: 0 PID: 23953 Comm: syz.0.4813 Tainted: G W syzkaller #0 PREEMPT(full) [ 512.946138][T23953] Tainted: [W]=WARN [ 512.946146][T23953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.946158][T23953] Call Trace: [ 512.946165][T23953] [ 512.946248][T23953] __dump_stack+0x1d/0x30 [ 512.946348][T23953] dump_stack_lvl+0x95/0xd0 [ 512.946372][T23953] dump_stack+0x15/0x1b [ 512.946394][T23953] should_fail_ex+0x263/0x280 [ 512.946432][T23953] should_fail+0xb/0x20 [ 512.946453][T23953] should_fail_usercopy+0x1a/0x20 [ 512.946499][T23953] _copy_from_user+0x1c/0xb0 [ 512.946585][T23953] input_event_from_user+0x5e/0x190 [ 512.946609][T23953] ? input_inject_event+0x104/0x120 [ 512.946637][T23953] evdev_write+0x1b0/0x2b0 [ 512.946731][T23953] ? __pfx_evdev_write+0x10/0x10 [ 512.946761][T23953] vfs_write+0x269/0x9f0 [ 512.946813][T23953] ? __rcu_read_unlock+0x4e/0x70 [ 512.946847][T23953] ? __fget_files+0x184/0x1c0 [ 512.946874][T23953] ksys_write+0xdc/0x1a0 [ 512.946894][T23953] __x64_sys_write+0x40/0x50 [ 512.946931][T23953] x64_sys_call+0x27e1/0x3020 [ 512.946998][T23953] do_syscall_64+0x12c/0x370 [ 512.947020][T23953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.947043][T23953] RIP: 0033:0x7f9f0513c799 [ 512.947061][T23953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.947080][T23953] RSP: 002b:00007f9f03b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.947133][T23953] RAX: ffffffffffffffda RBX: 00007f9f053b5fa0 RCX: 00007f9f0513c799 [ 512.947149][T23953] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 512.947164][T23953] RBP: 00007f9f03b97090 R08: 0000000000000000 R09: 0000000000000000 [ 512.947178][T23953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.947191][T23953] R13: 00007f9f053b6038 R14: 00007f9f053b5fa0 R15: 00007ffe61e527d8 [ 512.947304][T23953] [ 513.212812][ T28] audit: type=1400 audit(2000000078.810:5113): avc: denied { write } for pid=23956 comm="syz.1.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 513.271289][ T28] audit: type=1400 audit(2000000078.870:5114): avc: denied { mount } for pid=23891 comm="syz.5.4791" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 513.374345][T23893] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4791'. [ 513.400756][ T28] audit: type=1400 audit(2000000079.000:5115): avc: denied { add_name } for pid=23891 comm="syz.5.4791" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.556905][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.703775][T23974] netlink: 624 bytes leftover after parsing attributes in process `syz.8.4817'. [ 513.803901][T23974] lo speed is unknown, defaulting to 1000 [ 513.810914][T23974] hsr0 speed is unknown, defaulting to 1000 [ 514.050814][T23970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4820'. [ 514.065063][T23970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4820'. [ 514.212242][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4826'. [ 514.284717][T23996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4827'. [ 514.327269][T24000] SELinux: policydb version 665244334 does not match my version range 15-35 [ 514.336535][T24000] SELinux: failed to load policy [ 514.383386][T24011] FAULT_INJECTION: forcing a failure. [ 514.383386][T24011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.405916][T24011] CPU: 1 UID: 0 PID: 24011 Comm: syz.8.4830 Tainted: G W syzkaller #0 PREEMPT(full) [ 514.405949][T24011] Tainted: [W]=WARN [ 514.405956][T24011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.405968][T24011] Call Trace: [ 514.405975][T24011] [ 514.405984][T24011] __dump_stack+0x1d/0x30 [ 514.406071][T24011] dump_stack_lvl+0x95/0xd0 [ 514.406098][T24011] dump_stack+0x15/0x1b [ 514.406118][T24011] should_fail_ex+0x263/0x280 [ 514.406141][T24011] should_fail+0xb/0x20 [ 514.406169][T24011] should_fail_usercopy+0x1a/0x20 [ 514.406278][T24011] _copy_from_user+0x1c/0xb0 [ 514.406307][T24011] input_event_from_user+0x5e/0x190 [ 514.406331][T24011] ? input_inject_event+0x104/0x120 [ 514.406357][T24011] evdev_write+0x1b0/0x2b0 [ 514.406511][T24011] ? __pfx_evdev_write+0x10/0x10 [ 514.406566][T24011] vfs_write+0x269/0x9f0 [ 514.406742][T24011] ? __rcu_read_unlock+0x4e/0x70 [ 514.406763][T24011] ? __fget_files+0x184/0x1c0 [ 514.406787][T24011] ksys_write+0xdc/0x1a0 [ 514.406808][T24011] __x64_sys_write+0x40/0x50 [ 514.406830][T24011] x64_sys_call+0x27e1/0x3020 [ 514.406870][T24011] do_syscall_64+0x12c/0x370 [ 514.406894][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.406916][T24011] RIP: 0033:0x7f83a4f2c799 [ 514.406934][T24011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.407035][T24011] RSP: 002b:00007f83a3987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.407061][T24011] RAX: ffffffffffffffda