last executing test programs: 6m47.02950228s ago: executing program 32 (id=688): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2501000000080002000100", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 5m50.74592684s ago: executing program 33 (id=1683): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000010) write$cgroup_subtree(r0, 0x0, 0xfe33) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12043, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x400c084) r3 = socket$igmp6(0xa, 0x3, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x5, 0x10ffff, 0xfffffff9}) r4 = socket$inet6(0xa, 0x4, 0xfffffffc) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r5, 0x0) sendto$inet6(r5, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) r6 = socket(0x1d, 0x1, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x3, 0x0, &(0x7f0000000180)) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) close(r5) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000007740)=[{{&(0x7f0000002540)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000004680)=ANY=[@ANYBLOB="1400000000000000290000002b0000000800807f8460e51e"], 0x18}}], 0x1, 0x0) dup2(0xffffffffffffffff, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) 5m26.305300012s ago: executing program 34 (id=2022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x7, 0x402000) r2 = gettid() ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4, 0x7fffffff, 0xfff, 0x1, 0x1000, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setitimer(0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fchdir(0xffffffffffffffff) dup(0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x8}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 4m35.026294266s ago: executing program 35 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001"], 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004001}, 0x0) 2m9.78963725s ago: executing program 8 (id=5908): socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept(r2, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x400) syz_emit_ethernet(0x2a, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) write(r6, 0x0, 0x0) 2m9.364082404s ago: executing program 8 (id=5913): r0 = socket(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x32, "1ddb00bed487a92ab80d001be377b3a622868fb1aa730b91f7896ac6146078106424175805db8865bbe73aaf49f4755c8bdc"}, &(0x7f00000001c0)=0x38) 2m9.265642337s ago: executing program 8 (id=5914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x1a0, 0x30, 0x1, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_vlan={0x188, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x137, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x1a0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4}, 0x48) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000)) (async) r3 = socket(0x1, 0x5, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0xa084, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r4) (async, rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast2, 0x4e22, 0x2, 0x4e23, 0xe4, 0xa, 0x20, 0x20, 0xc, r2, r4}, {0x8, 0x80, 0x4, 0x100, 0x2, 0x6, 0xfffffffffffffffa, 0x7}, {0x9, 0x8, 0x7, 0xa}, 0x80000001, 0x6e6bb3, 0x2, 0x0, 0x9c190d9be48e2e2d, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d2, 0xff}, 0xa, @in6=@mcast2, 0x3501, 0x2, 0x0, 0x9, 0x4e98b36a, 0x6}}, 0xe8) (async, rerun: 32) io_uring_enter(0xffffffffffffffff, 0x6a67, 0xdcb5, 0x14, &(0x7f0000000000)={[0x5]}, 0x8) 2m9.158608131s ago: executing program 8 (id=5916): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000500)={[{@bsdgroups}, {@jqfmt_vfsv1}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@obj_user={'obj_user', 0x3d, '-(\x01\\\x0f/+#*\xe3+.-!#{\''}}, {@measure}, {@audit}, {@pcr={'pcr', 0x3d, 0x1c}}]}, 0xc1, 0x7f9, &(0x7f00000007c0)="$eJzs3c1rXF0ZAPDnTj4mSauJIOj7rgKCFl7eiamxVXARcSGChYKubcNkGmommZKZlCYEmi4EN4KKC0E3XftRF4JbP7b6T4gLaRFNg3WlI/fOnXxMZiZJzUxa+/vBzT3nfp375J575szcw0wA76zZ9E8h4r2I+H4SMZ0vTyJiLEuNRiy2tnu1t1NOpySazW/8Pcm2+fWVw2Ml+fxKnvlkRPz+OxEfFDpLnczn1cpGnpprrD2Yq29tf3h/bWmlslJZvzG/sHD95udv3ji511lNdOT/+aftqy9+8NXP/HJxND7x7Ht/SGIxrubr9vd2yuc8/KlmYzb/n4yl/8JjvnLRhV2y5LJPgNeS3pojrbs83ovpGMlSPZz3BgQA3kiPI6IJALxjktNe/0d0EQDg/0v7c4D9vZ1ye7rcTySG629fbj0o3M+fbb46iH80f2Y3kT0HndpPjj0ZSSJi5gLKn42In/7mWz9PpxjQc0iAbnaftOb7e8WO9j9J27/x049Q7Lnms/12a7b2m+1YrP2D4flt2v/5wsn+3/sHA3pao6g6+j8TxS737us4/f4vPO+x6xnaptOl/b8vHRnbdtj/Oxi0NjOS5z6S9fnGknv3q5W0bftoRFyLsWKan8827T4K6trLf7/sVf7R/t8/fvjtn6Xlp/PDLQrPR4vRbI3L+0/WX19eaixdROxZ/E8i3h/tFn/SGv4XE1lUh9d/8SDS2z2PevzSfO2L3/1Jry3T+NN429PJ+Aer+TTi012v/+G1TPqOT5zLqsNcu1J08au//HiqV/mH17+YzdPy2+8FhiG9/lP9459JU/Wt7dWlarWyUT9/GX98Ov27XuuO1v/u8Wf1/5i0/o8n38zS7Zr2aKnR2JiPGE++fnL59cN92/n29mn81z7V/f5vv/9LOtq/Qj429u5Brr/RF+O/yA/VNf7Mbq/4ByuNf/lc179Popnv07Hq2avVkV7ln+36L2Sp3XzJWdq/U870f6jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+hYi4GkmhdJAuFEql1m94fzymCtVavfHBvdrm+nJkv5U9E2OF9lddTh/5PtT5/Pvw2/nrHfnPRcTHIuJHxcksXyrXqsuXHTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5K4c//3/x+msVGqt+2vxss8OABiYics+AQBg6Lz+A8C753yv/5MDOw8AYHjO/f6/mQzmRACAoTnz6//dwZ4HADA8nv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYLdv3Uqn5r/2dsppfvnh1uZq7eGHy5X6amlts1wq1zYelFZqtZVqpVSurfU80G5rVq3VHizE+uajuUal3pirb23fWattrjfu3F9bWqncqYwNLTIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLv61vbqUrVa2ZDok5isTPbeJomISz/D0xLptb7IA44eDTnZbVWmNyDS3T+PZafSd+OYeWsq/3ifbZKLLGuyc8nRVmJy6O0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvivwEAAP//PWIPmA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbff}, 0x18}}, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RVERSION(r4, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0xd4043f9e78e97721}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x24000000) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) 2m7.22446193s ago: executing program 8 (id=5936): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0xffc0, 0x2004c051, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback={0x100000}, 0xa}, 0x1c) 2m7.061428091s ago: executing program 8 (id=5938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020400) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r7, 0x10, 0x100, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x81}) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f00000000c0)=0x571480, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r10 = socket(0x1e, 0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0xffff8000, @remote, 0x100}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x74) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1m52.023365641s ago: executing program 36 (id=5938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020400) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r7, 0x10, 0x100, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x81}) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f00000000c0)=0x571480, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r10 = socket(0x1e, 0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0xffff8000, @remote, 0x100}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}], 0x74) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1m45.779204416s ago: executing program 3 (id=6319): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001e80)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9f}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000780)="44ceec", 0x3}], 0x1}}], 0x1, 0x0) 1m45.306831987s ago: executing program 3 (id=6325): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x3f000000) 1m45.243728815s ago: executing program 3 (id=6326): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@dev, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xfffffffffffffd6a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) 1m45.187622683s ago: executing program 3 (id=6329): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x2, &(0x7f00000003c0)={&(0x7f0000000380)=""/48, 0x30}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) sendmmsg(r4, &(0x7f000000f4c0)=[{{&(0x7f0000006040)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, 0x0}}, {{&(0x7f0000006740)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=[{0x28, 0x111, 0x7, "fc474508e938c57b9ca21617f666e97a38"}], 0x28}}], 0x2, 0x80d0) (async) sendmmsg(r4, &(0x7f000000f4c0)=[{{&(0x7f0000006040)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, 0x0}}, {{&(0x7f0000006740)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=[{0x28, 0x111, 0x7, "fc474508e938c57b9ca21617f666e97a38"}], 0x28}}], 0x2, 0x80d0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000400000028001280090001007665746800000000180002801400010000000000c7029cbc5db9cb3728ad7e4144b3a073d54240d332e31665d966928db99c5a55da4a411845e7670f86ed9fff6e14181b3c8e17c43899348dae33fedd6b31c132fbfe1d033fb216cb7816839249f2867c855367ec419877d6b13fdeebe6284c7ea96e06de14992b8bb2ae999746199b47f6e8268332e799619943a241e5408547738799a431908ebb25d0c5fedd82613924", @ANYRES32=0x0, @ANYBLOB="000302000000000008001b0006000000080029008dba0100"], 0x58}}, 0x4040004) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000400000028001280090001007665746800000000180002801400010000000000c7029cbc5db9cb3728ad7e4144b3a073d54240d332e31665d966928db99c5a55da4a411845e7670f86ed9fff6e14181b3c8e17c43899348dae33fedd6b31c132fbfe1d033fb216cb7816839249f2867c855367ec419877d6b13fdeebe6284c7ea96e06de14992b8bb2ae999746199b47f6e8268332e799619943a241e5408547738799a431908ebb25d0c5fedd82613924", @ANYRES32=0x0, @ANYBLOB="000302000000000008001b0006000000080029008dba0100"], 0x58}}, 0x4040004) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x52, 0x0, 0x0) (async) syz_emit_ethernet(0x52, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pwrite64(r8, &(0x7f00000004c0)="fdf1", 0x2, 0xd39) readv(r8, &(0x7f00000000c0)=[{0x0, 0x15}, {&(0x7f0000000200)=""/237, 0xed}], 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf253200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900060000005c000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200000d0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf253200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900060000005c000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200000d0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x4a00, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1m44.565764423s ago: executing program 3 (id=6340): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040)={0x1ff, "000080"}, 0x6) (fail_nth: 2) 1m44.35292867s ago: executing program 3 (id=6344): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="08000000000000000af3000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000002000"], 0x5000) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x1, {0x0, 0xffffffff}}, 0x10) 1m44.250828033s ago: executing program 37 (id=6344): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="08000000000000000af3000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000002000"], 0x5000) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x1, {0x0, 0xffffffff}}, 0x10) 59.396843289s ago: executing program 4 (id=7199): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61f, &(0x7f0000001680)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf9, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x802, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33b9c, 0x1b400}}, 0x20}}, 0x0) 58.916608811s ago: executing program 4 (id=7208): socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0xa00, 0x0, 0x0, 0x2}, 0x48) 58.739263144s ago: executing program 4 (id=7210): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 32) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) (rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000"], 0xc8) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x2, 0x8, 0xf7, 0x6, 0x5, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_address={0x3, 0x18, 0x6c, 0xa0, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x28}}, 0x4044084) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="200000000000000049000000020000000a000400280000000b00005f54e62f5a3a5bf5ee8e70e4c34140f9ebc599a2179b50c7976fcc364c1ae56ca4294a0bd9e230220c6cba33fc413704f3ce2acdfd3da833b9c08a3217b3062bd2549993ff6c100a4e2e6d1689e34d29327ba8d7213ee1762fe0b338000169132c4afc78", @ANYRES32=r6], 0x20, 0x2400e044}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 58.572803225s ago: executing program 4 (id=7211): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001900)={0x1208, 0x0, 0x1, 0x801, 0x70bd28, 0x25dfdbfd, {0x1, 0x0, 0x9}, [@nested={0x11ec, 0xab, 0x0, 0x1, [@typed={0x8, 0x122, 0x0, 0x0, @u32=0x10000}, @typed={0x8, 0x3d, 0x0, 0x0, @pid=r2}, @generic="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", @nested={0x4, 0x138}, @generic="63b2b7fcc5289e2b349aca9ddff9a13651ae40ea1f0cb5d6f87ed2abc0e0fd23b262a2aa1377876a127e79cd55ce6d50dce9eda9a4e325d71d2c08d094bc47ef8265dbfc8b809593c9318f66e7cff3262b89c0fb4ee496092c19cbd82c07d3861f4acd0282e5ef882fa83cf2cce866759a98e34a4d61cf93431a06e6bc633aeffc84f29813467a871fe9e5a9f0f453dd205d3f437d0916233d68decf8ceb6bd6d0f396d4187c0a78e513335bfdffd54463f91bca9d60d18dd72e2f3a9c74328006b2933de89bb9074c93257c7fcd4a5deae69d2d13", @generic="fd8b72282591f55766c4c2c2f8946cbb8e37498fa001ca6cafb0c3f27b9c33f78e2475e54a022bdde18ce16bf7f19335e23db3d6aac3ac0b872b74d8752841db9a5c1d2ca1bb8310ed6d4be0f8138ad2714957d101ae8e7d5e8b10e3f8e62e11359c19441af093b407055601687b49ea49bc0c8b5ed991d9dfe13cc17008ab76011780f4c5cbaab711d4fb5ae40ee2a449b9b6597e8eec736c2c0a8210d9a0a9731607e55b91b0d00df3f5c55181cbaaf593c56e2cb28be7e54a016f8ed07f47b21b517c8685ab83e27e7f7776973cf4b802815925702259f671b3c2beeb778d5af9503e02435314540697b931446cdb475069c00f038a87be1dc4e4e1dc9f", @generic]}, @typed={0x5, 0xa3, 0x0, 0x0, @str='\x00'}]}, 0x1208}, 0x1, 0x0, 0x0, 0x40c1}, 0x44084) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) ptrace(0x10, r2) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x40900}, 0x40) ptrace$peeksig(0x4209, r2, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x202, 0x19a, 0x33}, 0x18) statx(r6, &(0x7f0000000200)='./bus\x00', 0x0, 0x1, &(0x7f00000006c0)) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x9, 0x2, r2}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "001200", 0x18, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x5e, 0x2, 0x2, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r7, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c00000000001190780000002d341f8500000017c1001890780400"/58], 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r8) r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 58.209723902s ago: executing program 4 (id=7216): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004580)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xffff}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008040) 57.848279709s ago: executing program 4 (id=7226): socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="1080ab", 0x3, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r8, 0x0, 0xc, 0x7) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x18c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0xd, 0xffffffff, 0x1000]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0xc06}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0xb]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_TUPLE_MASTER={0xc4, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x18c}}, 0x40081) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) 57.805482124s ago: executing program 38 (id=7226): socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="1080ab", 0x3, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r5, 0x0, r8, 0x0, 0xc, 0x7) write(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x18c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_LABELS_MASK={0x10, 0x17, [0xd, 0xffffffff, 0x1000]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0xc06}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0xb]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_TUPLE_MASTER={0xc4, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x18c}}, 0x40081) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) 56.307150608s ago: executing program 0 (id=7247): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_TSC(0x1a, 0x1) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r0}}) io_uring_enter(0xffffffffffffffff, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 55.973280861s ago: executing program 0 (id=7252): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x29, 0x4, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000300)=""/156, &(0x7f0000695ffc)=0x9c) creat(&(0x7f0000000000)='./file0\x00', 0x6a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) stat(&(0x7f00000002c0)='./file0\x00', 0x0) 55.859777965s ago: executing program 0 (id=7254): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) dup(0xffffffffffffffff) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcd2, 0x300, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 55.757366699s ago: executing program 0 (id=7256): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r5, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2a000, 0x1000, 0xf00, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000580), 0x0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, 0x4000, r4}, 0x18) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="a669aa80a65e", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 55.547475245s ago: executing program 0 (id=7257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0xfffffffc, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) getpriority(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0xcbb, 0x4, @mcast1, @mcast1, 0x0, 0x10, 0x0, 0xd65}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x460, 0x460, 0x320, 0x460, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff, 0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'pimreg0\x00', 'macsec0\x00', {}, {}, 0x2, 0x8, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8000, 0x78e, 0x1}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xff000000, 0xffffffff], [0xffffffff, 0x0, 0xff, 0x4a25e9edf1a2a8f7], 'pimreg0\x00', 'syzkaller1\x00', {0xff}, {}, 0x2, 0xb, 0x0, 0x1}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x23, 0x10, 0xe, 0x39, 0x6d7, @local, @local, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0x1feffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 0x240, 0x4130}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@empty, 0x6, 0x3d, 0x8}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@local, 0x27, 0x8}}}, {{@ipv6={@mcast1, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xff000000], 'rose0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x2, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x0, 0x2}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) gettimeofday(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) 54.709617124s ago: executing program 0 (id=7264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x20081d, &(0x7f0000000540)={[{@resuid}, {@grpquota}, {@stripe}, {@noblock_validity}]}, 0x3, 0x45e, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x1, 0xfffffffa, 0x0, 0x6, 0x20000, 0x8000000, 0xf}}) chdir(&(0x7f0000001040)='./bus\x00') r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 54.687247577s ago: executing program 39 (id=7264): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x20081d, &(0x7f0000000540)={[{@resuid}, {@grpquota}, {@stripe}, {@noblock_validity}]}, 0x3, 0x45e, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x1, 0xfffffffa, 0x0, 0x6, 0x20000, 0x8000000, 0xf}}) chdir(&(0x7f0000001040)='./bus\x00') r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000280)=0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 18.92102676s ago: executing program 1 (id=7707): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 18.760399861s ago: executing program 1 (id=7708): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004580)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008040) 18.614315409s ago: executing program 1 (id=7710): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x100, 0x4}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x45, 0x3, 0x0) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x3a9142, 0x0) vmsplice(r2, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280)=0x100000000, 0x7fffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000380)=""/243, 0xf3, 0x0, &(0x7f0000000480)=""/68, 0x44}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x18, &(0x7f0000000540)=@framed={{}, [@generic={0x2, 0xf, 0xd, 0x3, 0x400}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd4ad}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @generic={0x0, 0x6, 0x1, 0x7b1, 0x7fff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6e4}}]}, &(0x7f0000000600)='GPL\x00', 0x5f, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="83110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000186900000b00000000000000010000808520000003000000"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @lirc_mode2, r3, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x6, 0x8d3}, 0x10, r4, r5, 0x8, 0x0, &(0x7f0000000880)=[{0x0, 0x1, 0x5, 0xb}, {0x1, 0x1, 0x9, 0x3}, {0x1, 0x2, 0xc, 0x4}, {0x0, 0x2, 0xfff, 0xa}, {0x4, 0x1, 0x10, 0x2}, {0x0, 0x2, 0xc, 0x6}, {0x0, 0x1, 0xa, 0x2}, {0x5, 0x3, 0xf, 0x5}]}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x2}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x21, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd54c, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5eb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x9, 0xa6, &(0x7f0000000c40)=""/166, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0xa, 0x8, 0xffffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, r3, r6], &(0x7f0000000e40)=[{0x1, 0x3, 0x5, 0x5ac3a7ade216f573}, {0x2, 0x5, 0xf, 0x9}], 0x10, 0x7}, 0x94) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) 18.047148982s ago: executing program 1 (id=7715): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000840)="$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") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x966, 0x100000000, 0xffffffffffffffff}) r1 = open(0x0, 0x0, 0x86) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x0, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000200)={0x5, 0x100, 0x81, 0x200, 0x8}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) getdents(r3, &(0x7f00000004c0)=""/66, 0x42) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a}, 0x28) ptrace(0x10, r5) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r6, r6, 0x0, 0x7a680000) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) lseek(r2, 0x7ff, 0x1) getdents64(r2, 0x0, 0x10) 17.649583554s ago: executing program 1 (id=7720): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6e5, 0x12, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x0, 0x10100, 0x0, 0x1, 0x8, 0x2e, 0xf, 0x0, 0x0, 0x0, 0x2000000b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x614, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5e8, 0x2, [@TCA_U32_SEL={0x5e4, 0x5, {0xf, 0x1, 0x5e, 0x10, 0x6, 0x2, 0x5, 0x5, [{0xfffffff9, 0x66, 0xe, 0x2}, {0xe2, 0x5, 0x11c, 0x43d5}, {0x8, 0x1, 0xffffff81, 0x5}, {0x0, 0x679, 0x0, 0x3}, {0xb, 0xffff0001, 0x10, 0x9cd}, {0x7, 0x8, 0x8, 0x3}, {0x9, 0xf, 0x0, 0x7}, {0x6e5, 0xd7b, 0x80000000, 0x2000000}, {0x2, 0x2, 0x5, 0x9}, {0x9, 0x80, 0xa, 0x5}, {0x80, 0x3, 0x903, 0x3b9}, {0xa55, 0x8000, 0x9, 0xe5}, {0x3, 0x847b, 0x7, 0x8}, {0x7ff, 0x7, 0x8, 0x5}, {0x10, 0x2, 0xffff, 0x7fffffff}, {0x0, 0x70a, 0x6, 0x6}, {0x2, 0x9, 0x1, 0x5}, {0x0, 0xfffffffe, 0x7, 0x4}, {0x3, 0x3}, {0x2, 0x0, 0x4, 0xf8d4}, {0x8000, 0x1000, 0x22663cd8, 0x3}, {0xef3, 0xd, 0x7, 0x81}, {0x42b0, 0x2, 0x4bbb, 0x7fff}, {0x0, 0x5a2, 0x4, 0x3ff}, {0x4, 0x0, 0x4, 0x400}, {0x10000, 0x2, 0x9, 0x40b}, {0xfffffffe, 0x6, 0x80000000, 0x9000}, {0x2, 0xa696, 0x10000, 0x6}, {0x9, 0x3b, 0x5, 0x6}, {0x7fffffff, 0xa3, 0x5, 0x2}, {0x280, 0x7ff, 0x2, 0x1d57}, {0x2, 0x10, 0x7fff, 0x3}, {0x812, 0x7, 0xffffffff, 0x4}, {0x1, 0xff, 0xb450, 0x401}, {0x8, 0xa90, 0x2, 0x1}, {0x2, 0x5, 0x7, 0x2}, {0xa, 0x3, 0x0, 0x9}, {0x7fffffff, 0x8, 0x6, 0x5}, {0x6, 0xd7, 0x7, 0x8}, {0x3, 0x4, 0x9, 0x7fffffff}, {0x80, 0x8, 0x3f, 0x4}, {0x643, 0x19df, 0x1, 0x3ff}, {0x5, 0xb3f, 0x3ff, 0x8}, {0x4, 0x78c, 0xf, 0xe000000}, {0xfff, 0x2, 0x80000001, 0x7eca}, {0x9, 0x3ff, 0x44efcf3c, 0x7ff}, {0x6ae, 0x3, 0xd, 0xe}, {0xfffff414, 0x7, 0x6, 0x8}, {0x6da8, 0xffffa8fd, 0x1, 0x3}, {0x10001, 0x80000001, 0x200, 0x8000}, {0x3, 0x3, 0xc8e6, 0x6}, {0x6, 0x1, 0x4, 0x7fffffff}, {0x5, 0x6a1, 0xb, 0x9}, {0x0, 0x9, 0x1, 0x8}, {0x8000, 0x5, 0x6, 0xffffff0e}, {0x1, 0x4, 0xffffffff, 0xfffff001}, {0xff, 0x40, 0x4, 0x80}, {0xde1, 0x200, 0x81, 0x3ff}, {0x400, 0x9, 0x8, 0x100}, {0x9b, 0x2, 0x1, 0xc82}, {0xe650, 0x121, 0x7, 0x3}, {0x7, 0x1, 0x4, 0x8}, {0x7, 0x1, 0x480000, 0x7fffffff}, {0x4, 0x0, 0xb}, {0x40, 0x0, 0x4ffd2e57, 0x1}, {0x80, 0x7fffffff, 0xffffffff, 0x1000}, {0x3, 0x8, 0x8, 0x621}, {0x9, 0xb, 0x0, 0x528}, {0x4, 0x4, 0x1, 0x4}, {0xa2, 0x7, 0x5, 0x3}, {0x7fff, 0x8, 0x2, 0x1}, {0x6, 0x9, 0x1, 0x5}, {0xc, 0xffffdfd3, 0x5}, {0x69, 0x81, 0xdd8, 0x1000}, {0x7ff, 0x9, 0x0, 0x7}, {0x7, 0xc6, 0x2, 0x9}, {0xacb7, 0x6, 0x10000, 0x7}, {0x5, 0xb, 0xe1e4, 0x1}, {0x10001, 0x7, 0x8, 0x2}, {0x6, 0x3, 0x45, 0x4}, {0x9, 0x8000, 0x1, 0x95}, {0x2, 0x0, 0x3, 0x8}, {0x7, 0x4, 0x8, 0x2067}, {0x2, 0x8, 0x3, 0x6}, {0x4, 0x4, 0x4, 0x9}, {0x2, 0x18, 0x10001, 0x800}, {0x3, 0x9, 0x8dd4, 0x6}, {0x9, 0x81, 0x1, 0xe4}, {0x9, 0x0, 0xffffffff, 0x615d}, {0x1, 0x0, 0x6, 0x9}, {0x4, 0x2, 0x3, 0x2e}, {0x4, 0x54, 0xfffffff9, 0x810}, {0x1, 0x0, 0x39, 0x1}]}}]}}]}, 0x614}}, 0x24040084) 17.473573106s ago: executing program 1 (id=7726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TIOCSTI(r2, 0x80045440, &(0x7f0000000000)=0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r4 = dup(r0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x4, 0x0, 0x0) 17.414191274s ago: executing program 40 (id=7726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TIOCSTI(r2, 0x80045440, &(0x7f0000000000)=0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r4 = dup(r0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x4, 0x0, 0x0) 3.399894812s ago: executing program 7 (id=7928): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@sysvgroups}]}, 0x1, 0x5e2, &(0x7f0000000600)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000ff5adfffe0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000001000000006c00000000000000ac14143500000000000000000000000000000000020000000000000000000000000000007f000001000000000000000000000000000000006c00000002000000fc0100000000000000000000000000000000000005000200"/500], 0x23c}}, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r0, r0, &(0x7f00000001c0)=0x4, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000380)=0x60, 0x4) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0500c148faf90ae9d3d6ef79f5a26adf5e83b1caed26fc4700"], 0x58}, 0x1, 0x0, 0x0, 0x20004854}, 0x20040850) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r6}, 0x10) 3.245739422s ago: executing program 6 (id=7930): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fallocate(r1, 0x0, 0x9c0, 0x8e) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x38, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map=0x1, 0xffffffffffffffff, 0x26, 0x18}, 0x20) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='6\x00\x00\x00'], 0x20}}, 0x0) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3.135348076s ago: executing program 6 (id=7932): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) 2.861669761s ago: executing program 6 (id=7935): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) write(r2, 0x0, 0x0) 2.689615714s ago: executing program 7 (id=7939): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2ab, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c6966"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.527079554s ago: executing program 7 (id=7943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.002908742s ago: executing program 9 (id=7948): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6e5, 0x12, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x0, 0x10100, 0x0, 0x1, 0x8, 0x2e, 0xf, 0x0, 0x0, 0x0, 0x2000000b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x614, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5e8, 0x2, [@TCA_U32_SEL={0x5e4, 0x5, {0xf, 0x1, 0x5e, 0x10, 0x6, 0x2, 0x5, 0x5, [{0xfffffff9, 0x66, 0xe, 0x2}, {0xe2, 0x5, 0x11c, 0x43d5}, {0x8, 0x1, 0xffffff81, 0x5}, {0x0, 0x679, 0x0, 0x3}, {0xb, 0xffff0001, 0x10, 0x9cd}, {0x7, 0x8, 0x8, 0x3}, {0x9, 0xf, 0x0, 0x7}, {0x6e5, 0xd7b, 0x80000000, 0x2000000}, {0x2, 0x2, 0x5, 0x9}, {0x9, 0x80, 0xa, 0x5}, {0x80, 0x3, 0x903, 0x3b9}, {0xa55, 0x8000, 0x9, 0xe5}, {0x3, 0x847b, 0x7, 0x8}, {0x7ff, 0x7, 0x8, 0x5}, {0x10, 0x2, 0xffff, 0x7fffffff}, {0x0, 0x70a, 0x6, 0x6}, {0x2, 0x9, 0x1, 0x5}, {0x0, 0xfffffffe, 0x7, 0x4}, {0x3, 0x3}, {0x2, 0x0, 0x4, 0xf8d4}, {0x8000, 0x1000, 0x22663cd8, 0x3}, {0xef3, 0xd, 0x7, 0x81}, {0x42b0, 0x2, 0x4bbb, 0x7fff}, {0x0, 0x5a2, 0x4, 0x3ff}, {0x4, 0x0, 0x4, 0x400}, {0x10000, 0x2, 0x9, 0x40b}, {0xfffffffe, 0x6, 0x80000000, 0x9000}, {0x2, 0xa696, 0x10000, 0x6}, {0x9, 0x3b, 0x5, 0x6}, {0x7fffffff, 0xa3, 0x5, 0x2}, {0x2, 0x10, 0x7fff, 0x3}, {0x812, 0x7, 0xffffffff, 0x4}, {0x1, 0xff, 0xb450, 0x401}, {0x8, 0xa90, 0x2, 0x1}, {0x2, 0x5, 0x7, 0x2}, {0xa, 0x3, 0x0, 0x9}, {0x2, 0x800, 0x3, 0x4}, {0x7fffffff, 0x8, 0x6, 0x5}, {0x6, 0xd7, 0x7, 0x8}, {0x3, 0x4, 0x9, 0x7fffffff}, {0x80, 0x8, 0x3f, 0x4}, {0x643, 0x19df, 0x1, 0x3ff}, {0x5, 0xb3f, 0x3ff, 0x8}, {0x4, 0x78c, 0xf, 0xe000000}, {0xfff, 0x2, 0x80000001, 0x7eca}, {0x9, 0x3ff, 0x44efcf3c, 0x7ff}, {0x6ae, 0x3, 0xd, 0xe}, {0xfffff414, 0x7, 0x6, 0x8}, {0x6da8, 0xffffa8fd, 0x1, 0x3}, {0x10001, 0x80000001, 0x200, 0x8000}, {0x3, 0x3, 0xc8e6, 0x6}, {0x6, 0x1, 0x4, 0x7fffffff}, {0x5, 0x6a1, 0xb, 0x9}, {0x0, 0x9, 0x1, 0x8}, {0x8000, 0x5, 0x6, 0xffffff0e}, {0x1, 0x4, 0xffffffff, 0xfffff001}, {0xff, 0x40, 0x4, 0x80}, {0xde1, 0x200, 0x81, 0x3ff}, {0x400, 0x9, 0x8, 0x100}, {0x9b, 0x2, 0x1, 0xc82}, {0xe650, 0x121, 0x7, 0x3}, {0x7, 0x1, 0x4, 0x8}, {0x7, 0x1, 0x480000, 0x7fffffff}, {0x4, 0x0, 0xb}, {0x40, 0x0, 0x4ffd2e57, 0x1}, {0x80, 0x7fffffff, 0xffffffff, 0x1000}, {0x3, 0x8, 0x8, 0x621}, {0x9, 0xb, 0x0, 0x528}, {0x4, 0x4, 0x1, 0x4}, {0xa2, 0x7, 0x5, 0x3}, {0x7fff, 0x8, 0x2, 0x1}, {0x6, 0x9, 0x1, 0x5}, {0xc, 0xffffdfd3, 0x5}, {0x69, 0x81, 0xdd8, 0x1000}, {0x7ff, 0x9, 0x0, 0x7}, {0x7, 0xc6, 0x2, 0x9}, {0xacb7, 0x6, 0x10000, 0x7}, {0x5, 0xb, 0xe1e4, 0x1}, {0x10001, 0x7, 0x8, 0x2}, {0x6, 0x3, 0x45, 0x4}, {0x9, 0x8000, 0x1, 0x95}, {0x2, 0x0, 0x3, 0x8}, {0x7, 0x4, 0x8, 0x2067}, {0x2, 0x8, 0x3, 0x6}, {0x4, 0x4, 0x4, 0x9}, {0x2, 0x18, 0x10001, 0x800}, {0x3, 0x9, 0x8dd4, 0x6}, {0x9, 0x81, 0x1, 0xe4}, {0x9, 0x0, 0xffffffff, 0x615d}, {0x1, 0x0, 0x6, 0x9}, {0x4, 0x2, 0x3, 0x2e}, {0x4, 0x54, 0xfffffff9, 0x810}, {0x1, 0x0, 0x39, 0x1}]}}]}}]}, 0x614}}, 0x24040084) 1.915070363s ago: executing program 6 (id=7950): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) flock(r0, 0x6) read$eventfd(r0, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, 0x0) fadvise64(r2, 0xffffffff, 0x0, 0x5) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x7ffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a400060040080000240012800c0001006d6163766c616e0014000280100005800a0004000180c20000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @broadcast, @loopback}, &(0x7f0000000280)=0xc) 1.86828982s ago: executing program 9 (id=7951): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x633a, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="800009f3220800ce", 0x8, 0x800, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x28}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) 1.773692861s ago: executing program 9 (id=7952): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x105400, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.739441966s ago: executing program 9 (id=7954): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) 1.695426742s ago: executing program 9 (id=7955): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xa2, &(0x7f0000000300)={@empty, @link_local, @void, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x0, 0x94, 0x3, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x2c, 0x0, 0x7, [0x10001, 0x4]}, @rr={0x7, 0x1f, 0x33, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @loopback, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}, @rr={0x7, 0x2b, 0x32, [@multicast2, @broadcast, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010101, @empty, @private=0xa010102, @empty, @private=0xa010101]}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}, "e1cf000000009c97"}}}}}, 0x0) recvfrom$inet(r1, &(0x7f0000000180)=""/158, 0x9e, 0x0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000022695bfcae0b27a8f2c4ec9749c465590000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b00ab1d65e4de8bf347c72ef700000a00"/180], 0xfc}}, 0x0) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x1, 0x0) keyctl$session_to_parent(0x12) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @empty, {[@noop]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.560310299s ago: executing program 6 (id=7957): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4000045) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.329422009s ago: executing program 7 (id=7960): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) write(r2, 0x0, 0x0) 1.017606849s ago: executing program 2 (id=7964): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf2501000000"], 0x29}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x28, r3, 0xc4fc9e906872338b, 0x3, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x8024}, 0x4040000) 972.283105ms ago: executing program 2 (id=7966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x2a020400) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x6) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005500e50226bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000180", @ANYRES32=0x0, @ANYBLOB="00010100fe8000000000000000000000000000aa08"], 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x20000100) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111, 0x3}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="58000000000000000040f9ffffff00009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040200) 719.771727ms ago: executing program 6 (id=7968): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="330000000000980b537b8c00003e418fd58cc222f1bc8240579e68534b104f6f7d22f7d067bb42bf48baf6cb3aca06000000000000"], 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 719.544678ms ago: executing program 41 (id=7968): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="330000000000980b537b8c00003e418fd58cc222f1bc8240579e68534b104f6f7d22f7d067bb42bf48baf6cb3aca06000000000000"], 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 719.106668ms ago: executing program 5 (id=7970): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4000045) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 667.597854ms ago: executing program 9 (id=7971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 667.150824ms ago: executing program 2 (id=7972): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x16a00, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffcb7, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x2c, 0x28, 0xd27, 0xfff, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x9, 0x9}, {}, {0x2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r2, 0xffffffffffffffff, 0x0) 638.670328ms ago: executing program 5 (id=7973): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 570.659297ms ago: executing program 2 (id=7974): socket$netlink(0x10, 0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xd3}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x0, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x1, 0x1000, 0xfd, 0x3, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000007c0)="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", 0x113, 0x48041, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @local}, 0x14) 501.628756ms ago: executing program 5 (id=7975): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000007311a40000000000851000000200000085000000080000009500000a000000009500a50500000004e1bcdddadf1faed8e675bb59c05987e49fb37368e7b80f9e5397a39385ea0e9158c4a521c4e2ee56898eb34b65eb8661a9f01dd0e9a86c045c0f3e492c7ba117e81b847ada04266d70a7924ccefcd2cac0197b884001807cb485e55ab285826f6fac4b433d653fbd4f4151ec20f01c4faea3217ba98c316dd908368539f35cdd00b2cdea06c30000000000000000dfcd5bbe94755b9d15505481d1ffc7bee9ba1c7d79ddb82175d6a91cb930a246dbbc907addae4fafcabf5364eb58bb36a1e19d"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES32=r1, @ANYRES32=r0], 0x18, 0x48000}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) 447.378313ms ago: executing program 7 (id=7976): move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil], &(0x7f0000000040)=[0x247], &(0x7f0000000080)=[0x0, 0x0], 0x4) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/43, 0x2b) getdents(r3, 0x0, 0xbb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vlan1\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000300), 0x8) socket$inet_tcp(0x2, 0x1, 0x0) bind$802154_dgram(r5, &(0x7f0000000680)={0x24, @short={0x2, 0x3}}, 0x14) 410.397958ms ago: executing program 5 (id=7977): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) 373.632152ms ago: executing program 5 (id=7978): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4000045) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 213.581133ms ago: executing program 7 (id=7979): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x4c00, 0x32, 0x43a1bd76, 0x7, 0xda, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) exit(0xffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = memfd_create(&(0x7f0000000980)='\vem\xda\xd4X\xd7+\xfc\xbe\x9b#*\xff\x13\xe8\x17L\xf8\xe9U\xb1\x90\xca1\xa7\xe8&\x7f\xdb1\xb4O\xf9\xf3\x14\xfab\xb7\xe7\xc4\x02\a\xf1\x8b\xbcZ\xa5\xc8\xec\xcc\xfb\xfa\xff\x01\x00\x00\x00\x00\x00\x00Y\x8b\xcd\x8d\xc2\x1a\xa7\xed$}S\x1fw\xcc\xb6\xa1\xd2\xeeLb\a\x94\xecr\x04\xfak\xf8\xed\xc4`K\xe4\xc5)\xa5\xa8v~3\x01\xd9C.o\x97\xb1\xd7\xcc\xbf,\xed\'\x84R\xda\xefB\x85o\xf6\xa2\xd49q4\x15\\\xf3\x1f\xe7\x9c\xc1&\x15\x065\xdd\x12|z?