RBX: 00007f83a51a5fa0 RCX: 00007f83a4f2c799 [ 514.407105][T24011] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 514.407121][T24011] RBP: 00007f83a3987090 R08: 0000000000000000 R09: 0000000000000000 [ 514.407137][T24011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.407159][T24011] R13: 00007f83a51a6038 R14: 00007f83a51a5fa0 R15: 00007ffd2f1fc3e8 [ 514.407177][T24011] [ 515.130164][T24037] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 515.154036][T24037] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.612043][T24051] netlink: 'syz.8.4842': attribute type 9 has an invalid length. [ 517.587856][T24058] FAULT_INJECTION: forcing a failure. [ 517.587856][T24058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.601018][T24058] CPU: 0 UID: 0 PID: 24058 Comm: syz.8.4844 Tainted: G W syzkaller #0 PREEMPT(full) [ 517.601108][T24058] Tainted: [W]=WARN [ 517.601117][T24058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.601130][T24058] Call Trace: [ 517.601137][T24058] [ 517.601146][T24058] __dump_stack+0x1d/0x30 [ 517.601173][T24058] dump_stack_lvl+0x95/0xd0 [ 517.601270][T24058] dump_stack+0x15/0x1b [ 517.601374][T24058] should_fail_ex+0x263/0x280 [ 517.601402][T24058] should_fail+0xb/0x20 [ 517.601427][T24058] should_fail_usercopy+0x1a/0x20 [ 517.601457][T24058] _copy_from_user+0x1c/0xb0 [ 517.601518][T24058] input_event_from_user+0x5e/0x190 [ 517.601544][T24058] ? input_inject_event+0x104/0x120 [ 517.601633][T24058] evdev_write+0x1b0/0x2b0 [ 517.601662][T24058] ? __pfx_evdev_write+0x10/0x10 [ 517.601695][T24058] vfs_write+0x269/0x9f0 [ 517.601805][T24058] ? __rcu_read_unlock+0x4e/0x70 [ 517.601826][T24058] ? __fget_files+0x184/0x1c0 [ 517.601855][T24058] ksys_write+0xdc/0x1a0 [ 517.601879][T24058] __x64_sys_write+0x40/0x50 [ 517.601921][T24058] x64_sys_call+0x27e1/0x3020 [ 517.601950][T24058] do_syscall_64+0x12c/0x370 [ 517.601971][T24058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.601992][T24058] RIP: 0033:0x7f83a4f2c799 [ 517.602088][T24058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.602110][T24058] RSP: 002b:00007f83a3987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 517.602138][T24058] RAX: ffffffffffffffda RBX: 00007f83a51a5fa0 RCX: 00007f83a4f2c799 [ 517.602184][T24058] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 517.602201][T24058] RBP: 00007f83a3987090 R08: 0000000000000000 R09: 0000000000000000 [ 517.602218][T24058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.602232][T24058] R13: 00007f83a51a6038 R14: 00007f83a51a5fa0 R15: 00007ffd2f1fc3e8 [ 517.602250][T24058] [ 517.874225][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 517.874242][ T28] audit: type=1400 audit(2000000083.470:5142): avc: denied { read write } for pid=24064 comm="syz.8.4847" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 517.941434][ T28] audit: type=1400 audit(2000000083.470:5143): avc: denied { open } for pid=24064 comm="syz.8.4847" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 518.005249][ T28] audit: type=1400 audit(2000000083.470:5144): avc: denied { ioctl } for pid=24064 comm="syz.8.4847" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 518.037861][T24068] bond4: entered allmulticast mode [ 518.045944][T24068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.218403][T24083] netlink: 'syz.7.4846': attribute type 46 has an invalid length. [ 518.228577][T24073] loop5: detected capacity change from 0 to 128 [ 518.329723][T24093] lo speed is unknown, defaulting to 1000 [ 518.366333][T24093] hsr0 speed is unknown, defaulting to 1000 [ 518.439973][T24100] FAULT_INJECTION: forcing a failure. [ 518.439973][T24100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.465521][T24100] CPU: 0 UID: 0 PID: 24100 Comm: syz.5.4856 Tainted: G W syzkaller #0 PREEMPT(full) [ 518.465620][T24100] Tainted: [W]=WARN [ 518.465672][T24100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.465683][T24100] Call Trace: [ 518.465691][T24100] [ 518.465701][T24100] __dump_stack+0x1d/0x30 [ 518.465757][T24100] dump_stack_lvl+0x95/0xd0 [ 518.465784][T24100] dump_stack+0x15/0x1b [ 518.465805][T24100] should_fail_ex+0x263/0x280 [ 518.465830][T24100] should_fail+0xb/0x20 [ 518.465909][T24100] should_fail_usercopy+0x1a/0x20 [ 518.465938][T24100] _copy_from_user+0x1c/0xb0 [ 518.466022][T24100] input_event_from_user+0x5e/0x190 [ 518.466049][T24100] ? input_inject_event+0x104/0x120 [ 518.466094][T24100] evdev_write+0x1b0/0x2b0 [ 518.466131][T24100] ? __pfx_evdev_write+0x10/0x10 [ 518.466179][T24100] vfs_write+0x269/0x9f0 [ 518.466222][T24100] ? __rcu_read_unlock+0x4e/0x70 [ 518.466243][T24100] ? __fget_files+0x184/0x1c0 [ 518.466272][T24100] ksys_write+0xdc/0x1a0 [ 518.466296][T24100] __x64_sys_write+0x40/0x50 [ 518.466362][T24100] x64_sys_call+0x27e1/0x3020 [ 518.466387][T24100] do_syscall_64+0x12c/0x370 [ 518.466409][T24100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.466442][T24100] RIP: 0033:0x7eff2053c799 [ 518.466532][T24100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.466557][T24100] RSP: 002b:00007eff1ef97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.466582][T24100] RAX: ffffffffffffffda RBX: 00007eff207b5fa0 RCX: 00007eff2053c799 [ 518.466599][T24100] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 518.466612][T24100] RBP: 00007eff1ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 518.466624][T24100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.466637][T24100] R13: 00007eff207b6038 R14: 00007eff207b5fa0 R15: 00007fffad4e0548 [ 518.466690][T24100] [ 518.848824][T24126] syz_tun: entered promiscuous mode [ 518.871582][T24126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4861'. [ 518.915549][ T28] audit: type=1400 audit(2000000084.510:5145): avc: denied { write } for pid=24129 comm="syz.1.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 519.155055][ T28] audit: type=1400 audit(2000000084.750:5146): avc: denied { setopt } for pid=24137 comm="syz.8.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 519.224360][ T28] audit: type=1400 audit(2000000084.810:5147): avc: denied { bind } for pid=24137 comm="syz.8.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 519.321035][T24142] lo speed is unknown, defaulting to 1000 [ 519.327581][T24142] hsr0 speed is unknown, defaulting to 1000 [ 519.549015][T24152] x_tables: duplicate entry at hook 1 [ 519.578363][T24154] FAULT_INJECTION: forcing a failure. [ 519.578363][T24154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.591617][T24142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24142 comm=syz.5.4867 [ 519.604846][T24142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36974 sclass=netlink_tcpdiag_socket pid=24142 comm=syz.5.4867 [ 519.615943][T24154] CPU: 1 UID: 0 PID: 24154 Comm: syz.0.4870 Tainted: G W syzkaller #0 PREEMPT(full) [ 519.615980][T24154] Tainted: [W]=WARN [ 519.615987][T24154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.616000][T24154] Call Trace: [ 519.616008][T24154] [ 519.616017][T24154] __dump_stack+0x1d/0x30 [ 519.616092][T24154] dump_stack_lvl+0x95/0xd0 [ 519.616191][T24154] dump_stack+0x15/0x1b [ 519.616213][T24154] should_fail_ex+0x263/0x280 [ 519.616238][T24154] should_fail+0xb/0x20 [ 519.616325][T24154] should_fail_usercopy+0x1a/0x20 [ 519.616351][T24154] _copy_from_user+0x1c/0xb0 [ 519.616452][T24154] input_event_from_user+0x5e/0x190 [ 519.616477][T24154] ? input_inject_event+0x104/0x120 [ 519.616505][T24154] evdev_write+0x1b0/0x2b0 [ 519.616607][T24154] ? __pfx_evdev_write+0x10/0x10 [ 519.616636][T24154] vfs_write+0x269/0x9f0 [ 519.616671][T24154] ? __rcu_read_unlock+0x4e/0x70 [ 519.616694][T24154] ? __fget_files+0x184/0x1c0 [ 519.616721][T24154] ksys_write+0xdc/0x1a0 [ 519.616741][T24154] __x64_sys_write+0x40/0x50 [ 519.616761][T24154] x64_sys_call+0x27e1/0x3020 [ 519.616806][T24154] do_syscall_64+0x12c/0x370 [ 519.616829][T24154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.616852][T24154] RIP: 0033:0x7f9f0513c799 [ 519.616902][T24154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.616968][T24154] RSP: 002b:00007f9f03b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 519.617004][T24154] RAX: ffffffffffffffda RBX: 00007f9f053b5fa0 RCX: 00007f9f0513c799 [ 519.617020][T24154] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 519.617034][T24154] RBP: 00007f9f03b97090 R08: 0000000000000000 R09: 0000000000000000 [ 519.617048][T24154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.617062][T24154] R13: 00007f9f053b6038 R14: 00007f9f053b5fa0 R15: 00007ffe61e527d8 [ 519.617082][T24154] [ 519.817465][T24142] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=24142 comm=syz.5.4867 [ 519.850124][ T28] audit: type=1400 audit(2000000085.450:5148): avc: denied { mount } for pid=24157 comm="syz.7.4871" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 519.875553][T24160] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 519.889105][T24160] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 519.913168][T24160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24160 comm=syz.1.4873 [ 519.952894][ T28] audit: type=1400 audit(2000000085.550:5149): avc: denied { name_bind 0x1000000 } for pid=24163 comm="syz.0.4875" path="socket:[82501]" dev="sockfs" ino=82501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 520.004414][ T28] audit: type=1326 audit(2000000085.600:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24169 comm="syz.5.