}E\x02\xf1\x1fc}\x109\xd3\x92\x99Y\x9b\xaa\x17n\xa6_\vE \f\xb178\x02\x13j\xa0!\x00\x00\x03\x8f\\a\xd8\xe1\xfb\xa2x>\xbbq\x1bD\x00\x00\x00\x00\x00\x00\x00\x00\x00l{\xf26\xb0V\x89h\xb1\xe6}\x13\t\xfc\xae`\xdb\x9b\x8e\xb61\x96U4\xd2P\xb4\x1b\x15\xbaS\xcf\x11\xdfc\xcd\x80\x92n\x81\xa3\xbd\x12\x87\xef\xca\xc9)\xa4\xfc\x82\x10\xe6\xa0\xdb\x87=\x10\x1f\x12\xa1\xdb\xe9\xa0S8\xab\xca\xbd\xcb\xdd\xca\x9f\xb33\x1e\xb1`Y?\x9e\x87/\xb71\x17li\x82\xfa\xce]s\xf7\xbc\x97Arl\xfaV\x88\xd3\xd9\f\x1fx\x16H\xfc\xeb2\xf1\xd7\xe6i\xcd$T\xa7K\xd1@\x1b\x11\xd4[\xdd\xa3\xa4\tj\xd9\x04\x9b#\x81\xa0\x1c\x00'/354, 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) syz_open_dev$loop(&(0x7f0000000140), 0xffff, 0x80040) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64=r4], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) ioctl$int_in(r9, 0x5452, &(0x7f0000000940)=0x707987cd) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000aa00000aef3800"/29, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) recvmsg(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r13, 0x402c542c, &(0x7f0000000000)={0x2, 0xfffffffd, 0xfc000000, 0xfffffffb, 0x3, "31c6a3fba604cfb0ea51202a2439c4c3edcde7", 0x2, 0xf}) 213.023483ms ago: executing program 5 (id=7980): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xa2, &(0x7f0000000300)={@empty, @link_local, @void, {@ipv4={0x800, @icmp={{0x1c, 0x4, 0x0, 0x0, 0x94, 0x3, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x2c, 0x0, 0x7, [0x10001, 0x4]}, @rr={0x7, 0x1f, 0x33, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @loopback, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}, @rr={0x7, 0x2b, 0x32, [@multicast2, @broadcast, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010101, @empty, @private=0xa010102, @empty, @private=0xa010101]}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}, "e1cf000000009c97"}}}}}, 0x0) recvfrom$inet(r1, &(0x7f0000000180)=""/158, 0x9e, 0x0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000022695bfcae0b27a8f2c4ec9749c465590000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b00ab1d65e4de8bf347c72ef700000a00"/180], 0xfc}}, 0x0) sendto$packet(r2, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x1, 0x0) keyctl$session_to_parent(0x12) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @empty, {[@noop]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 93.596809ms ago: executing program 2 (id=7981): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r4, r3}, 0xc) mount$9p_fd(0x0, &(0x7f00000002c0)='./file3\x00', 0x0, 0x1000, 0x0) 0s ago: executing program 2 (id=7982): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4000045) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): 446.269213][T28398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.353940][T28410] loop7: detected capacity change from 0 to 256 [ 446.412814][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.612352][T28429] syzkaller0: entered promiscuous mode [ 446.618911][T28429] syzkaller0: entered allmulticast mode [ 446.730121][T28429] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 446.743362][T28461] 9p: Bad value for 'wfdno' [ 446.758161][T28429] vhci_hcd vhci_hcd.2: invalid port number 96 [ 446.764470][T28429] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 447.101044][T28519] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7455'. [ 447.127034][ T3487] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 447.142794][ T3487] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.184286][T28519] loop9: detected capacity change from 0 to 2048 [ 447.241857][T28519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.410325][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.703268][T28574] loop9: detected capacity change from 0 to 1024 [ 447.717025][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 447.722546][T28574] EXT4-fs: Ignoring removed orlov option [ 447.749635][T28574] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.883015][T28579] ip6_vti0 speed is unknown, defaulting to 1000 [ 447.956316][T28589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7466'. [ 447.977726][T28586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7465'. [ 448.047934][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.077776][T28595] loop5: detected capacity change from 0 to 256 [ 448.138672][T28602] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7467'. [ 448.328163][T28602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28602 comm=syz.9.7467 [ 449.187969][T28709] syzkaller1: entered promiscuous mode [ 449.193491][T28709] syzkaller1: entered allmulticast mode [ 449.317650][T28715] __nla_validate_parse: 2 callbacks suppressed [ 449.317728][T28715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7479'. [ 449.454675][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 449.454690][ T29] audit: type=1400 audit(5569.476:41708): avc: denied { getopt } for pid=28723 comm="syz.7.7484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 449.486715][T28726] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7484'. [ 449.548037][ T29] audit: type=1326 audit(5569.536:41709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.571223][ T29] audit: type=1326 audit(5569.536:41710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.594425][ T29] audit: type=1326 audit(5569.536:41711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.617592][ T29] audit: type=1326 audit(5569.536:41712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.641125][ T29] audit: type=1326 audit(5569.536:41713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.664965][ T29] audit: type=1326 audit(5569.536:41714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.688274][ T29] audit: type=1326 audit(5569.536:41715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.711421][ T29] audit: type=1326 audit(5569.536:41716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.734466][ T29] audit: type=1326 audit(5569.536:41717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28721 comm="syz.5.7482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 449.742484][T28739] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7489'. [ 449.781780][T28729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7482'. [ 449.948889][T28746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7492'. [ 449.987389][ T4371] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 449.995524][ T4371] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.066275][T28753] tipc: Enabling of bearer rejected, failed to enable media [ 450.089784][T28755] fido_id[28755]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 450.100362][T28767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7499'. [ 450.123716][ T4371] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 450.134167][T28767] loop5: detected capacity change from 0 to 2048 [ 450.141283][ T4371] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.170320][T28767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.218233][T28777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.348529][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.408639][T28792] FAULT_INJECTION: forcing a failure. [ 450.408639][T28792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.422468][T28792] CPU: 0 UID: 0 PID: 28792 Comm: syz.6.7508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 450.422532][T28792] Tainted: [W]=WARN [ 450.422539][T28792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.422630][T28792] Call Trace: [ 450.422637][T28792] [ 450.422645][T28792] __dump_stack+0x1d/0x30 [ 450.422670][T28792] dump_stack_lvl+0x95/0xd0 [ 450.422701][T28792] dump_stack+0x15/0x1b [ 450.422760][T28792] should_fail_ex+0x263/0x280 [ 450.422792][T28792] should_fail+0xb/0x20 [ 450.422818][T28792] should_fail_usercopy+0x1a/0x20 [ 450.422851][T28792] _copy_from_iter+0xcf/0xea0 [ 450.422879][T28792] ? lockref_put_return+0xf7/0x130 [ 450.423017][T28792] ? __rcu_read_unlock+0x4e/0x70 [ 450.423044][T28792] copy_page_from_iter+0x178/0x2a0 [ 450.423158][T28792] tun_get_user+0xbbd/0x27c0 [ 450.423198][T28792] ? ref_tracker_alloc+0x1f2/0x2f0 [ 450.423234][T28792] tun_chr_write_iter+0x15e/0x210 [ 450.423267][T28792] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 450.423366][T28792] vfs_write+0x5a6/0x9f0 [ 450.423390][T28792] ksys_write+0xdc/0x1a0 [ 450.423415][T28792] __x64_sys_write+0x40/0x50 [ 450.423439][T28792] x64_sys_call+0x2847/0x3000 [ 450.423471][T28792] do_syscall_64+0xc0/0x2a0 [ 450.423534][T28792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.423558][T28792] RIP: 0033:0x7f69a0c3b58e [ 450.423606][T28792] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 450.423688][T28792] RSP: 002b:00007f699f6d6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.423710][T28792] RAX: ffffffffffffffda RBX: 00007f699f6d76c0 RCX: 00007f69a0c3b58e [ 450.423726][T28792] RDX: 000000000000007c RSI: 0000200000000480 RDI: 00000000000000c8 [ 450.423821][T28792] RBP: 00007f699f6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 450.423834][T28792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.423847][T28792] R13: 00007f69a0ef6038 R14: 00007f69a0ef5fa0 R15: 00007ffe12c66418 [ 450.423869][T28792] [ 450.718743][T28797] loop5: detected capacity change from 0 to 1024 [ 450.756598][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7509'. [ 450.761405][T28797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.785178][T28797] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 450.795890][T28797] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 450.817173][T28797] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: comm syz.5.7511: inode #1: comm syz.5.7511: iget: illegal inode # [ 450.839418][T28797] EXT4-fs (loop5): no journal found [ 450.844828][T28797] EXT4-fs (loop5): can't get journal size [ 450.866390][T28797] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 450.874649][T28797] EXT4-fs (loop5): failed to initialize system zone (-22) [ 450.882754][T28797] EXT4-fs (loop5): mount failed [ 451.074635][T28810] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7515'. [ 451.114657][T28812] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.129153][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7517'. [ 451.164062][T28818] netlink: 'syz.5.7519': attribute type 21 has an invalid length. [ 451.172600][T28818] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7519'. [ 451.183396][ T4371] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 451.202310][ T4371] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.226302][T28814] loop9: detected capacity change from 0 to 2048 [ 451.257807][T28818] netlink: 'syz.5.7519': attribute type 5 has an invalid length. [ 451.265620][T28818] netlink: 'syz.5.7519': attribute type 6 has an invalid length. [ 451.284255][T28814] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.356357][T28818] unsupported nlmsg_type 40 [ 451.387919][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.468841][T28832] loop9: detected capacity change from 0 to 256 [ 451.544409][ T3487] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 451.555938][ T3487] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.609719][T28841] fido_id[28841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 451.904709][T28863] FAULT_INJECTION: forcing a failure. [ 451.904709][T28863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.918695][T28863] CPU: 0 UID: 0 PID: 28863 Comm: syz.1.7527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 451.918778][T28863] Tainted: [W]=WARN [ 451.918785][T28863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.918798][T28863] Call Trace: [ 451.918828][T28863] [ 451.918836][T28863] __dump_stack+0x1d/0x30 [ 451.918864][T28863] dump_stack_lvl+0x95/0xd0 [ 451.918889][T28863] dump_stack+0x15/0x1b [ 451.918909][T28863] should_fail_ex+0x263/0x280 [ 451.919005][T28863] should_fail+0xb/0x20 [ 451.919031][T28863] should_fail_usercopy+0x1a/0x20 [ 451.919111][T28863] _copy_to_user+0x20/0xa0 [ 451.919139][T28863] con_get_trans_old+0x204/0x250 [ 451.919181][T28863] vt_ioctl+0xf43/0x18d0 [ 451.919199][T28863] ? tty_jobctrl_ioctl+0x29c/0x810 [ 451.919267][T28863] tty_ioctl+0x7d7/0xb80 [ 451.919287][T28863] ? __pfx_tty_ioctl+0x10/0x10 [ 451.919307][T28863] __se_sys_ioctl+0xce/0x140 [ 451.919338][T28863] __x64_sys_ioctl+0x43/0x50 [ 451.919433][T28863] x64_sys_call+0x14b0/0x3000 [ 451.919464][T28863] do_syscall_64+0xc0/0x2a0 [ 451.919491][T28863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.919545][T28863] RIP: 0033:0x7f72a551acb9 [ 451.919561][T28863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.919580][T28863] RSP: 002b:00007f72a3f77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.919601][T28863] RAX: ffffffffffffffda RBX: 00007f72a5795fa0 RCX: 00007f72a551acb9 [ 451.919662][T28863] RDX: 0000000000000000 RSI: 0000000000004b40 RDI: 0000000000000003 [ 451.919678][T28863] RBP: 00007f72a3f77090 R08: 0000000000000000 R09: 0000000000000000 [ 451.919692][T28863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.919704][T28863] R13: 00007f72a5796038 R14: 00007f72a5795fa0 R15: 00007ffc264f7568 [ 451.919723][T28863] [ 452.261969][T28877] loop1: detected capacity change from 0 to 8192 [ 452.304385][T28840] syz.9.7520 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 452.318617][T28840] CPU: 1 UID: 0 PID: 28840 Comm: syz.9.7520 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 452.318651][T28840] Tainted: [W]=WARN [ 452.318664][T28840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.318677][T28840] Call Trace: [ 452.318683][T28840] [ 452.318691][T28840] __dump_stack+0x1d/0x30 [ 452.318720][T28840] dump_stack_lvl+0x95/0xd0 [ 452.318828][T28840] dump_stack+0x15/0x1b [ 452.318856][T28840] dump_header+0x80/0x240 [ 452.318884][T28840] oom_kill_process+0x295/0x350 [ 452.318983][T28840] out_of_memory+0x97d/0xb80 [ 452.319008][T28840] try_charge_memcg+0x62e/0xa10 [ 452.319066][T28840] obj_cgroup_charge_pages+0xa6/0x150 [ 452.319119][T28840] __memcg_kmem_charge_page+0x9e/0x170 [ 452.319165][T28840] __alloc_frozen_pages_noprof+0x18a/0x350 [ 452.319206][T28840] alloc_pages_mpol+0xb3/0x260 [ 452.319277][T28840] alloc_pages_noprof+0x8f/0x130 [ 452.319316][T28840] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 452.319361][T28840] __kvmalloc_node_noprof+0x471/0x680 [ 452.319469][T28840] ? ip_set_alloc+0x24/0x30 [ 452.319510][T28840] ? ip_set_alloc+0x24/0x30 [ 452.319556][T28840] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 452.319591][T28840] ip_set_alloc+0x24/0x30 [ 452.319644][T28840] hash_netiface_create+0x282/0x740 [ 452.319729][T28840] ? __pfx_hash_netiface_create+0x10/0x10 [ 452.319785][T28840] ip_set_create+0x3cf/0x970 [ 452.319882][T28840] ? __nla_parse+0x40/0x60 [ 452.319954][T28840] nfnetlink_rcv_msg+0x509/0x5d0 [ 452.320018][T28840] netlink_rcv_skb+0x123/0x220 [ 452.320062][T28840] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 452.320181][T28840] nfnetlink_rcv+0x167/0x1720 [ 452.320222][T28840] ? __kfree_skb+0x109/0x150 [ 452.320273][T28840] ? nlmon_xmit+0x4f/0x60 [ 452.320301][T28840] ? consume_skb+0x49/0x140 [ 452.320343][T28840] ? nlmon_xmit+0x4f/0x60 [ 452.320371][T28840] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 452.320416][T28840] ? __dev_queue_xmit+0x139a/0x1f20 [ 452.320516][T28840] ? __dev_queue_xmit+0x148/0x1f20 [ 452.320560][T28840] ? ref_tracker_free+0x37d/0x3e0 [ 452.320598][T28840] ? __netlink_deliver_tap+0x4dc/0x500 [ 452.320648][T28840] netlink_unicast+0x5c0/0x690 [ 452.320731][T28840] netlink_sendmsg+0x5c8/0x6f0 [ 452.320765][T28840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.320792][T28840] __sock_sendmsg+0x145/0x170 [ 452.320821][T28840] ____sys_sendmsg+0x31e/0x4a0 [ 452.320907][T28840] ___sys_sendmsg+0x195/0x1e0 [ 452.321008][T28840] __x64_sys_sendmsg+0xd4/0x160 [ 452.321075][T28840] x64_sys_call+0x17ba/0x3000 [ 452.321109][T28840] do_syscall_64+0xc0/0x2a0 [ 452.321139][T28840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.321169][T28840] RIP: 0033:0x7eff74ceacb9 [ 452.321233][T28840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.321259][T28840] RSP: 002b:00007eff73726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.321287][T28840] RAX: ffffffffffffffda RBX: 00007eff74f66090 RCX: 00007eff74ceacb9 [ 452.321306][T28840] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 452.321324][T28840] RBP: 00007eff74d58bf7 R08: 0000000000000000 R09: 0000000000000000 [ 452.321389][T28840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.321406][T28840] R13: 00007eff74f66128 R14: 00007eff74f66090 R15: 00007ffc566752c8 [ 452.321433][T28840] [ 452.321518][T28840] memory: usage 307200kB, limit 307200kB, failcnt 305 [ 452.658388][T28840] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0 [ 452.658411][T28840] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0 [ 452.673839][T28840] Memory cgroup stats for /syz9: [ 452.674193][T28840] cache 24576 [ 452.682494][T28840] rss 4096 [ 452.685624][T28840] shmem 0 [ 452.688627][T28840] mapped_file 0 [ 452.692188][T28840] dirty 0 [ 452.695184][T28840] writeback 0 [ 452.698583][T28840] workingset_refault_anon 238 [ 452.703281][T28840] workingset_refault_file 3 [ 452.707851][T28840] swap 307200 [ 452.711588][T28840] swapcached 32768 [ 452.715332][T28840] pgpgin 69232 [ 452.718776][T28840] pgpgout 69217 [ 452.722339][T28840] pgfault 68030 [ 452.725987][T28840] pgmajfault 123 [ 452.729558][T28840] inactive_anon 32768 [ 452.733602][T28840] active_anon 0 [ 452.737209][T28840] inactive_file 4096 [ 452.741120][T28840] active_file 24576 [ 452.744954][T28840] unevictable 0 [ 452.748480][T28840] hierarchical_memory_limit 314572800 [ 452.753877][T28840] hierarchical_memsw_limit 9223372036854771712 [ 452.760172][T28840] total_cache 24576 [ 452.764007][T28840] total_rss 4096 [ 452.767624][T28840] total_shmem 0 [ 452.771150][T28840] total_mapped_file 0 [ 452.775154][T28840] total_dirty 0 [ 