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 520.035410][ T28] audit: type=1326 audit(2000000085.600:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24169 comm="syz.5.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 520.076669][T24179] netlink: 'syz.1.4876': attribute type 1 has an invalid length. [ 520.085630][T24179] netlink: 'syz.1.4876': attribute type 2 has an invalid length. [ 520.097899][T24184] dummy0: entered allmulticast mode [ 520.103595][T24184] dummy0: left allmulticast mode [ 520.152197][T24184] lo speed is unknown, defaulting to 1000 [ 520.155721][T24193] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4881'. [ 520.173177][T24184] hsr0 speed is unknown, defaulting to 1000 [ 520.241244][T24196] FAULT_INJECTION: forcing a failure. [ 520.241244][T24196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.263903][T24192] delete_channel: no stack [ 520.271074][T24196] CPU: 0 UID: 0 PID: 24196 Comm: syz.5.4883 Tainted: G W syzkaller #0 PREEMPT(full) [ 520.271177][T24196] Tainted: [W]=WARN [ 520.271186][T24196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.271214][T24196] Call Trace: [ 520.271221][T24196] [ 520.271230][T24196] __dump_stack+0x1d/0x30 [ 520.271266][T24196] dump_stack_lvl+0x95/0xd0 [ 520.271325][T24196] dump_stack+0x15/0x1b [ 520.271347][T24196] should_fail_ex+0x263/0x280 [ 520.271370][T24196] should_fail+0xb/0x20 [ 520.271442][T24196] should_fail_usercopy+0x1a/0x20 [ 520.271471][T24196] _copy_from_user+0x1c/0xb0 [ 520.271497][T24196] input_event_from_user+0x5e/0x190 [ 520.271546][T24196] ? input_inject_event+0x43/0x120 [ 520.271577][T24196] evdev_write+0x1b0/0x2b0 [ 520.271610][T24196] ? __pfx_evdev_write+0x10/0x10 [ 520.271687][T24196] vfs_write+0x269/0x9f0 [ 520.271722][T24196] ? __rcu_read_unlock+0x4e/0x70 [ 520.271804][T24196] ? __fget_files+0x184/0x1c0 [ 520.271834][T24196] ksys_write+0xdc/0x1a0 [ 520.271855][T24196] __x64_sys_write+0x40/0x50 [ 520.271878][T24196] x64_sys_call+0x27e1/0x3020 [ 520.271973][T24196] do_syscall_64+0x12c/0x370 [ 520.271997][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.272021][T24196] RIP: 0033:0x7eff2053c799 [ 520.272040][T24196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.272101][T24196] RSP: 002b:00007eff1ef97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.272126][T24196] RAX: ffffffffffffffda RBX: 00007eff207b5fa0 RCX: 00007eff2053c799 [ 520.272218][T24196] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 520.272233][T24196] RBP: 00007eff1ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 520.272247][T24196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.272261][T24196] R13: 00007eff207b6038 R14: 00007eff207b5fa0 R15: 00007fffad4e0548 [ 520.272282][T24196] [ 520.272579][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4882'. [ 520.342463][T24201] infiniband syz1: set active [ 520.484841][T24201] infiniband syz1: added syz_tun [ 520.502864][T24201] RDS/IB: syz1: added [ 520.509343][T24201] smc: adding ib device syz1 with port count 1 [ 520.515654][T24201] smc: ib device syz1 port 1 has no pnetid [ 520.735562][T24223] hub 8-0:1.0: USB hub found [ 520.740695][T24223] hub 8-0:1.0: 8 ports detected [ 520.759293][T24223] netlink: 'syz.8.4888': attribute type 10 has an invalid length. [ 520.767811][T24223] macvlan1: entered allmulticast mode [ 520.777405][T24223] veth1_vlan: entered allmulticast mode [ 520.789436][T24223] team0: Port device macvlan1 added [ 521.342592][T24236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4894'. [ 521.381130][T24240] FAULT_INJECTION: forcing a failure. [ 521.381130][T24240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.394424][T24240] CPU: 0 UID: 0 PID: 24240 Comm: syz.5.4896 Tainted: G W syzkaller #0 PREEMPT(full) [ 521.394462][T24240] Tainted: [W]=WARN [ 521.394470][T24240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.394485][T24240] Call Trace: [ 521.394493][T24240] [ 521.394501][T24240] __dump_stack+0x1d/0x30 [ 521.394587][T24240] dump_stack_lvl+0x95/0xd0 [ 521.394689][T24240] dump_stack+0x15/0x1b [ 521.394716][T24240] should_fail_ex+0x263/0x280 [ 521.394745][T24240] should_fail+0xb/0x20 [ 521.394768][T24240] should_fail_usercopy+0x1a/0x20 [ 521.394887][T24240] _copy_from_user+0x1c/0xb0 [ 521.394988][T24240] input_event_from_user+0x5e/0x190 [ 521.395012][T24240] ? input_inject_event+0x104/0x120 [ 521.395046][T24240] evdev_write+0x1b0/0x2b0 [ 521.395096][T24240] ? __pfx_evdev_write+0x10/0x10 [ 521.395251][T24240] vfs_write+0x269/0x9f0 [ 521.395381][T24240] ? __rcu_read_unlock+0x4e/0x70 [ 521.395414][T24239] netlink: 'syz.1.4895': attribute type 2 has an invalid length. [ 521.395444][T24240] ? __fget_files+0x184/0x1c0 [ 521.395475][T24240] ksys_write+0xdc/0x1a0 [ 521.395497][T24240] __x64_sys_write+0x40/0x50 [ 521.395519][T24240] x64_sys_call+0x27e1/0x3020 [ 521.395551][T24240] do_syscall_64+0x12c/0x370 [ 521.395574][T24240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.395600][T24240] RIP: 0033:0x7eff2053c799 [ 521.395668][T24240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.395691][T24240] RSP: 002b:00007eff1ef97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.395715][T24240] RAX: ffffffffffffffda RBX: 00007eff207b5fa0 RCX: 00007eff2053c799 [ 521.395786][T24240] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 521.395833][T24240] RBP: 00007eff1ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 521.395848][T24240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.395863][T24240] R13: 00007eff207b6038 R14: 00007eff207b5fa0 R15: 00007fffad4e0548 [ 521.395885][T24240] [ 521.765044][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4904'. [ 521.852500][T24265] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4906'. [ 522.661962][T24276] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 522.968285][T24284] FAULT_INJECTION: forcing a failure. [ 522.968285][T24284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.986486][T24277] hub 9-0:1.0: USB hub found [ 523.011379][T24277] hub 9-0:1.0: 8 ports detected [ 523.042939][T24280] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4910'. [ 523.065644][T24284] CPU: 0 UID: 0 PID: 24284 Comm: syz.5.4911 Tainted: G W syzkaller #0 PREEMPT(full) [ 523.065680][T24284] Tainted: [W]=WARN [ 523.065687][T24284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.065699][T24284] Call Trace: [ 523.065772][T24284] [ 523.065786][T24284] __dump_stack+0x1d/0x30 [ 523.065818][T24284] dump_stack_lvl+0x95/0xd0 [ 523.065844][T24284] dump_stack+0x15/0x1b [ 523.065864][T24284] should_fail_ex+0x263/0x280 [ 523.065888][T24284] should_fail+0xb/0x20 [ 523.066036][T24284] should_fail_usercopy+0x1a/0x20 [ 523.066200][T24284] _copy_from_user+0x1c/0xb0 [ 523.066228][T24284] input_event_from_user+0x5e/0x190 [ 523.066257][T24284] ? input_inject_event+0x104/0x120 [ 523.066284][T24284] evdev_write+0x1b0/0x2b0 [ 523.066341][T24284] ? __pfx_evdev_write+0x10/0x10 [ 523.066392][T24284] vfs_write+0x269/0x9f0 [ 523.066427][T24284] ? __rcu_read_unlock+0x4e/0x70 [ 523.066447][T24284] ? __fget_files+0x184/0x1c0 [ 523.066473][T24284] ksys_write+0xdc/0x1a0 [ 523.066491][T24284] __x64_sys_write+0x40/0x50 [ 523.066564][T24284] x64_sys_call+0x27e1/0x3020 [ 523.066595][T24284] do_syscall_64+0x12c/0x370 [ 523.066616][T24284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.066705][T24284] RIP: 0033:0x7eff2053c799 [ 523.066805][T24284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.066827][T24284] RSP: 002b:00007eff1ef97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 523.066851][T24284] RAX: ffffffffffffffda RBX: 00007eff207b5fa0 RCX: 00007eff2053c799 [ 523.066956][T24284] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 523.066997][T24284] RBP: 00007eff1ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 523.067013][T24284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.067028][T24284] R13: 00007eff207b6038 R14: 00007eff207b5fa0 R15: 00007fffad4e0548 [ 523.067050][T24284] [ 523.576394][T24313] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4918'. [ 523.602759][T24311] lo speed is unknown, defaulting to 1000 [ 523.628522][T24311] hsr0 speed is unknown, defaulting to 1000 [ 523.644775][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 523.644789][ T28] audit: type=1400 audit(2000000089.240:5160): avc: denied { write } for pid=24315 comm="syz.8.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 523.736305][T24314] lo speed is unknown, defaulting to 1000 [ 523.743370][T24324] netlink: 'syz.8.4921': attribute type 17 has an invalid length. [ 523.785481][ T28] audit: type=1400 audit(2000000089.380:5161): avc: denied { setopt } for pid=24310 comm="syz.7.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 523.846923][ T28] audit: type=1400 audit(2000000089.400:5162): avc: denied { read } for pid=24310 comm="syz.7.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 523.878513][T24324] netlink: 160 bytes leftover after parsing attributes in process `syz.8.4921'. [ 523.896690][T24314] hsr0 speed is unknown, defaulting to 1000 [ 523.908076][ T28] audit: type=1400 audit(2000000089.470:5163): avc: denied { write } for pid=24310 comm="syz.7.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 523.935645][T24326] v: renamed from ip6_vti0 (while UP) [ 524.004615][ T28] audit: type=1400 audit(2000000089.600:5164): avc: denied { execute } for pid=24322 comm="syz.8.4921" path="/73/freezer.parent_freezing" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 524.302284][ T28] audit: type=1400 audit(2000000089.900:5165): avc: denied { listen } for pid=24333 comm="syz.8.