452.778682][T28840] total_writeback 0 [ 452.782559][T28840] total_workingset_refault_anon 238 [ 452.787832][T28840] total_workingset_refault_file 3 [ 452.792872][T28840] total_swap 307200 [ 452.796805][T28840] total_swapcached 32768 [ 452.801067][T28840] total_pgpgin 69232 [ 452.805091][T28840] total_pgpgout 69217 [ 452.809176][T28840] total_pgfault 68030 [ 452.813181][T28840] total_pgmajfault 123 [ 452.817305][T28840] total_inactive_anon 32768 [ 452.821921][T28840] total_active_anon 0 [ 452.825944][T28840] total_inactive_file 4096 [ 452.830383][T28840] total_active_file 24576 [ 452.834733][T28840] total_unevictable 0 [ 452.838801][T28840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.7520,pid=28831,uid=0 [ 452.853684][T28840] Memory cgroup out of memory: Killed process 28831 (syz.9.7520) total-vm:94132kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 453.072689][T28942] FAULT_INJECTION: forcing a failure. [ 453.072689][T28942] name failslab, interval 1, probability 0, space 0, times 0 [ 453.085640][T28942] CPU: 1 UID: 0 PID: 28942 Comm: syz.6.7532 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 453.085831][T28942] Tainted: [W]=WARN [ 453.085840][T28942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.085855][T28942] Call Trace: [ 453.085934][T28942] [ 453.085944][T28942] __dump_stack+0x1d/0x30 [ 453.086031][T28942] dump_stack_lvl+0x95/0xd0 [ 453.086056][T28942] dump_stack+0x15/0x1b [ 453.086083][T28942] should_fail_ex+0x263/0x280 [ 453.086113][T28942] should_failslab+0x8c/0xb0 [ 453.086149][T28942] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 453.086183][T28942] ? sidtab_sid2str_get+0xa0/0x130 [ 453.086238][T28942] kmemdup_noprof+0x2b/0x70 [ 453.086300][T28942] sidtab_sid2str_get+0xa0/0x130 [ 453.086360][T28942] security_sid_to_context_core+0x1eb/0x2e0 [ 453.086399][T28942] security_sid_to_context+0x27/0x40 [ 453.086482][T28942] selinux_lsmprop_to_secctx+0x67/0xf0 [ 453.086524][T28942] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 453.086624][T28942] audit_log_subj_ctx+0xa4/0x3e0 [ 453.086671][T28942] ? skb_put+0xa9/0xf0 [ 453.086709][T28942] audit_log_task_context+0x48/0x70 [ 453.086740][T28942] audit_log_task+0xf3/0x250 [ 453.086890][T28942] ? kstrtouint+0x76/0xc0 [ 453.086986][T28942] audit_seccomp+0x60/0x100 [ 453.087026][T28942] ? __seccomp_filter+0x8db/0x1350 [ 453.087056][T28942] __seccomp_filter+0x8ec/0x1350 [ 453.087091][T28942] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 453.087175][T28942] ? vfs_write+0x86e/0x9f0 [ 453.087228][T28942] ? __rcu_read_unlock+0x4e/0x70 [ 453.087248][T28942] ? __fget_files+0x184/0x1c0 [ 453.087282][T28942] __secure_computing+0x81/0x150 [ 453.087318][T28942] syscall_trace_enter+0xce/0x1e0 [ 453.087424][T28942] do_syscall_64+0x9a/0x2a0 [ 453.087448][T28942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.087470][T28942] RIP: 0033:0x7f69a0c7acb9 [ 453.087495][T28942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.087520][T28942] RSP: 002b:00007f699f6d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 453.087577][T28942] RAX: ffffffffffffffda RBX: 00007f69a0ef5fa0 RCX: 00007f69a0c7acb9 [ 453.087591][T28942] RDX: 0000000040000140 RSI: 0000200000000240 RDI: 0000000000000005 [ 453.087654][T28942] RBP: 00007f699f6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 453.087672][T28942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.087685][T28942] R13: 00007f69a0ef6038 R14: 00007f69a0ef5fa0 R15: 00007ffe12c66418 [ 453.087706][T28942] [ 453.634869][T28998] tmpfs: Unknown parameter 'ap' [ 453.655138][T29005] loop5: detected capacity change from 0 to 512 [ 453.687042][T29005] EXT4-fs: Ignoring removed nobh option [ 453.719454][T29005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.811064][T29005] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.7539: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 453.877079][T29025] loop6: detected capacity change from 0 to 256 [ 453.913731][T29023] loop9: detected capacity change from 0 to 1024 [ 453.922610][T29023] EXT4-fs: inline encryption not supported [ 453.931956][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.019947][T29023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.180948][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.229961][T29030] syz.6.7546 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 454.244749][T29030] CPU: 0 UID: 0 PID: 29030 Comm: syz.6.7546 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 454.244783][T29030] Tainted: [W]=WARN [ 454.244790][T29030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.244834][T29030] Call Trace: [ 454.244844][T29030] [ 454.244852][T29030] __dump_stack+0x1d/0x30 [ 454.244883][T29030] dump_stack_lvl+0x95/0xd0 [ 454.244930][T29030] dump_stack+0x15/0x1b [ 454.244957][T29030] dump_header+0x80/0x240 [ 454.245026][T29030] oom_kill_process+0x295/0x350 [ 454.245056][T29030] out_of_memory+0x97d/0xb80 [ 454.245183][T29030] try_charge_memcg+0x62e/0xa10 [ 454.245294][T29030] obj_cgroup_charge_pages+0xa6/0x150 [ 454.245339][T29030] __memcg_kmem_charge_page+0x9e/0x170 [ 454.245379][T29030] __alloc_frozen_pages_noprof+0x18a/0x350 [ 454.245489][T29030] alloc_pages_mpol+0xb3/0x260 [ 454.245589][T29030] alloc_pages_noprof+0x8f/0x130 [ 454.245619][T29030] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 454.245729][T29030] __kvmalloc_node_noprof+0x471/0x680 [ 454.245767][T29030] ? ip_set_alloc+0x24/0x30 [ 454.245850][T29030] ? ip_set_alloc+0x24/0x30 [ 454.245938][T29030] ip_set_alloc+0x24/0x30 [ 454.245972][T29030] hash_netiface_create+0x282/0x740 [ 454.246057][T29030] ? __pfx_hash_netiface_create+0x10/0x10 [ 454.246092][T29030] ip_set_create+0x3cf/0x970 [ 454.246120][T29030] ? __nla_parse+0x40/0x60 [ 454.246231][T29030] nfnetlink_rcv_msg+0x509/0x5d0 [ 454.246291][T29030] netlink_rcv_skb+0x123/0x220 [ 454.246422][T29030] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 454.246487][T29030] nfnetlink_rcv+0x167/0x1720 [ 454.246529][T29030] ? __list_del_entry_valid_or_report+0x65/0x130 [ 454.246660][T29030] ? __rmqueue_pcplist+0x9b6/0xb80 [ 454.246694][T29030] ? _raw_spin_lock_bh+0x56/0xb0 [ 454.246721][T29030] ? should_fail_ex+0x30/0x280 [ 454.246871][T29030] ? selinux_nlmsg_lookup+0x99/0x890 [ 454.246904][T29030] ? __rcu_read_unlock+0x33/0x70 [ 454.246930][T29030] ? __netlink_lookup+0x276/0x2b0 [ 454.246960][T29030] netlink_unicast+0x5c0/0x690 [ 454.246994][T29030] netlink_sendmsg+0x5c8/0x6f0 [ 454.247091][T29030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.247145][T29030] __sock_sendmsg+0x145/0x170 [ 454.247224][T29030] ____sys_sendmsg+0x31e/0x4a0 [ 454.247262][T29030] ___sys_sendmsg+0x195/0x1e0 [ 454.247308][T29030] __x64_sys_sendmsg+0xd4/0x160 [ 454.247373][T29030] x64_sys_call+0x17ba/0x3000 [ 454.247401][T29030] do_syscall_64+0xc0/0x2a0 [ 454.247457][T29030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.247481][T29030] RIP: 0033:0x7f69a0c7acb9 [ 454.247499][T29030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.247520][T29030] RSP: 002b:00007f699f6b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.247542][T29030] RAX: ffffffffffffffda RBX: 00007f69a0ef6090 RCX: 00007f69a0c7acb9 [ 454.247733][T29030] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 454.247748][T29030] RBP: 00007f69a0ce8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 454.247762][T29030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.247775][T29030] R13: 00007f69a0ef6128 R14: 00007f69a0ef6090 R15: 00007ffe12c66418 [ 454.247795][T29030] [ 454.563445][T29030] memory: usage 307200kB, limit 307200kB, failcnt 2804 [ 454.570544][T29030] memory+swap: usage 344584kB, limit 9007199254740988kB, failcnt 0 [ 454.578604][T29030] kmem: usage 278384kB, limit 9007199254740988kB, failcnt 0 [ 454.586667][T29030] Memory cgroup stats for /syz6: [ 454.586906][T29030] cache 29163520 [ 454.595561][T29030] rss 311296 [ 454.598779][T29030] shmem 29159424 [ 454.602346][T29030] mapped_file 0 [ 454.606503][T29030] dirty 0 [ 454.609469][T29030] writeback 0 [ 454.612839][T29030] workingset_refault_anon 78 [ 454.617673][T29030] workingset_refault_file 320 [ 454.622376][T29030] swap 38281216 [ 454.626510][T29030] swapcached 8192 [ 454.630173][T29030] pgpgin 459066 [ 454.633861][T29030] pgpgout 451864 [ 454.637444][T29030] pgfault 380986 [ 454.641014][T29030] pgmajfault 70 [ 454.644496][T29030] inactive_anon 700416 [ 454.649346][T29030] active_anon 28778496 [ 454.653529][T29030] inactive_file 0 [ 454.657300][T29030] active_file 16384 [ 454.661204][T29030] unevictable 4096 [ 454.664996][T29030] hierarchical_memory_limit 314572800 [ 454.671058][T29030] hierarchical_memsw_limit 9223372036854771712 [ 454.677296][T29030] total_cache 29163520 [ 454.681380][T29030] total_rss 311296 [ 454.685146][T29030] total_shmem 29159424 [ 454.689903][T29030] total_mapped_file 0 [ 454.693968][T29030] total_dirty 0 [ 454.697467][T29030] total_writeback 0 [ 454.701292][T29030] total_workingset_refault_anon 78 [ 454.707091][T29030] total_workingset_refault_file 320 [ 454.712364][T29030] total_swap 38281216 [ 454.716399][T29030] total_swapcached 8192 [ 454.720594][T29030] total_pgpgin 459066 [ 454.724590][T29030] total_pgpgout 451864 [ 454.729388][T29030] total_pgfault 380986 [ 454.733481][T29030] total_pgmajfault 70 [ 454.737531][T29030] total_inactive_anon 700416 [ 454.742195][T29030] total_active_anon 28778496 [ 454.747571][T29030] total_inactive_file 0 [ 454.751771][T29030] total_active_file 16384 [ 454.756246][T29030] total_unevictable 4096 [ 454.760625][T29030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7546,pid=29024,uid=0 [ 454.776043][T29030] Memory cgroup out of memory: Killed process 29024 (syz.6.7546) total-vm:94132kB, anon-rss:1208kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 454.963204][T29053] loop9: detected capacity change from 0 to 8192 [ 455.018179][T29096] loop7: detected capacity change from 0 to 512 [ 455.032964][T29096] EXT4-fs: Ignoring removed nobh option [ 455.047484][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 455.047522][ T29] audit: type=1400 audit(5575.077:42139): avc: denied { mounton } for pid=29052 comm="syz.9.7552" path="/269/file2/bus" dev="loop9" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 455.098741][T29098] loop5: detected capacity change from 0 to 512 [ 455.116321][T29098] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.140233][T29096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.196566][T29098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 455.204690][T29098] EXT4-fs (loop5): orphan cleanup on readonly fs [ 455.216662][T29096] FAULT_INJECTION: forcing a failure. [ 455.216662][T29096] name failslab, interval 1, probability 0, space 0, times 0 [ 455.229508][T29096] CPU: 0 UID: 0 PID: 29096 Comm: syz.7.7540 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 455.229578][T29096] Tainted: [W]=WARN [ 455.229587][T29096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.229604][T29096] Call Trace: [ 455.229613][T29096] [ 455.229623][T29096] __dump_stack+0x1d/0x30 [ 455.229653][T29096] dump_stack_lvl+0x95/0xd0 [ 455.229674][T29096] dump_stack+0x15/0x1b [ 455.229727][T29096] should_fail_ex+0x263/0x280 [ 455.229751][T29096] should_failslab+0x8c/0xb0 [ 455.229774][T29096] kmem_cache_alloc_noprof+0x68/0x490 [ 455.229862][T29096] ? getname_flags+0x7f/0x3b0 [ 455.229968][T29096] getname_flags+0x7f/0x3b0 [ 455.229997][T29096] do_sys_openat2+0x60/0x150 [ 455.230096][T29096] __x64_sys_openat+0xf2/0x120 [ 455.230181][T29096] x64_sys_call+0x2b07/0x3000 [ 455.230224][T29096] do_syscall_64+0xc0/0x2a0 [ 455.230248][T29096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.230276][T29096] RIP: 0033:0x7f0ddd06acb9 [ 455.230358][T29096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.230381][T29096] RSP: 002b:00007f0ddbac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.230406][T29096] RAX: ffffffffffffffda RBX: 00007f0ddd2e5fa0 RCX: 00007f0ddd06acb9 [ 455.230435][T29096] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c [ 455.230449][T29096] RBP: 00007f0ddbac7090 R08: 0000000000000000 R09: 0000000000000000 [ 455.230523][T29096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.230535][T29096] R13: 00007f0ddd2e6038 R14: 00007f0ddd2e5fa0 R15: 00007fff2b011e78 [ 455.230554][T29096] [ 455.267828][T29098] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 455.317295][T29105] loop6: detected capacity change from 0 to 512 [ 455.320890][T29098] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 455.439743][T29105] EXT4-fs (loop6): first meta block group too large: 589824 (group descriptor block count 1) [ 455.444116][T23402] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 455.452743][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.457995][T23402] FAT-fs (loop9): Filesystem has been set read-only [ 455.481882][T29098] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 455.493692][T29105] sctp: [Deprecated]: syz.6.7557 (pid 29105) Use of int in maxseg socket option. [ 455.493692][T29105] Use struct sctp_assoc_value instead [ 455.558549][T29098] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 455.573520][T29098] EXT4-fs (loop5): Remounting filesystem read-only [ 455.581843][T29098] EXT4-fs (loop5): 1 truncate cleaned up [ 455.588372][T29098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.603457][ T29] audit: type=1400 audit(5575.617:42140): avc: denied { write } for pid=29108 comm="syz.7.7559" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 455.648985][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.691410][T29118] __nla_validate_parse: 8 callbacks suppressed [ 455.691430][T29118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7562'. [ 455.805095][T29127] loop7: detected capacity change from 0 to 256 [ 455.814164][ T29] audit: type=1400 audit(5575.837:42141): avc: denied { bind } for pid=29120 comm="syz.1.7563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 455.834054][ T29] audit: type=1400 audit(5575.837:42142): avc: denied { write } for pid=29120 comm="syz.1.7563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 455.893020][T29131] syzkaller0: entered promiscuous mode [ 455.898693][T29131] syzkaller0: entered allmulticast mode [ 455.936232][T29131] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=29131 comm=syz.6.7567 [ 455.949371][ T29] audit: type=1400 audit(5575.967:42143): avc: denied { bind } for pid=29130 comm="syz.6.7567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 455.976271][T29131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=29131 comm=syz.6.7567 [ 455.989094][ T29] audit: type=1400 audit(5576.007:42144): avc: denied { setopt } for pid=29130 comm="syz.6.7567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 456.084461][T29137] syz.7.7566 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 456.099399][T29137] CPU: 0 UID: 0 PID: 29137 Comm: syz.7.7566 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 456.099442][T29137] Tainted: [W]=WARN [ 456.099452][T29137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.099470][T29137] Call Trace: [ 456.099480][T29137] [ 456.099489][T29137] __dump_stack+0x1d/0x30 [ 456.099563][T29137] dump_stack_lvl+0x95/0xd0 [ 456.099586][T29137] dump_stack+0x15/0x1b [ 456.099613][T29137] dump_header+0x80/0x240 [ 456.099642][T29137] oom_kill_process+0x295/0x350 [ 456.099697][T29137] out_of_memory+0x97d/0xb80 [ 456.099724][T29137] try_charge_memcg+0x62e/0xa10 [ 456.099777][T29137] obj_cgroup_charge_pages+0xa6/0x150 [ 456.099824][T29137] __memcg_kmem_charge_page+0x9e/0x170 [ 456.099863][T29137] __alloc_frozen_pages_noprof+0x18a/0x350 [ 456.099903][T29137] alloc_pages_mpol+0xb3/0x260 [ 456.100019][T29137] alloc_pages_noprof+0x8f/0x130 [ 456.100055][T29137] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 456.100103][T29137] __kvmalloc_node_noprof+0x471/0x680 [ 456.100203][T29137] ? ip_set_alloc+0x24/0x30 [ 456.100244][T29137] ? ip_set_alloc+0x24/0x30 [ 456.100289][T29137] ip_set_alloc+0x24/0x30 [ 456.100377][T29137] hash_netiface_create+0x282/0x740 [ 456.100502][T29137] ? __pfx_hash_netiface_create+0x10/0x10 [ 456.100548][T29137] ip_set_create+0x3cf/0x970 [ 456.100627][T29137] ? __nla_parse+0x40/0x60 [ 456.100664][T29137] nfnetlink_rcv_msg+0x509/0x5d0 [ 456.100722][T29137] netlink_rcv_skb+0x123/0x220 [ 456.100759][T29137] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 456.100871][T29137] nfnetlink_rcv+0x167/0x1720 [ 456.100908][T29137] ? __kfree_skb+0x109/0x150 [ 456.100945][T29137] ? nlmon_xmit+0x4f/0x60 [ 456.100996][T29137] ? consume_skb+0x49/0x140 [ 456.101031][T29137] ? nlmon_xmit+0x4f/0x60 [ 456.101092][T29137] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 456.101136][T29137] ? __dev_queue_xmit+0x139a/0x1f20 [ 456.101252][T29137] ? __dev_queue_xmit+0x148/0x1f20 [ 456.101359][T29137] ? ref_tracker_free+0x37d/0x3e0 [ 456.101397][T29137] ? __netlink_deliver_tap+0x4dc/0x500 [ 456.101509][T29137] netlink_unicast+0x5c0/0x690 [ 456.101613][T29137] netlink_sendmsg+0x5c8/0x6f0 [ 456.101643][T29137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.101670][T29137] __sock_sendmsg+0x145/0x170 [ 456.101695][T29137] ____sys_sendmsg+0x31e/0x4a0 [ 456.101796][T29137] ___sys_sendmsg+0x195/0x1e0 [ 456.101857][T29137] __x64_sys_sendmsg+0xd4/0x160 [ 456.101905][T29137] x64_sys_call+0x17ba/0x3000 [ 456.101938][T29137] do_syscall_64+0xc0/0x2a0 [ 456.101968][T29137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.102098][T29137] RIP: 0033:0x7f0ddd06acb9 [ 456.102117][T29137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.102210][T29137] RSP: 002b:00007f0ddbaa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.102238][T29137] RAX: ffffffffffffffda RBX: 00007f0ddd2e6090 RCX: 00007f0ddd06acb9 [ 456.102252][T29137] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 456.102314][T29137] RBP: 00007f0ddd0d8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 456.102332][T29137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.102347][T29137] R13: 00007f0ddd2e6128 R14: 00007f0ddd2e6090 R15: 00007fff2b011e78 [ 456.102376][T29137] [ 456.102385][T29137] memory: usage 307200kB, limit 307200kB, failcnt 503 [ 456.144788][T29147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7571'. [ 456.148735][T29137] memory+swap: usage 373192kB, limit 9007199254740988kB, failcnt 0 [ 456.216760][ T29] audit: type=1400 audit(5576.247:42145): avc: denied { ioctl } for pid=29146 comm="syz.5.7570" path="socket:[92257]" dev="sockfs" ino=92257 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 456.390431][ T29] audit: type=1400 audit(5576.417:42146): avc: denied { bind } for pid=29155 comm="syz.5.7572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 456.393465][T29137] kmem: usage 306812kB, limit 9007199254740988kB, failcnt 0 [ 456.393487][T29137] Memory cgroup stats for /syz7: [ 456.553056][T29137] cache 155648 [ 456.562170][T29137] rss 200704 [ 456.565439][T29137] shmem 131072 [ 456.568832][T29137] mapped_file 0 [ 456.572308][T29137] dirty 0 [ 456.576004][T29137] writeback 0 [ 456.579421][T29137] workingset_refault_anon 141 [ 456.584119][T29137] workingset_refault_file 1 [ 456.588682][T29137] swap 67575808 [ 456.592167][T29137] swapcached 28672 [ 456.596622][T29137] pgpgin 425335 [ 456.600189][T29137] pgpgout 425238 [ 456.603776][T29137] pgfault 398447 [ 456.607377][T29137] pgmajfault 66 [ 456.610865][T29137] inactive_anon 0 [ 456.614524][T29137] active_anon 360448 [ 456.619210][T29137] inactive_file 12288 [ 456.623314][T29137] active_file 24576 [ 456.627202][T29137] unevictable 0 [ 456.630701][T29137] hierarchical_memory_limit 314572800 [ 456.636874][T29137] hierarchical_memsw_limit 9223372036854771712 [ 456.643267][T29137] total_cache 155648 [ 456.647228][T29137] total_rss 200704 [ 456.651172][T29137] total_shmem 131072 [ 456.655759][T29137] total_mapped_file 0 [ 456.659789][T29137] total_dirty 0 [ 456.663275][T29137] total_writeback 0 [ 456.667192][T29137] total_workingset_refault_anon 141 [ 456.672457][T29137] total_workingset_refault_file 1 [ 456.678354][T29137] total_swap 67575808 [ 456.682449][T29137] total_swapcached 28672 [ 456.686767][T29137] total_pgpgin 425335 [ 456.690778][T29137] total_pgpgout 425238 [ 456.695655][T29137] total_pgfault 398447 [ 456.699786][T29137] total_pgmajfault 66 [ 456.703824][T29137] total_inactive_anon 0 [ 456.708027][T29137] total_active_anon 360448 [ 456.712476][T29137] total_inactive_file 12288 [ 456.717802][T29137] total_active_file 24576 [ 456.722219][T29137] total_unevictable 0 [ 456.726340][T29137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.7566,pid=29126,uid=0 [ 456.742005][T29137] Memory cgroup out of memory: Killed process 29126 (syz.7.7566) total-vm:94132kB, anon-rss:1332kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 456.901780][ T9235] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 456.951603][T29203] loop9: detected capacity change from 0 to 2048 [ 456.959800][ T9235] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 457.002079][T29219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7578'. [ 457.102031][T29203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.246740][ T29] audit: type=1326 audit(5577.247:42147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29228 comm="syz.5.7582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5383fdacb9 code=0x0 [ 457.320117][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.372124][T21180] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 457.421227][T29245] loop7: detected capacity change from 0 to 2048 [ 457.422637][T21180] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 457.439128][T29247] netlink: 'syz.9.7583': attribute type 2 has an invalid length. [ 457.446967][T29247] netlink: 'syz.9.7583': attribute type 8 has an invalid length. [ 457.455397][T29247] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7583'. [ 457.512911][T29245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.673799][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.845259][T29286] loop9: detected capacity change from 0 to 256 [ 458.156169][T29293] loop1: detected capacity change from 0 to 512 [ 458.297012][T29293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.301968][T29268] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.444684][T29325] FAULT_INJECTION: forcing a failure. [ 458.444684][T29325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.458831][T29325] CPU: 0 UID: 0 PID: 29325 Comm: syz.5.7595 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 458.458873][T29325] Tainted: [W]=WARN [ 458.458880][T29325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.458893][T29325] Call Trace: [ 458.458901][T29325] [ 458.458912][T29325] __dump_stack+0x1d/0x30 [ 458.459014][T29325] dump_stack_lvl+0x95/0xd0 [ 458.459043][T29325] dump_stack+0x15/0x1b [ 458.459069][T29325] should_fail_ex+0x263/0x280 [ 458.459101][T29325] should_fail+0xb/0x20 [ 458.459198][T29325] should_fail_usercopy+0x1a/0x20 [ 458.459223][T29325] _copy_from_user+0x1c/0xb0 [ 458.459268][T29325] restore_altstack+0x4b/0x300 [ 458.459325][T29325] ? __set_task_blocked+0x238/0x290 [ 458.459359][T29325] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 458.459393][T29325] ? arch_do_signal_or_restart+0x2c2/0x450 [ 458.459481][T29325] ? exit_to_user_mode_loop+0xef/0x6f0 [ 458.459502][T29325] ? __rcu_read_unlock+0x4e/0x70 [ 458.459523][T29325] x64_sys_call+0x274a/0x3000 [ 458.459615][T29325] do_syscall_64+0xc0/0x2a0 [ 458.459638][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.459695][T29325] RIP: 0033:0x7f5383f7c0d9 [ 458.459716][T29325] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 458.459740][T29325] RSP: 002b:00007f5382a36a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 458.459789][T29325] RAX: ffffffffffffffda RBX: 00007f5384255fa0 RCX: 00007f5383f7c0d9 [ 458.459806][T29325] RDX: 00007f5382a36a80 RSI: 00007f5382a36bb0 RDI: 0000000000000021 [ 458.459824][T29325] RBP: 00007f5382a37090 R08: 0000000000000000 R09: 0000000000000000 [ 458.459841][T29325] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 458.459855][T29325] R13: 00007f5384256038 R14: 00007f5384255fa0 R15: 00007fff83594588 [ 458.459875][T29325] [ 458.657793][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7595'. [ 459.778032][T29268] chnl_net:caif_netlink_parms(): no params data found [ 459.858948][T29266] Set syz1 is full, maxelem 65536 reached [ 459.983654][T29456] loop9: detected capacity change from 0 to 1024 [ 460.002902][T29456] EXT4-fs: Ignoring removed orlov option [ 460.056630][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7598'. [ 460.065625][T29462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7598'. [ 460.079096][T29456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.093087][T27225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.123189][T29268] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.131103][T29268] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.167417][T29268] bridge_slave_0: entered allmulticast mode [ 460.181424][T29268] bridge_slave_0: entered promiscuous mode [ 460.212210][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7598'. [ 460.213512][T29268] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.221304][T29462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7598'. [ 460.230062][T29268] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.265412][T29268] bridge_slave_1: entered allmulticast mode [ 460.278867][T29268] bridge_slave_1: entered promiscuous mode [ 460.289855][T16822] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.319126][T29478] macvtap2: entered promiscuous mode [ 460.324652][T29478] macvtap2: entered allmulticast mode [ 460.359040][T16822] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.380576][T29268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.397800][T16822] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.421079][T29268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.434423][T16822] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.481556][T29268] team0: Port device team_slave_0 added [ 460.518580][T29268] team0: Port device team_slave_1 added [ 460.554073][T29268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.561125][T29268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.588036][T29268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.609163][T29268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.616933][T29268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.643759][T29268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.681659][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.761953][T29515] vti0: entered allmulticast mode [ 460.820967][T29521] loop5: detected capacity change from 0 to 512 [ 460.828839][T29523] loop9: detected capacity change from 0 to 256 [ 460.829666][T29268] hsr_slave_0: entered promiscuous mode [ 460.844378][T29521] ext4: Unknown parameter 'uid<00000000000000000000' [ 460.862732][T29268] hsr_slave_1: entered promiscuous mode [ 460.892847][T29268] debugfs: 'hsr0' already exists in 'hsr' [ 460.898794][T29268] Cannot create hsr debugfs directory [ 461.023824][ T29] audit: type=1326 audit(5581.038:42148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddd06acb9 code=0x7ffc0000 [ 461.058057][T29535] loop7: detected capacity change from 0 to 1024 [ 461.105621][T29535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.121156][ T29] audit: type=1326 audit(5581.078:42149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ddd02b58e code=0x7ffc0000 [ 461.144390][ T29] audit: type=1326 audit(5581.078:42150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0ddd06bfd7 code=0x7ffc0000 [ 461.167588][T21180] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 461.175287][ T29] audit: type=1326 audit(5581.078:42151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ddd06acb9 code=0x7ffc0000 [ 461.178286][T21180] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.198468][ T29] audit: type=1326 audit(5581.078:42152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0ddd06bfd7 code=0x7ffc0000 [ 461.198502][ T29] audit: type=1326 audit(5581.078:42153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0ddd02b58e code=0x7ffc0000 [ 461.198571][ T29] audit: type=1326 audit(5581.078:42154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddd06acb9 code=0x7ffc0000 [ 461.198605][ T29] audit: type=1326 audit(5581.078:42155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0ddd06acb9 code=0x7ffc0000 [ 461.198635][ T29] audit: type=1326 audit(5581.078:42156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddd06acb9 code=0x7ffc0000 [ 461.198664][ T29] audit: type=1326 audit(5581.078:42157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29534 comm="syz.7.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ddd06acb9 code=0x7ffc0000 [ 461.386643][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.413789][T29553] netlink: 830 bytes leftover after parsing attributes in process `syz.7.7617'. [ 461.450398][T29549] fido_id[29549]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 461.684888][T29268] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.696467][T29268] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.715934][T29268] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 461.759587][T29268] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 461.836829][T29575] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.102485][T29629] netlink: 'syz.1.7624': attribute type 9 has an invalid length. [ 462.111069][T29629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7624'. [ 462.180389][T29631] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7627'. [ 462.229589][T29631] bond3: option all_slaves_active: invalid value (5) [ 462.246154][T29631] bond3 (unregistering): Released all slaves [ 462.361312][T29268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.416044][T29647] loop1: detected capacity change from 0 to 1024 [ 462.422910][T29647] EXT4-fs: inline encryption not supported [ 462.432286][T29647] EXT4-fs: Ignoring removed i_version option [ 462.454493][T29268] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.489222][T29647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.505721][T16813] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.512836][T16813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.543703][T16814] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.550823][T16814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.601069][T29654] netlink: 'syz.9.7627': attribute type 8 has an invalid length. [ 462.608943][T29654] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7627'. [ 462.746086][T29665] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7636'. [ 462.763306][T29268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.945794][T29680] loop9: detected capacity change from 0 to 1024 [ 462.969673][T29680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.068917][T29268] veth0_vlan: entered promiscuous mode [ 463.074737][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 463.100580][T29688] loop5: detected capacity change from 0 to 512 [ 463.119838][T29691] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7640'. [ 463.131620][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.141126][T29688] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 463.151794][T29268] veth1_vlan: entered promiscuous mode [ 463.165640][T29688] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7639: bg 0: block 255: padding at end of block bitmap is not set [ 463.231823][T29268] veth0_macvtap: entered promiscuous mode [ 463.250106][T29688] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 463.260733][T29268] veth1_macvtap: entered promiscuous mode [ 463.290700][T29268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.309960][T29688] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7639: invalid indirect mapped block 1 (level 1) [ 463.334916][T29688] EXT4-fs (loop5): 1 truncate cleaned up [ 463.341133][T29688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.354205][T29268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.365439][T27225] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.389818][T29701] loop9: detected capacity change from 0 to 1024 [ 463.409097][T29699] loop7: detected capacity change from 0 to 8192 [ 463.420863][T16810] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.438108][T29701] EXT4-fs: inline encryption not supported [ 463.438193][T16810] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.453173][T16810] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.462319][T16810] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.494348][T29701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.638441][T29709] loop7: detected capacity change from 0 to 256 [ 463.661262][T29705] ip6_vti0 speed is unknown, defaulting to 1000 [ 463.677845][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.707334][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.748058][T29715] loop9: detected capacity change from 0 to 512 [ 463.767034][T29717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7647'. [ 463.782978][T29715] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.797356][ T9235] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 463.805435][ T9235] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 463.834290][T29717] loop7: detected capacity change from 0 to 2048 [ 463.916705][T29717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.931935][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.987768][T29730] loop6: detected capacity change from 0 to 1024 [ 464.010040][T29730] EXT4-fs: Ignoring removed orlov option [ 464.042447][T29730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.063689][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.121412][T29739] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7652'. [ 464.247554][T29730] macvtap1: entered promiscuous mode [ 464.252912][T29730] macvtap1: entered allmulticast mode [ 464.266765][T29747] loop9: detected capacity change from 0 to 512 [ 464.328600][T29747] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.7655: corrupted in-inode xattr: invalid ea_ino [ 464.354098][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 464.399807][T29747] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.7655: couldn't read orphan inode 15 (err -117) [ 464.464791][T29747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.513922][T29747] FAULT_INJECTION: forcing a failure. [ 464.513922][T29747] name failslab, interval 1, probability 0, space 0, times 0 [ 464.526682][T29747] CPU: 1 UID: 0 PID: 29747 Comm: syz.9.7655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 464.526721][T29747] Tainted: [W]=WARN [ 464.526734][T29747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.526759][T29747] Call Trace: [ 464.526767][T29747] [ 464.526776][T29747] __dump_stack+0x1d/0x30 [ 464.526844][T29747] dump_stack_lvl+0x95/0xd0 [ 464.526873][T29747] dump_stack+0x15/0x1b [ 464.526900][T29747] should_fail_ex+0x263/0x280 [ 464.526988][T29747] should_failslab+0x8c/0xb0 [ 464.527010][T29747] kmem_cache_alloc_noprof+0x68/0x490 [ 464.527037][T29747] ? getname_flags+0x7f/0x3b0 [ 464.527069][T29747] getname_flags+0x7f/0x3b0 [ 464.527146][T29747] do_sys_openat2+0x60/0x150 [ 464.527190][T29747] __x64_sys_openat+0xf2/0x120 [ 464.527246][T29747] x64_sys_call+0x2b07/0x3000 [ 464.527279][T29747] do_syscall_64+0xc0/0x2a0 [ 464.527336][T29747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.527366][T29747] RIP: 0033:0x7eff74ceacb9 [ 464.527392][T29747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.527417][T29747] RSP: 002b:00007eff73747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 464.527443][T29747] RAX: ffffffffffffffda RBX: 00007eff74f65fa0 RCX: 00007eff74ceacb9 [ 464.527529][T29747] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 464.527546][T29747] RBP: 00007eff73747090 R08: 0000000000000000 R09: 0000000000000000 [ 464.527563][T29747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.527585][T29747] R13: 00007eff74f66038 R14: 00007eff74f65fa0 R15: 00007ffc566752c8 [ 464.527610][T29747] [ 464.739805][T29762] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.828423][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.839169][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.896753][T29770] loop5: detected capacity change from 0 to 8192 [ 464.897673][T29771] rtc_cmos 00:00: Alarms can be up to one day in the future [ 464.911914][T21180] IPVS: starting estimator thread 0... [ 464.918717][T29770] bio_check_eod: 3 callbacks suppressed [ 464.918735][T29770] syz.5.7665: attempt to access beyond end of device [ 464.918735][T29770] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 464.939465][T29770] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 464.947422][T29770] FAT-fs (loop5): Filesystem has been set read-only [ 464.955394][T29770] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 464.963591][T29770] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 465.003635][T29772] IPVS: using max 2016 ests per chain, 100800 per kthread [ 465.040588][T29770] syz.5.7665: attempt to access beyond end of device [ 465.040588][T29770] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 465.056241][T29770] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 465.065584][T29770] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 465.074365][T29770] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 465.159050][T29787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7667'. [ 465.198151][T29786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.242155][T29786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.285860][T29796] FAULT_INJECTION: forcing a failure. [ 465.285860][T29796] name failslab, interval 1, probability 0, space 0, times 0 [ 465.299261][T29796] CPU: 0 UID: 0 PID: 29796 Comm: syz.6.7672 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 465.299379][T29796] Tainted: [W]=WARN [ 465.299388][T29796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.299402][T29796] Call Trace: [ 465.299410][T29796] [ 465.299421][T29796] __dump_stack+0x1d/0x30 [ 465.299450][T29796] dump_stack_lvl+0x95/0xd0 [ 465.299543][T29796] dump_stack+0x15/0x1b [ 465.299566][T29796] should_fail_ex+0x263/0x280 [ 465.299598][T29796] should_failslab+0x8c/0xb0 [ 465.299623][T29796] kmem_cache_alloc_noprof+0x68/0x490 [ 465.299723][T29796] ? audit_log_start+0x34c/0x730 [ 465.299753][T29796] audit_log_start+0x34c/0x730 [ 465.299812][T29796] ? kstrtouint+0x76/0xc0 [ 465.299839][T29796] audit_seccomp+0x47/0x100 [ 465.299878][T29796] ? __seccomp_filter+0x8db/0x1350 [ 465.299909][T29796] __seccomp_filter+0x8ec/0x1350 [ 465.300001][T29796] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 465.300036][T29796] ? vfs_write+0x86e/0x9f0 [ 465.300058][T29796] ? __rcu_read_unlock+0x4e/0x70 [ 465.300084][T29796] ? __fget_files+0x184/0x1c0 [ 465.300127][T29796] __secure_computing+0x81/0x150 [ 465.300155][T29796] syscall_trace_enter+0xce/0x1e0 [ 465.300185][T29796] do_syscall_64+0x9a/0x2a0 [ 465.300214][T29796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.300313][T29796] RIP: 0033:0x7f521d13acb9 [ 465.300335][T29796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.300360][T29796] RSP: 002b:00007f521bb97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 465.300429][T29796] RAX: ffffffffffffffda RBX: 00007f521d3b5fa0 RCX: 00007f521d13acb9 [ 465.300447][T29796] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 465.300464][T29796] RBP: 00007f521bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 465.300489][T29796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.300505][T29796] R13: 00007f521d3b6038 R14: 00007f521d3b5fa0 R15: 00007fff03ca0348 [ 465.300526][T29796] [ 465.529416][T29804] FAULT_INJECTION: forcing a failure. [ 465.529416][T29804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.542615][T29804] CPU: 1 UID: 0 PID: 29804 Comm: syz.7.7674 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 465.542703][T29804] Tainted: [W]=WARN [ 465.542709][T29804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.542722][T29804] Call Trace: [ 465.542730][T29804] [ 465.542738][T29804] __dump_stack+0x1d/0x30 [ 465.542854][T29804] dump_stack_lvl+0x95/0xd0 [ 465.542883][T29804] dump_stack+0x15/0x1b [ 465.542910][T29804] should_fail_ex+0x263/0x280 [ 465.542942][T29804] should_fail+0xb/0x20 [ 465.543009][T29804] should_fail_usercopy+0x1a/0x20 [ 465.543041][T29804] _copy_from_iter+0xcf/0xea0 [ 465.543131][T29804] ? __build_skb_around+0x164/0x1c0 [ 465.543169][T29804] ? __build_skb+0x59/0x70 [ 465.543210][T29804] ? is_vmalloc_addr+0x37/0x90 [ 465.543237][T29804] netlink_sendmsg+0x4ae/0x6f0 [ 465.543339][T29804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.543365][T29804] __sock_sendmsg+0x145/0x170 [ 465.543394][T29804] ____sys_sendmsg+0x31e/0x4a0 [ 465.543484][T29804] ___sys_sendmsg+0x195/0x1e0 [ 465.543578][T29804] __x64_sys_sendmsg+0xd4/0x160 [ 465.543698][T29804] x64_sys_call+0x17ba/0x3000 [ 465.543723][T29804] do_syscall_64+0xc0/0x2a0 [ 465.543749][T29804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.543776][T29804] RIP: 0033:0x7f0ddd06acb9 [ 465.543810][T29804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.543861][T29804] RSP: 002b:00007f0ddbac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.544002][T29804] RAX: ffffffffffffffda RBX: 00007f0ddd2e5fa0 RCX: 00007f0ddd06acb9 [ 465.544020][T29804] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 465.544035][T29804] RBP: 00007f0ddbac7090 R08: 0000000000000000 R09: 0000000000000000 [ 465.544123][T29804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.544140][T29804] R13: 00007f0ddd2e6038 R14: 00007f0ddd2e5fa0 R15: 00007fff2b011e78 [ 465.544166][T29804] [ 465.792479][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7675'. [ 465.837997][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.904172][T29813] rtc_cmos 00:00: Alarms can be up to one day in the future [ 466.107226][T29827] ext4: Unknown parameter 'uid<00000000000000000000' [ 466.135183][T29792] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.197058][T29828] __quota_error: 76 callbacks suppressed [ 466.197079][T29828] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 466.211997][T29828] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 466.221452][T29828] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7682: Failed to acquire dquot type 0 [ 466.364395][T29819] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 466.365178][T29828] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 466.469033][T29828] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.7682: corrupted inode contents [ 466.503926][T29792] __nla_validate_parse: 3 callbacks suppressed [ 466.503947][T29792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7671'. [ 466.532725][T29828] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.7682: mark_inode_dirty error [ 466.574276][T29828] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.7682: corrupted inode contents [ 466.617128][T29828] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.7682: mark_inode_dirty error [ 466.668060][T29828] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.7682: corrupted inode contents [ 466.693424][T29828] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 466.714149][T29828] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.7682: corrupted inode contents [ 466.763534][T29828] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.7682: mark_inode_dirty error [ 466.818286][T29828] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 466.861561][T29828] EXT4-fs (loop5): 1 truncate cleaned up [ 466.878482][T29828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.937801][T29828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.001352][T29860] syz.1.7690: attempt to access beyond end of device [ 467.001352][T29860] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 467.030620][T29860] syz.1.7690: attempt to access beyond end of device [ 467.030620][T29860] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 467.104335][T29860] syz.1.7690: attempt to access beyond end of device [ 467.104335][T29860] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 467.130752][T29860] syz.1.7690: attempt to access beyond end of device [ 467.130752][T29860] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 467.145218][T29862] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7695'. [ 467.195631][T29865] ext4: Unknown parameter 'uid<00000000000000000000' [ 467.236076][T29866] vfat: Unknown parameter '' [ 467.384783][T29874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.409287][ T29] audit: type=1326 audit(5843.432:42232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.433190][ T29] audit: type=1326 audit(5843.432:42233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.457141][ T29] audit: type=1326 audit(5843.432:42234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.480993][ T29] audit: type=1326 audit(5843.432:42235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.504788][ T29] audit: type=1326 audit(5843.432:42236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.528919][ T29] audit: type=1326 audit(5843.432:42237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.552828][ T29] audit: type=1326 audit(5843.432:42238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.577589][ T29] audit: type=1326 audit(5843.432:42239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29872 comm="syz.5.7700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 467.603652][T29876] syzkaller0: entered promiscuous mode [ 467.609183][T29876] syzkaller0: entered allmulticast mode [ 467.627739][T29874] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 467.719173][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.799432][T29883] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7702: invalid indirect mapped block 256 (level 2) [ 467.884592][T29883] EXT4-fs (loop6): 2 truncates cleaned up [ 467.890871][T29883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.968045][T29891] set_capacity_and_notify: 9 callbacks suppressed [ 467.968062][T29891] loop5: detected capacity change from 0 to 256 [ 468.127027][T29896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7708'. [ 468.264469][T16813] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:43: bg 0: block 5: invalid block bitmap [ 468.279871][T29899] loop7: detected capacity change from 0 to 512 [ 468.287365][T29899] ext4: Unknown parameter 'uid<00000000000000000000' [ 468.340664][T29902] rdma_op ffff8881051fbd80 conn xmit_rdma 0000000000000000 [ 468.382442][T16813] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 468.395602][T16813] EXT4-fs (loop6): This should not happen!! Data will be lost [ 468.395602][T16813] [ 468.588024][T16814] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 468.600934][T16814] EXT4-fs (loop6): This should not happen!! Data will be lost [ 468.600934][T16814] [ 468.610789][T16814] EXT4-fs (loop6): Total free blocks count 0 [ 468.617037][T16814] EXT4-fs (loop6): Free/Dirty block details [ 468.622959][T16814] EXT4-fs (loop6): free_blocks=0 [ 468.627989][T16814] EXT4-fs (loop6): dirty_blocks=6832 [ 468.633334][T16814] EXT4-fs (loop6): Block reservation details [ 468.918366][T29913] loop1: detected capacity change from 0 to 512 [ 469.087102][T29913] FAT-fs (loop1): FAT read failed (blocknr 128) [ 469.256978][T29929] loop5: detected capacity change from 0 to 512 [ 469.278263][T29929] ext4: Unknown parameter 'uid<00000000000000000000' [ 469.306401][T29929] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7721'. [ 469.450355][T29941] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7725'. [ 469.502676][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7723'. [ 469.517731][T29948] loop7: detected capacity change from 0 to 512 [ 469.578168][T16811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.674068][T29936] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 469.698335][T29951] loop9: detected capacity change from 0 to 8192 [ 469.738980][T29948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.915151][T23402] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 469.923034][T23402] FAT-fs (loop9): Filesystem has been set read-only [ 469.946969][T16811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.045589][T29967] loop9: detected capacity change from 0 to 512 [ 470.063502][T29967] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 470.089516][T16811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.121921][T29974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7734'. [ 470.184066][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.196672][T16811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.269931][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7736'. [ 470.322774][T16811] bridge_slave_1: left allmulticast mode [ 470.328560][T16811] bridge_slave_1: left promiscuous mode [ 470.334301][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.362957][T16811] bridge_slave_0: left allmulticast mode [ 470.363116][T29982] loop7: detected capacity change from 0 to 2048 [ 470.368699][T16811] bridge_slave_0: left promiscuous mode [ 470.380789][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.537078][T29982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.606230][T16811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.635470][T16811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.649279][T16811] bond0 (unregistering): Released all slaves [ 470.656805][T29953] ip6_vti0 speed is unknown, defaulting to 1000 [ 470.725001][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.883692][T16811] hsr_slave_0: left promiscuous mode [ 470.909116][T16811] hsr_slave_1: left promiscuous mode [ 470.939157][T16811] veth1_macvtap: left promiscuous mode [ 470.967731][T16811] veth0_macvtap: left promiscuous mode [ 471.127382][T30022] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7744'. [ 471.156792][T30020] loop9: detected capacity change from 0 to 764 [ 471.187466][T30020] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 471.206148][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 471.206166][ T29] audit: type=1400 audit(5847.232:42312): avc: denied { ioctl } for pid=30013 comm="syz.7.7742" path="socket:[95406]" dev="sockfs" ino=95406 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 471.274211][ T29] audit: type=1400 audit(5847.272:42313): avc: denied { mount } for pid=30019 comm="syz.9.7745" name="/" dev="loop9" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 471.296994][ T29] audit: type=1326 audit(5847.272:42314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff74cab58e code=0x7ffc0000 [ 471.320856][ T29] audit: type=1326 audit(5847.272:42315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7eff74ce9167 code=0x7ffc0000 [ 471.344533][ T29] audit: type=1326 audit(5847.272:42316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff74cab58e code=0x7ffc0000 [ 471.368286][ T29] audit: type=1326 audit(5847.272:42317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff74ceacb9 code=0x7ffc0000 [ 471.379909][T16811] veth1_vlan: left promiscuous mode [ 471.391426][ T29] audit: type=1326 audit(5847.272:42318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff74ceacb9 code=0x7ffc0000 [ 471.419793][T16811] veth0_vlan: left promiscuous mode [ 471.422013][ T29] audit: type=1326 audit(5847.272:42319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff74ceacb9 code=0x7ffc0000 [ 471.449363][ T29] audit: type=1326 audit(5847.272:42320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7eff74ceacb9 code=0x7ffc0000 [ 471.473252][ T29] audit: type=1326 audit(5847.272:42321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30019 comm="syz.9.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff74ceacb9 code=0x7ffc0000 [ 471.652614][T30038] SELinux: policydb version -1800608610 does not match my version range 15-35 [ 471.662769][T30038] SELinux: failed to load policy [ 471.676555][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.684058][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.691573][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.699803][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.707337][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.715501][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.722940][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.730480][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.738649][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.746087][ T9940] hid-generic 0003:0004:0000.008E: unknown main item tag 0x0 [ 471.794197][T16811] team0 (unregistering): Port device team_slave_1 removed [ 471.803233][ T9940] hid-generic 0003:0004:0000.008E: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 471.818702][T16811] team0 (unregistering): Port device team_slave_0 removed [ 471.858978][T30042] fido_id[30042]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 471.919215][T29953] chnl_net:caif_netlink_parms(): no params data found [ 472.016478][T29953] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.023829][T29953] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.029652][T30054] loop6: detected capacity change from 0 to 2048 [ 472.054379][T29953] bridge_slave_0: entered allmulticast mode [ 472.070228][T30054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.071956][T29953] bridge_slave_0: entered promiscuous mode [ 472.105538][T29953] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.112655][T29953] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.150664][T29953] bridge_slave_1: entered allmulticast mode [ 472.171655][T29953] bridge_slave_1: entered promiscuous mode [ 472.227476][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.275053][T30074] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7752'. [ 472.352406][T29953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.367865][T29953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.388795][T29953] team0: Port device team_slave_0 added [ 472.396546][T29953] team0: Port device team_slave_1 added [ 472.416365][T29953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.424050][T29953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.451017][T29953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.492764][T29953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.500422][T29953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.527155][T29953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.604730][T30074] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 472.656963][T29953] hsr_slave_0: entered promiscuous mode [ 472.670630][T29953] hsr_slave_1: entered promiscuous mode [ 472.682690][T29953] debugfs: 'hsr0' already exists in 'hsr' [ 472.688535][T29953] Cannot create hsr debugfs directory [ 472.751753][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7756'. [ 472.769855][T30095] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 472.821003][T30099] EXT4-fs: Ignoring removed bh option [ 472.848999][T30099] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 472.859349][T30099] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (800000) [ 472.868946][T30099] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 472.945411][T30091] bridge0: port 2(gretap0) entered disabled state [ 473.097942][T30102] tmpfs: Unknown parameter '0x00000000000000030x0000000000000003' [ 473.279479][T30111] set_capacity_and_notify: 1 callbacks suppressed [ 473.279501][T30111] loop5: detected capacity change from 0 to 2048 [ 473.321587][T30111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.334958][T30122] syzkaller0: entered promiscuous mode [ 473.340461][T30122] syzkaller0: entered allmulticast mode [ 473.464368][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.547694][T29953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 473.565820][T29953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 473.584481][T29953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.605258][T29953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 473.662862][T30139] loop7: detected capacity change from 0 to 2048 [ 473.704158][T30149] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7769'. [ 