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 524.329051][T24338] FAULT_INJECTION: forcing a failure. [ 524.329051][T24338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.349608][T24303] loop5: detected capacity change from 0 to 8192 [ 524.356202][T24338] CPU: 1 UID: 0 PID: 24338 Comm: syz.8.4924 Tainted: G W syzkaller #0 PREEMPT(full) [ 524.356287][T24338] Tainted: [W]=WARN [ 524.356296][T24338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.356310][T24338] Call Trace: [ 524.356318][T24338] [ 524.356328][T24338] __dump_stack+0x1d/0x30 [ 524.356357][T24338] dump_stack_lvl+0x95/0xd0 [ 524.356515][T24338] dump_stack+0x15/0x1b [ 524.356610][T24338] should_fail_ex+0x263/0x280 [ 524.356634][T24338] should_fail+0xb/0x20 [ 524.356659][T24338] should_fail_usercopy+0x1a/0x20 [ 524.356721][T24338] _copy_from_user+0x1c/0xb0 [ 524.356752][T24338] input_event_from_user+0x5e/0x190 [ 524.356779][T24338] ? input_inject_event+0x104/0x120 [ 524.356814][T24338] evdev_write+0x1b0/0x2b0 [ 524.356850][T24338] ? __pfx_evdev_write+0x10/0x10 [ 524.356876][T24338] vfs_write+0x269/0x9f0 [ 524.356953][T24338] ? __rcu_read_unlock+0x4e/0x70 [ 524.356974][T24338] ? __fget_files+0x184/0x1c0 [ 524.357007][T24338] ksys_write+0xdc/0x1a0 [ 524.357059][T24338] __x64_sys_write+0x40/0x50 [ 524.357076][T24338] x64_sys_call+0x27e1/0x3020 [ 524.357106][T24338] do_syscall_64+0x12c/0x370 [ 524.357128][T24338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.357177][T24338] RIP: 0033:0x7f83a4f2c799 [ 524.357206][T24338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.357224][T24338] RSP: 002b:00007f83a3987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.357246][T24338] RAX: ffffffffffffffda RBX: 00007f83a51a5fa0 RCX: 00007f83a4f2c799 [ 524.357260][T24338] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 524.357347][T24338] RBP: 00007f83a3987090 R08: 0000000000000000 R09: 0000000000000000 [ 524.357360][T24338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.357374][T24338] R13: 00007f83a51a6038 R14: 00007f83a51a5fa0 R15: 00007ffd2f1fc3e8 [ 524.357469][T24338] [ 524.671824][T24303] loop5: p1 < > p2 p4 < p5 > [ 524.700624][T24303] loop5: partition table partially beyond EOD, truncated [ 524.740673][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.750004][T24303] loop5: p1 start 134217728 is beyond EOD, truncated [ 524.767675][T24303] loop5: p2 size 591360 extends beyond EOD, truncated [ 524.776899][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.792440][T24303] loop5: p5 size 591360 extends beyond EOD, truncated [ 524.795853][ T28] audit: type=1400 audit(2000000090.390:5166): avc: denied { mounton } for pid=24349 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 524.859866][ T7968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.864716][T24289] udevd[24289]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 524.881986][T24295] udevd[24295]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 524.891832][T24353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4929'. [ 524.894243][T24066] udevd[24066]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 524.986513][ T7968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.000476][ T28] audit: type=1400 audit(2000000090.600:5167): avc: denied { getopt } for pid=24360 comm="syz.5.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.047338][ T28] audit: type=1400 audit(2000000090.640:5168): avc: denied { getopt } for pid=24360 comm="syz.5.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.068734][ T28] audit: type=1400 audit(2000000090.640:5169): avc: denied { setattr } for pid=24360 comm="syz.5.4931" name="HCI" dev="sockfs" ino=84007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 525.152699][ T7968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.173219][T24349] lo speed is unknown, defaulting to 1000 [ 525.181412][T24349] hsr0 speed is unknown, defaulting to 1000 [ 525.201737][ T7968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.382468][ T7968] bridge_slave_1: left allmulticast mode [ 525.405034][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.422125][ T7968] bridge_slave_0: left allmulticast mode [ 525.428108][ T7968] bridge_slave_0: left promiscuous mode [ 525.434885][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.598274][ T7968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.608441][ T7968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.618684][ T7968] bond0 (unregistering): Released all slaves [ 525.626832][ T7968] bond1 (unregistering): (slave dummy0): Releasing active interface [ 525.636170][ T7968] bond1 (unregistering): (slave veth3): Releasing active interface [ 525.645013][ T7968] bond1 (unregistering): Released all slaves [ 525.653753][ T7968] bond2 (unregistering): Released all slaves [ 525.664459][T24408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4940'. [ 525.674694][T24349] chnl_net:caif_netlink_parms(): no params data found [ 525.702190][T24414] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4942'. [ 525.713445][ T7968] tipc: Disabling bearer [ 525.723661][T24414] loop5: detected capacity change from 0 to 1024 [ 525.730180][ T7968] tipc: Left network mode [ 525.742525][ T7968] IPVS: stopping backup sync thread 21065 ... [ 525.753596][T24414] EXT4-fs: Ignoring removed orlov option [ 525.773473][T24414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.815574][T24349] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.822919][T24349] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.830789][T24349] bridge_slave_0: entered allmulticast mode [ 525.833844][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.837837][T24349] bridge_slave_0: entered promiscuous mode [ 525.868167][ T7968] hsr_slave_0: left promiscuous mode [ 525.879429][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.892413][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.930421][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.051643][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.072245][ T7968] veth0_macvtap: left promiscuous mode [ 526.080499][ T7968] veth1_vlan: left allmulticast mode [ 526.086134][ T7968] veth1_vlan: left promiscuous mode [ 526.091488][ T7968] veth0_vlan: left promiscuous mode [ 526.296966][ T7968] pimreg (unregistering): left allmulticast mode [ 526.353115][ T7968] team0 (unregistering): Port device macvlan1 removed [ 526.406952][ T8966] IPVS: starting estimator thread 0... [ 526.536768][T24465] IPVS: using max 2592 ests per chain, 129600 per kthread [ 526.560861][ T7968] team0 (unregistering): Port device team_slave_1 removed [ 526.704487][ T7968] team0 (unregistering): Port device team_slave_0 removed [ 526.856323][T24349] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.863633][T24349] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.873534][T24349] bridge_slave_1: entered allmulticast mode [ 526.881583][T24349] bridge_slave_1: entered promiscuous mode [ 526.890348][ T3419] hsr0 speed is unknown, defaulting to 1000 [ 526.911964][ T3419] infiniband syz2: ib_query_port failed (-19) [ 526.920477][T24473] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 526.963184][T24462] syzkaller0: entered promiscuous mode [ 526.969328][T24462] syzkaller0: entered allmulticast mode [ 526.977082][T24476] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4952'. [ 527.043616][T24478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4953'. [ 527.069384][T24349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.128515][T24349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.178786][T24492] loop5: detected capacity change from 0 to 512 [ 527.225344][T24492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.248166][T24349] team0: Port device team_slave_0 added [ 527.269154][T24349] team0: Port device team_slave_1 added [ 527.314843][T24349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.333772][T24492] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.349438][T24349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.385086][T24505] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4956'. [ 527.478957][T24349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.523622][T24349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.561059][T24349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.607247][T19416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.650827][T24349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.681460][ T7968] IPVS: stop unused estimator thread 0... [ 527.761618][T24349] hsr_slave_0: entered promiscuous mode [ 527.776188][T24349] hsr_slave_1: entered promiscuous mode [ 527.891453][T24538] loop5: detected capacity change from 0 to 128 [ 528.275389][T24611] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4964'. [ 528.328068][T24349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 528.343494][T24349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.364179][T24617] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4967'. [ 528.377158][T24349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.386565][T24349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 