473.724458][T29953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.737869][T19714] GPT:first_usable_lbas don't match. [ 473.742472][T29953] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.744845][T19714] GPT:34 != 290 [ 473.753555][T19714] GPT: Use GNU Parted to correct GPT errors. [ 473.758002][T16813] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.759975][T19714] loop7: p1 p2 p3 [ 473.766870][T16813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.779394][T16813] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.786517][T16813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.844168][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7770'. [ 473.855024][T30158] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 473.908519][T30139] GPT:first_usable_lbas don't match. [ 473.913946][T30139] GPT:34 != 290 [ 473.917437][T30139] GPT: Use GNU Parted to correct GPT errors. [ 473.923704][T30139] loop7: p1 p2 p3 [ 473.942070][T30166] loop5: detected capacity change from 0 to 512 [ 473.978852][T30166] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 474.041947][T30173] netlink: 'syz.7.7772': attribute type 4 has an invalid length. [ 474.058196][T29953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.069845][T30166] EXT4-fs (loop5): 1 truncate cleaned up [ 474.084612][T30166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.179535][T25860] udevd[25860]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 474.196177][T19430] udevd[19430]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 474.212470][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.222458][T19714] udevd[19714]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 474.284761][T19430] udevd[19430]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 474.305829][T19714] udevd[19714]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 474.317552][T25860] udevd[25860]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 474.332188][T30187] loop7: detected capacity change from 0 to 2048 [ 474.398252][T30187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.422159][T29953] veth0_vlan: entered promiscuous mode [ 474.443779][T29953] veth1_vlan: entered promiscuous mode [ 474.476933][T29953] veth0_macvtap: entered promiscuous mode [ 474.492293][T29953] veth1_macvtap: entered promiscuous mode [ 474.523068][T29953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.532134][T29953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.544763][ T53] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.569461][ T53] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.605628][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.680901][T30225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7780'. [ 474.749063][T16813] bond0 (unregistering): (slave gretap1): Releasing active interface [ 474.788177][T30239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7784'. [ 474.965068][T16813] bond0 (unregistering): Released all slaves [ 474.980307][T16813] bond1 (unregistering): Released all slaves [ 475.003084][ T53] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.031208][T30259] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7786'. [ 475.073109][T16813] tipc: Disabling bearer [ 475.078643][T16813] tipc: Left network mode [ 475.089840][ T53] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.208916][T30267] loop2: detected capacity change from 0 to 512 [ 475.246569][T30271] loop9: detected capacity change from 0 to 2048 [ 475.274422][T30267] ext4: Unknown parameter 'uid<00000000000000000000' [ 475.300988][T16813] hsr_slave_0: left promiscuous mode [ 475.312081][T30267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7787'. [ 475.344206][T30271] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.366864][T30283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 475.524235][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.688640][ T4371] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 475.769344][T30313] fido_id[30313]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 475.858257][T16813] IPVS: stop unused estimator thread 0... [ 475.893024][T30330] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7800'. [ 475.931019][T30334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7801'. [ 476.041607][T30344] bridge0: port 1(syz_tun) entered disabled state [ 476.141510][T30350] loop2: detected capacity change from 0 to 2048 [ 476.192562][T30350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.210565][T30361] loop6: detected capacity change from 0 to 512 [ 476.229392][T29953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.252289][ T29] kauditd_printk_skb: 564 callbacks suppressed [ 476.252306][ T29] audit: type=1400 audit(5852.272:42886): avc: denied { create } for pid=30351 comm="syz.9.7804" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 476.257576][T30361] ext4: Unknown parameter 'uid<00000000000000000000' [ 476.393359][ T29] audit: type=1400 audit(5852.412:42887): avc: denied { setattr } for pid=30371 comm="syz.6.7808" name="NETLINK" dev="sockfs" ino=96643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.431090][ T3505] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.464280][T30377] loop6: detected capacity change from 0 to 512 [ 476.471485][T30377] EXT4-fs: Ignoring removed i_version option [ 476.477673][T30377] EXT4-fs: Ignoring removed bh option [ 476.520384][T30377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.522142][T30378] fido_id[30378]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.540408][T30383] loop2: detected capacity change from 0 to 512 [ 476.567460][T30383] EXT4-fs: Ignoring removed i_version option [ 476.573688][T30383] EXT4-fs: Ignoring removed bh option [ 476.581247][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.629591][T30383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.699258][T30383] FAULT_INJECTION: forcing a failure. [ 476.699258][T30383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.702976][T30400] EXT4-fs: Ignoring removed i_version option [ 476.712505][T30383] CPU: 0 UID: 0 PID: 30383 Comm: syz.2.7811 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 476.712703][T30383] Tainted: [W]=WARN [ 476.712726][T30383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.712767][T30383] Call Trace: [ 476.712798][T30383] [ 476.712821][T30383] __dump_stack+0x1d/0x30 [ 476.712905][T30383] dump_stack_lvl+0x95/0xd0 [ 476.713015][T30383] dump_stack+0x15/0x1b [ 476.713088][T30383] should_fail_ex+0x263/0x280 [ 476.713166][T30383] should_fail+0xb/0x20 [ 476.713230][T30383] should_fail_usercopy+0x1a/0x20 [ 476.713377][T30383] strncpy_from_user+0x27/0x250 [ 476.713492][T30383] path_setxattrat+0xeb/0x310 [ 476.713692][T30383] __x64_sys_fsetxattr+0x6b/0x80 [ 476.713774][T30383] x64_sys_call+0x23c4/0x3000 [ 476.713850][T30383] do_syscall_64+0xc0/0x2a0 [ 476.713939][T30383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.714072][T30383] RIP: 0033:0x7fa6e220acb9 [ 476.714126][T30383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.714182][T30383] RSP: 002b:00007fa6e0c67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 476.714247][T30383] RAX: ffffffffffffffda RBX: 00007fa6e2485fa0 RCX: 00007fa6e220acb9 [ 476.714310][T30383] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 476.714355][T30383] RBP: 00007fa6e0c67090 R08: 0000000000000001 R09: 0000000000000000 [ 476.714397][T30383] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 476.714499][T30383] R13: 00007fa6e2486038 R14: 00007fa6e2485fa0 R15: 00007ffe5124b868 [ 476.714574][T30383] [ 476.884523][T30400] EXT4-fs: Ignoring removed bh option [ 476.900594][T29953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.917088][T30400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.977678][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.059830][T30413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.137059][T19430] GPT:first_usable_lbas don't match. [ 477.142420][T19430] GPT:34 != 290 [ 477.146823][T19430] GPT: Use GNU Parted to correct GPT errors. [ 477.153033][T19430] loop9: p1 p2 p3 [ 477.178806][T30428] ext4: Unknown parameter 'uid<00000000000000000000' [ 477.242452][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.281563][T30426] GPT:first_usable_lbas don't match. [ 477.287057][T30426] GPT:34 != 290 [ 477.290594][T30426] GPT: Use GNU Parted to correct GPT errors. [ 477.297190][T30426] loop9: p1 p2 p3 [ 477.338186][T30437] rdma_op ffff88810e92e580 conn xmit_rdma 0000000000000000 [ 477.417764][T30451] FAULT_INJECTION: forcing a failure. [ 477.417764][T30451] name failslab, interval 1, probability 0, space 0, times 0 [ 477.430579][T30451] CPU: 1 UID: 0 PID: 30451 Comm: syz.7.7826 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 477.430670][T30451] Tainted: [W]=WARN [ 477.430680][T30451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.430697][T30451] Call Trace: [ 477.430706][T30451] [ 477.430716][T30451] __dump_stack+0x1d/0x30 [ 477.430753][T30451] dump_stack_lvl+0x95/0xd0 [ 477.430782][T30451] dump_stack+0x15/0x1b [ 477.430863][T30451] should_fail_ex+0x263/0x280 [ 477.430972][T30451] should_failslab+0x8c/0xb0 [ 477.431000][T30451] ? tty_ldisc_get+0x110/0x210 [ 477.431026][T30451] __kmalloc_cache_noprof+0x64/0x4a0 [ 477.431056][T30451] ? __request_module+0x1c4/0x3d0 [ 477.431085][T30451] ? tty_ldisc_get+0x110/0x210 [ 477.431113][T30451] __request_module+0x1c4/0x3d0 [ 477.431144][T30451] ? security_capable+0x7b/0x90 [ 477.431254][T30451] tty_ldisc_get+0x110/0x210 [ 477.431274][T30451] tty_set_ldisc+0x28/0x380 [ 477.431292][T30451] ? tty_wait_until_sent+0x23c/0x270 [ 477.431395][T30451] tiocsetd+0x51/0x60 [ 477.431444][T30451] tty_ioctl+0xa78/0xb80 [ 477.431470][T30451] ? __pfx_tty_ioctl+0x10/0x10 [ 477.431495][T30451] __se_sys_ioctl+0xce/0x140 [ 477.431594][T30451] __x64_sys_ioctl+0x43/0x50 [ 477.431633][T30451] x64_sys_call+0x14b0/0x3000 [ 477.431695][T30451] do_syscall_64+0xc0/0x2a0 [ 477.431742][T30451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.431784][T30451] RIP: 0033:0x7f0ddd06acb9 [ 477.431804][T30451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.431832][T30451] RSP: 002b:00007f0ddbaa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.431857][T30451] RAX: ffffffffffffffda RBX: 00007f0ddd2e6090 RCX: 00007f0ddd06acb9 [ 477.431884][T30451] RDX: 0000200000000280 RSI: 0000000000005423 RDI: 0000000000000003 [ 477.431901][T30451] RBP: 00007f0ddbaa6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.431982][T30451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.432051][T30451] R13: 00007f0ddd2e6128 R14: 00007f0ddd2e6090 R15: 00007fff2b011e78 [ 477.432071][T30451] [ 477.690965][T19714] udevd[19714]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 477.702006][T19430] udevd[19430]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 477.725700][T19631] udevd[19631]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 477.868679][T30471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.914113][T30473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.939647][ T9235] hid_parser_main: 10 callbacks suppressed [ 477.939670][ T9235] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 477.970270][ T9235] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.991413][T30471] __nla_validate_parse: 6 callbacks suppressed [ 477.991428][T30471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7832'. [ 478.053296][ T29] audit: type=1400 audit(5854.062:42888): avc: denied { setattr } for pid=30466 comm="syz.5.7832" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.062712][T30488] fido_id[30488]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 478.109751][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.166130][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.182254][T30499] ext4: Unknown parameter 'uid<00000000000000000000' [ 478.208410][T30501] EXT4-fs: Ignoring removed orlov option [ 478.221657][T30496] loop7: p3 p4 < > [ 478.229924][T30505] netlink: 'syz.5.7839': attribute type 4 has an invalid length. [ 478.245843][T30496] loop7: p3 start 11362048 is beyond EOD, truncated [ 478.264253][T30501] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.268278][T30510] rdma_op ffff88819d1a5580 conn xmit_rdma 0000000000000000 [ 478.432498][T30515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7841'. [ 478.436584][ T29] audit: type=1400 audit(5854.462:42889): avc: denied { append } for pid=30513 comm="syz.5.7841" name="pfkey" dev="proc" ino=4026533033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 478.553025][T30520] set_capacity_and_notify: 11 callbacks suppressed [ 478.553046][T30520] loop7: detected capacity change from 0 to 4096 [ 478.588100][T30520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.671605][ T29] audit: type=1400 audit(5854.682:42890): avc: denied { accept } for pid=30517 comm="syz.7.7842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 478.696339][T30520] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.744626][T30540] loop5: detected capacity change from 0 to 256 [ 478.789680][T30539] loop7: detected capacity change from 0 to 2048 [ 478.862009][T30539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.878121][T30552] loop9: detected capacity change from 0 to 256 [ 478.904552][ T29] audit: type=1326 audit(5854.912:42891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30553 comm="syz.5.7847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 478.928407][ T29] audit: type=1326 audit(5854.912:42892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30553 comm="syz.5.7847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 478.952305][ T29] audit: type=1326 audit(5854.912:42893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30553 comm="syz.5.7847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 478.976420][ T29] audit: type=1326 audit(5854.922:42894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30553 comm="syz.5.7847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 479.000447][ T29] audit: type=1326 audit(5854.922:42895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30553 comm="syz.5.7847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5383fdacb9 code=0x7ffc0000 [ 479.046928][T30554] loop5: detected capacity change from 0 to 764 [ 479.082517][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.092943][T30554] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 479.143631][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.210413][T30563] loop6: detected capacity change from 0 to 512 [ 479.227316][T30563] ext4: Unknown parameter 'uid<00000000000000000000' [ 479.256875][T30568] loop9: detected capacity change from 0 to 2048 [ 479.277839][T30570] netlink: 'syz.7.7851': attribute type 4 has an invalid length. [ 479.341364][T30568] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 479.367195][T30559] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 479.406779][T30559] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 479.419226][T30559] EXT4-fs (loop9): This should not happen!! Data will be lost [ 479.419226][T30559] [ 479.429201][T30559] EXT4-fs (loop9): Total free blocks count 0 [ 479.435426][T30559] EXT4-fs (loop9): Free/Dirty block details [ 479.441654][T30559] EXT4-fs (loop9): free_blocks=2415919104 [ 479.447474][T30559] EXT4-fs (loop9): dirty_blocks=48 [ 479.452665][T30559] EXT4-fs (loop9): Block reservation details [ 479.458992][T30559] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 479.547139][T30581] loop6: detected capacity change from 0 to 1024 [ 479.555359][T30581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 479.573546][T30581] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 479.613051][T30581] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 479.664642][T30581] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: comm syz.6.7855: inode #1: comm syz.6.7855: iget: illegal inode # [ 479.686517][T30581] EXT4-fs (loop6): no journal found [ 479.691814][T30581] EXT4-fs (loop6): can't get journal size [ 479.704942][T30581] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 479.735127][T30583] infiniband : set down [ 479.739523][T30583] infiniband : added ipvlan0 [ 479.752587][T30583] RDS/IB: : added [ 479.756442][T30583] smc: adding ib device  with port count 1 [ 479.762379][T30583] smc: ib device  port 1 has no pnetid [ 479.765796][T30581] EXT4-fs (loop6): failed to initialize system zone (-22) [ 479.841843][T30581] EXT4-fs (loop6): mount failed [ 480.136270][T30596] loop6: detected capacity change from 0 to 256 [ 480.147746][T30559] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 480.158024][T30594] loop5: detected capacity change from 0 to 2048 [ 480.194788][T30598] FAULT_INJECTION: forcing a failure. [ 480.194788][T30598] name failslab, interval 1, probability 0, space 0, times 0 [ 480.198873][T30594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.207574][T30598] CPU: 1 UID: 0 PID: 30598 Comm: syz.2.7862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 480.207711][T30598] Tainted: [W]=WARN [ 480.207742][T30598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.207798][T30598] Call Trace: [ 480.207828][T30598] [ 480.207851][T30598] __dump_stack+0x1d/0x30 [ 480.207995][T30598] dump_stack_lvl+0x95/0xd0 [ 480.208124][T30598] dump_stack+0x15/0x1b [ 480.208187][T30598] should_fail_ex+0x263/0x280 [ 480.208262][T30598] should_failslab+0x8c/0xb0 [ 480.208355][T30598] kmem_cache_alloc_noprof+0x68/0x490 [ 480.208427][T30598] ? skb_clone+0x151/0x1f0 [ 480.208631][T30598] skb_clone+0x151/0x1f0 [ 480.208726][T30598] __netlink_deliver_tap+0x2c9/0x500 [ 480.208849][T30598] netlink_unicast+0x66b/0x690 [ 480.208947][T30598] netlink_sendmsg+0x5c8/0x6f0 [ 480.209040][T30598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.209187][T30598] __sock_sendmsg+0x145/0x170 [ 480.209266][T30598] ____sys_sendmsg+0x31e/0x4a0 [ 480.209411][T30598] ___sys_sendmsg+0x195/0x1e0 [ 480.209538][T30598] __x64_sys_sendmsg+0xd4/0x160 [ 480.209648][T30598] x64_sys_call+0x17ba/0x3000 [ 480.209759][T30598] do_syscall_64+0xc0/0x2a0 [ 480.209884][T30598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.209956][T30598] RIP: 0033:0x7fa6e220acb9 [ 480.210008][T30598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.210058][T30598] RSP: 002b:00007fa6e0c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.210161][T30598] RAX: ffffffffffffffda RBX: 00007fa6e2485fa0 RCX: 00007fa6e220acb9 [ 480.210283][T30598] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 480.210335][T30598] RBP: 00007fa6e0c67090 R08: 0000000000000000 R09: 0000000000000000 [ 480.210383][T30598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.210424][T30598] R13: 00007fa6e2486038 R14: 00007fa6e2485fa0 R15: 00007ffe5124b868 [ 480.210502][T30598] [ 480.245858][T30602] EXT4-fs: Ignoring removed orlov option [ 480.464487][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.499301][T30606] ext4: Unknown parameter 'uid<00000000000000000000' [ 480.535958][T30602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.550310][T30612] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7865'. [ 480.601942][T30616] FAULT_INJECTION: forcing a failure. [ 480.601942][T30616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.615347][T30616] CPU: 1 UID: 0 PID: 30616 Comm: syz.6.7867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 480.615410][T30616] Tainted: [W]=WARN [ 480.615417][T30616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.615430][T30616] Call Trace: [ 480.615436][T30616] [ 480.615443][T30616] __dump_stack+0x1d/0x30 [ 480.615471][T30616] dump_stack_lvl+0x95/0xd0 [ 480.615515][T30616] dump_stack+0x15/0x1b [ 480.615536][T30616] should_fail_ex+0x263/0x280 [ 480.615565][T30616] should_fail+0xb/0x20 [ 480.615592][T30616] should_fail_usercopy+0x1a/0x20 [ 480.615633][T30616] _copy_from_user+0x1c/0xb0 [ 480.615723][T30616] ___sys_sendmsg+0xc1/0x1e0 [ 480.615778][T30616] __x64_sys_sendmsg+0xd4/0x160 [ 480.615863][T30616] x64_sys_call+0x17ba/0x3000 [ 480.615897][T30616] do_syscall_64+0xc0/0x2a0 [ 480.615922][T30616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.615946][T30616] RIP: 0033:0x7f521d13acb9 [ 480.615984][T30616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.616006][T30616] RSP: 002b:00007f521bb97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.616039][T30616] RAX: ffffffffffffffda RBX: 00007f521d3b5fa0 RCX: 00007f521d13acb9 [ 480.616113][T30616] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 480.616160][T30616] RBP: 00007f521bb97090 R08: 0000000000000000 R09: 0000000000000000 [ 480.616211][T30616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.616227][T30616] R13: 00007f521d3b6038 R14: 00007f521d3b5fa0 R15: 00007fff03ca0348 [ 480.616252][T30616] [ 480.822077][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7871'. [ 480.910777][T30625] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.964119][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.976246][T30627] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 480.992511][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.043667][T30637] vfat: Unknown parameter 'ÿ00000000000000000000000ÿÿþ.