528.481732][T24349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.506032][T24349] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.522114][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.529592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.564571][T24349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.585180][T24349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.620405][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.627610][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.700714][T24641] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4970'. [ 528.828249][T24638] ================================================================== [ 528.836410][T24638] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 528.845484][T24638] [ 528.847823][T24638] write to 0xffff888100ad6ca8 of 8 bytes by task 24631 on cpu 0: [ 528.855549][T24638] shmem_file_splice_read+0x470/0x600 [ 528.860949][T24638] splice_direct_to_actor+0x26e/0x670 [ 528.866438][T24638] do_splice_direct+0x119/0x1a0 [ 528.871300][T24638] do_sendfile+0x382/0x650 [ 528.875738][T24638] __x64_sys_sendfile64+0x105/0x150 [ 528.880955][T24638] x64_sys_call+0x2dc4/0x3020 [ 528.885649][T24638] do_syscall_64+0x12c/0x370 [ 528.890427][T24638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.896331][T24638] [ 528.898922][T24638] write to 0xffff888100ad6ca8 of 8 bytes by task 24638 on cpu 1: [ 528.906647][T24638] shmem_file_splice_read+0x470/0x600 [ 528.912140][T24638] splice_direct_to_actor+0x26e/0x670 [ 528.917527][T24638] do_splice_direct+0x119/0x1a0 [ 528.922388][T24638] do_sendfile+0x382/0x650 [ 528.926908][T24638] __x64_sys_sendfile64+0x105/0x150 [ 528.932114][T24638] x64_sys_call+0x2dc4/0x3020 [ 528.936805][T24638] do_syscall_64+0x12c/0x370 [ 528.941435][T24638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.947423][T24638] [ 528.949744][T24638] value changed: 0x000000000002bff0 -> 0x000000000002c00a [ 528.956936][T24638] [ 528.959256][T24638] Reported by Kernel Concurrency Sanitizer on: [ 528.965406][T24638] CPU: 1 UID: 0 PID: 24638 Comm: syz.8.4968 Tainted: G W syzkaller #0 PREEMPT(full) [ 528.976350][T24638] Tainted: [W]=WARN [ 528.980149][T24638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.990210][T24638] ================================================================== [ 529.035303][T24349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.112195][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 529.112253][ T28] audit: type=1326 audit(2000000094.706:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24643 comm="syz.5.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 529.144516][ T28] audit: type=1326 audit(2000000094.706:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24643 comm="syz.5.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 529.170282][ T28] audit: type=1326 audit(2000000094.706:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24643 comm="syz.5.4969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2053c799 code=0x7ffc0000 [ 529.264832][T24349] veth0_vlan: entered promiscuous mode [ 529.273202][T24349] veth1_vlan: entered promiscuous mode [ 529.291395][T24349] veth0_macvtap: entered promiscuous mode [ 529.299171][T24349] veth1_macvtap: entered promiscuous mode [ 529.313783][T24349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.326399][T24349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.341679][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.366920][ T28] audit: type=1400 audit(2000000094.954:5237): avc: denied { mounton } for pid=24349 comm="syz-executor" path="/root/syzkaller.Sk8Fjq/syz-tmp" dev="sda1" ino=2075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 529.392197][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.401127][ T141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.410357][ T28] audit: type=1400 audit(2000000094.974:5238): avc: denied { mount } for pid=24349 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 529.411179][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.450430][ T28] audit: type=1400 audit(2000000094.974:5239): avc: denied { mounton } for pid=24349 comm="syz-executor" path="/root/syzkaller.Sk8Fjq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 529.478015][ T28] audit: type=1400 audit(2000000094.974:5240): avc: denied { mounton } for pid=24349 comm="syz-executor" path="/root/syzkaller.Sk8Fjq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=83584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 529.506803][ T28] audit: type=1400 audit(2000000094.984:5241): avc: denied { mounton } for pid=24349 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 529.530285][ T28] audit: type=1400 audit(2000000094.984:5242): avc: denied { mount } for pid=24349 comm="syz-executor" name="/" dev="gadgetfs" ino=4777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1