Ï ©¡{Òí~€?ƒuÁP¡øHöÂÁù2Ò·;ä²¹¥½R\ûîU['`…”¾ºc%’:¯]·Lÿ' [ 481.074261][T30637] tipc: Started in network mode [ 481.079234][T30637] tipc: Node identity ac1414aa, cluster identity 4711 [ 481.149041][T30637] tipc: Enabled bearer , priority 27 [ 481.200090][T30646] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.314278][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.333860][T30656] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 481.445076][T30667] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7887'. [ 481.455812][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7886'. [ 481.553705][T30675] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 481.587954][T30668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.595510][T30676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.620893][T29953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.669416][T30685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7892'. [ 481.733567][T29268] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.832222][T30698] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7895'. [ 481.915494][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 481.915526][ T29] audit: type=1400 audit(5857.942:43394): avc: denied { firmware_load } for pid=30689 comm="syz.9.7895" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 482.045662][T30705] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7898'. [ 482.064198][ T29] audit: type=1400 audit(5857.972:43395): avc: denied { bind } for pid=30695 comm="syz.2.7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 482.220382][ T3429] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 482.229789][ T3429] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz1] on syz0 [ 482.234578][T30644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.269050][ T4371] tipc: Node number set to 2886997162 [ 482.379332][T30721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.428158][T23402] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.458175][T30735] syzkaller0: entered promiscuous mode [ 482.464523][T30735] syzkaller0: entered allmulticast mode [ 482.499330][T30739] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7910'. [ 482.588845][ T29] audit: type=1400 audit(5858.612:43396): avc: denied { connect } for pid=30743 comm="syz.6.7911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 482.589294][T30745] EXT4-fs: Ignoring removed orlov option [ 482.669648][T30745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.721448][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.968564][T27000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.994274][T30764] rdma_op ffff888127b5dd80 conn xmit_rdma 0000000000000000 [ 483.035354][T30755] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.246667][T30769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.310765][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.351008][T30779] netlink: 'syz.5.7923': attribute type 4 has an invalid length. [ 483.390831][T30780] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7922'. [ 483.430594][T30787] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 483.518629][ T4371] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 483.528530][T30791] EXT4-fs: Ignoring removed orlov option [ 483.537183][ T4371] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.608033][T30791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.638213][T30796] netlink: 'syz.2.7924': attribute type 4 has an invalid length. [ 483.711239][T30801] fido_id[30801]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.774945][T30810] FAULT_INJECTION: forcing a failure. [ 483.774945][T30810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.788172][T30810] CPU: 1 UID: 0 PID: 30810 Comm: syz.2.7934 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 483.788283][T30810] Tainted: [W]=WARN [ 483.788318][T30810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.788335][T30810] Call Trace: [ 483.788345][T30810] [ 483.788355][T30810] __dump_stack+0x1d/0x30 [ 483.788437][T30810] dump_stack_lvl+0x95/0xd0 [ 483.788474][T30810] dump_stack+0x15/0x1b [ 483.788498][T30810] should_fail_ex+0x263/0x280 [ 483.788528][T30810] should_fail+0xb/0x20 [ 483.788554][T30810] should_fail_usercopy+0x1a/0x20 [ 483.788603][T30810] _copy_from_user+0x1c/0xb0 [ 483.788657][T30810] ___sys_sendmsg+0xc1/0x1e0 [ 483.788702][T30810] __x64_sys_sendmsg+0xd4/0x160 [ 483.788873][T30810] x64_sys_call+0x17ba/0x3000 [ 483.788906][T30810] do_syscall_64+0xc0/0x2a0 [ 483.788942][T30810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.789000][T30810] RIP: 0033:0x7fa6e220acb9 [ 483.789022][T30810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.789047][T30810] RSP: 002b:00007fa6e0c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.789069][T30810] RAX: ffffffffffffffda RBX: 00007fa6e2485fa0 RCX: 00007fa6e220acb9 [ 483.789084][T30810] RDX: 0000000020004801 RSI: 00002000000007c0 RDI: 0000000000000004 [ 483.789134][T30810] RBP: 00007fa6e0c67090 R08: 0000000000000000 R09: 0000000000000000 [ 483.789151][T30810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.789167][T30810] R13: 00007fa6e2486038 R14: 00007fa6e2485fa0 R15: 00007ffe5124b868 [ 483.789289][T30810] [ 484.024731][T30816] netlink: 'syz.2.7936': attribute type 4 has an invalid length. [ 484.144082][T30823] set_capacity_and_notify: 20 callbacks suppressed [ 484.144099][T30823] loop5: detected capacity change from 0 to 128 [ 484.164265][T30824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7937'. [ 484.174493][T19645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.191100][T30823] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.213737][ T29] audit: type=1400 audit(5860.242:43397): avc: denied { read } for pid=30826 comm="syz.9.7940" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 484.236737][ T29] audit: type=1400 audit(5860.242:43398): avc: denied { open } for pid=30826 comm="syz.9.7940" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 484.268153][T30829] loop7: detected capacity change from 0 to 256 [ 484.296574][T30829] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7939'. [ 484.307252][T27000] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.325817][ T29] audit: type=1326 audit(5860.302:43399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e220acb9 code=0x7ffc0000 [ 484.349702][ T29] audit: type=1326 audit(5860.302:43400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e220acb9 code=0x7ffc0000 [ 484.373014][ T29] audit: type=1326 audit(5860.302:43401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e220acb9 code=0x7ffc0000 [ 484.397122][ T29] audit: type=1326 audit(5860.302:43402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa6e220acb9 code=0x7ffc0000 [ 484.421095][ T29] audit: type=1326 audit(5860.302:43403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30820 comm="syz.2.7937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e220acb9 code=0x7ffc0000 [ 484.713212][ T4371] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 484.735938][ T4371] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on syz0 [ 484.788307][T30852] netlink: 'syz.5.7947': attribute type 4 has an invalid length. [ 484.796094][T30846] fido_id[30846]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 484.904834][T30854] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 484.917473][T30854] vhci_hcd vhci_hcd.2: invalid port number 96 [ 484.923718][T30854] vhci_hcd vhci_hcd.2: default hub control req: 4000 vfffa i0060 l0 [ 484.971507][T30858] loop6: detected capacity change from 0 to 512 [ 484.982980][T30854] tap0: tun_chr_ioctl cmd 2147767521 [ 485.015629][T30858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.123642][T30867] loop5: detected capacity change from 0 to 256 [ 485.169438][T30867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7953'. [ 485.211049][T30858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30858 comm=syz.6.7950 [ 485.255702][T29268] EXT4-fs error (device loop6): ext4_readdir:224: inode #12: comm syz-executor: path /73/file0/file0: directory fails checksum at offset 0 [ 485.281202][T29268] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 485.302099][T29268] EXT4-fs error (device loop6): ext4_readdir:224: inode #12: comm syz-executor: path /73/file0/file0: directory fails checksum at offset 0 [ 485.325671][T30876] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7955'. [ 485.361005][T29268] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 485.383395][T29268] EXT4-fs error (device loop6): ext4_readdir:224: inode #12: comm syz-executor: path /73/file0/file0: directory fails checksum at offset 0 [ 485.398293][T29268] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 485.411237][T29268] EXT4-fs error (device loop6): ext4_readdir:224: inode #12: comm syz-executor: path /73/file0/file0: directory fails checksum at offset 0 [ 485.425901][T29268] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 485.438427][T29268] EXT4-fs error (device loop6): ext4_readdir:224: inode #12: comm syz-executor: path /73/file0/file0: directory fails checksum at offset 0 [ 485.454841][T29268] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory block failed checksum [ 485.612582][T30889] loop5: detected capacity change from 0 to 2048 [ 485.625721][T30888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7961'. [ 485.653604][T30889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.696519][T30889] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.918140][T16810] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.930431][T30873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.012172][T16810] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.126832][T16810] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.171200][T30920] netlink: 'syz.5.7970': attribute type 4 has an invalid length. [ 486.188754][T16810] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.229424][ T3429] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 486.250866][ T3429] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on syz0 [ 486.311539][T16810] bridge_slave_1: left allmulticast mode [ 486.317299][T16810] bridge_slave_1: left promiscuous mode [ 486.323100][T16810] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.349374][T30928] fido_id[30928]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 486.363856][T16810] bridge_slave_0: left allmulticast mode [ 486.369602][T16810] bridge_slave_0: left promiscuous mode [ 486.376053][T16810] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.446503][T30937] loop7: detected capacity change from 0 to 1024 [ 486.576733][T16810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.577171][T30946] netlink: 'syz.5.7978': attribute type 4 has an invalid length. [ 486.597016][T16810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.613011][T16810] bond0 (unregistering): Released all slaves [ 486.794008][T30965] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7980'. [ 486.905448][T30978] netlink: 'syz.2.7982': attribute type 4 has an invalid length. [ 486.915915][T16810] hsr_slave_0: left promiscuous mode [ 486.933036][T16810] hsr_slave_1: left promiscuous mode [ 486.945334][T16810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.952802][T16810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.971448][T30929] ================================================================== [ 486.979658][T30929] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 486.987516][T30929] [ 486.989836][T30929] write to 0xffffea00054f7758 of 8 bytes by task 30817 on cpu 0: [ 486.997548][T30929] __filemap_remove_folio+0x201/0x300 [ 487.002947][T30929] filemap_remove_folio+0x6d/0x1d0 [ 487.008072][T30929] truncate_inode_folio+0x42/0x50 [ 487.013101][T30929] shmem_undo_range+0x28a/0xb10 [ 487.017953][T30929] shmem_evict_inode+0x12e/0x510 [ 487.022906][T30929] evict+0x2af/0x510 [ 487.026808][T30929] iput+0x4b9/0x650 [ 487.030620][T30929] dentry_unlink_inode+0x24f/0x260 [ 487.035738][T30929] __dentry_kill+0x18d/0x4b0 [ 487.040344][T30929] finish_dput+0x2b/0x200 [ 487.044677][T30929] dput+0x52/0x60 [ 487.048312][T30929] __fput+0x444/0x650 [ 487.052299][T30929] ____fput+0x1c/0x30 [ 487.056288][T30929] task_work_run+0x130/0x1a0 [ 487.060894][T30929] do_exit+0x466/0x1590 [ 487.065054][T30929] do_group_exit+0xfe/0x140 [ 487.069563][T30929] get_signal+0xe4f/0xf60 [ 487.073919][T30929] arch_do_signal_or_restart+0x96/0x450 [ 487.079565][T30929] irqentry_exit+0xf7/0x510 [ 487.084602][T30929] exc_general_protection+0x153/0x1e0 [ 487.089978][T30929] asm_exc_general_protection+0x26/0x30 [ 487.095529][T30929] [ 487.097848][T30929] read to 0xffffea00054f7758 of 8 bytes by task 30929 on cpu 1: [ 487.105473][T30929] folio_mapping+0xa1/0xe0 [ 487.109889][T30929] move_folios_to_lru+0x128/0x6d0 [ 487.114924][T30929] evict_folios+0x31e6/0x35b0 [ 487.119616][T30929] try_to_shrink_lruvec+0x5f6/0x960 [ 487.124812][T30929] shrink_lruvec+0x24e/0x1bc0 [ 487.129504][T30929] shrink_node+0x68e/0x2000 [ 487.134007][T30929] do_try_to_free_pages+0x404/0xcc0 [ 487.139217][T30929] try_to_free_mem_cgroup_pages+0x222/0x470 [ 487.145123][T30929] try_charge_memcg+0x37e/0xa10 [ 487.149994][T30929] obj_cgroup_charge_pages+0xa6/0x150 [ 487.155496][T30929] __memcg_kmem_charge_page+0x9e/0x170 [ 487.160964][T30929] __alloc_frozen_pages_noprof+0x18a/0x350 [ 487.166780][T30929] alloc_pages_mpol+0xb3/0x260 [ 487.171557][T30929] alloc_pages_noprof+0x8f/0x130 [ 487.176685][T30929] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 487.182694][T30929] __kvmalloc_node_noprof+0x471/0x680 [ 487.188183][T30929] ip_set_alloc+0x24/0x30 [ 487.192537][T30929] hash_netiface_create+0x282/0x740 [ 487.197853][T30929] ip_set_create+0x3cf/0x970 [ 487.202474][T30929] nfnetlink_rcv_msg+0x509/0x5d0 [ 487.207422][T30929] netlink_rcv_skb+0x123/0x220 [ 487.212209][T30929] nfnetlink_rcv+0x167/0x1720 [ 487.217067][T30929] netlink_unicast+0x5c0/0x690 [ 487.221929][T30929] netlink_sendmsg+0x5c8/0x6f0 [ 487.226690][T30929] __sock_sendmsg+0x145/0x170 [ 487.231475][T30929] ____sys_sendmsg+0x31e/0x4a0 [ 487.236261][T30929] ___sys_sendmsg+0x195/0x1e0 [ 487.240961][T30929] __x64_sys_sendmsg+0xd4/0x160 [ 487.245846][T30929] x64_sys_call+0x17ba/0x3000 [ 487.250531][T30929] do_syscall_64+0xc0/0x2a0 [ 487.255041][T30929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.260934][T30929] [ 487.263271][T30929] value changed: 0xffff888125bb5648 -> 0x0000000000000000 [ 487.270377][T30929] [ 487.272755][T30929] Reported by Kernel Concurrency Sanitizer on: [ 487.278923][T30929] CPU: 1 UID: 0 PID: 30929 Comm: syz.9.7971 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 487.290405][T30929] Tainted: [W]=WARN [ 487.294230][T30929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.304307][T30929] ================================================================== [ 487.316051][T16810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.323502][T16810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.332899][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 487.332916][ T29] audit: type=1400 audit(5863.352:43502): avc: denied { write } for pid=3307 comm="syz-executor" path="pipe:[2457]" dev="pipefs" ino=2457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 487.367372][T16810] veth1_macvtap: left promiscuous mode [ 487.373408][T16810] veth0_macvtap: left promiscuous mode [ 487.378978][T16810] veth1_vlan: left promiscuous mode [ 487.397433][T16810] veth0_vlan: left promiscuous mode [ 487.424083][ T29] audit: type=1400 audit(5863.392:43503): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=43826 daddr=10.128.1.124 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 487.577003][T30929] syz.9.7971 (30929) used greatest stack depth: 5992 bytes left [ 487.640246][T16810] team0 (unregistering): Port device team_slave_1 removed [ 487.655462][T16810] team0 (unregistering): Port device team_slave_0 removed [ 487.703616][T30924] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.773481][T23402] syz_tun (unregistering): left allmulticast mode [ 487.780014][T23402] syz_tun (unregistering): left promiscuous mode [ 487.786484][T23402] bridge0: port 1(syz_tun) entered disabled state [ 487.832879][ T9940] syz1: Port: 1 Link DOWN [ 487.874657][T16821] smc: removing ib device syz1 [ 494.433516][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!