last executing test programs: 2m32.493462866s ago: executing program 4 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x80) personality(0xfe47fef9f5ff7379) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") clock_nanosleep(0xfffffff6, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4}, 0x10) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x4}}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79"}}}}}}}, 0x0) 2m31.785403664s ago: executing program 4 (id=478): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') semget$private(0x0, 0x20000000102, 0x200) r1 = socket(0x2b, 0x80801, 0x1) syz_open_dev$loop(&(0x7f0000000000), 0x7fff, 0x80000) listen(r1, 0x7e5a) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fadvise64(r4, 0x8000080000000, 0x1007, 0x1) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="200000002d0001002abd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="05000180880000006d7eb89f5b669d838483481ca18f9869857aceaac479621da536029819f6c2cece36a07171193428e2fca97f217224918918ec1f9898c4794aacb91ff8d6420b330f9d267b69a6cea9e823c9a96d7bb036c603b471b9ec23b3badc0d811e4de3a79125954095c6de00000000"], 0x20}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 2m30.400917387s ago: executing program 4 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x900, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000100)=0x1c, 0x800) pread64(r2, &(0x7f00000002c0)=""/78, 0x4e, 0x7fffffffffffffff) getsockname$inet6(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) 2m30.242543328s ago: executing program 4 (id=492): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7ffffdbb}]}) setuid(0x0) (async) setuid(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xbc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004e900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2m27.889463697s ago: executing program 4 (id=515): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x453f, 0xb028, 0x0, &(0x7f00000001c0)={[0xdd]}, 0x8) shmdt(0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 2m26.224855409s ago: executing program 4 (id=522): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') semget$private(0x0, 0x20000000102, 0x200) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) syz_open_dev$loop(&(0x7f0000000000), 0x7fff, 0x80000) listen(0xffffffffffffffff, 0x7e5a) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fadvise64(r3, 0x8000080000000, 0x1007, 0x1) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="200000002d0001002abd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="05000180880000006d7eb89f5b669d838483481ca18f9869857aceaac479621da536029819f6c2cece36a07171193428e2fca97f217224918918ec1f9898c4794aacb91ff8d6420b330f9d267b69a6cea9e823c9a96d7bb036c603b471b9ec23b3badc0d811e4de3a79125954095c6de00000000"], 0x20}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.167811903s ago: executing program 32 (id=522): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') semget$private(0x0, 0x20000000102, 0x200) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) syz_open_dev$loop(&(0x7f0000000000), 0x7fff, 0x80000) listen(0xffffffffffffffff, 0x7e5a) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fadvise64(r3, 0x8000080000000, 0x1007, 0x1) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="200000002d0001002abd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="05000180880000006d7eb89f5b669d838483481ca18f9869857aceaac479621da536029819f6c2cece36a07171193428e2fca97f217224918918ec1f9898c4794aacb91ff8d6420b330f9d267b69a6cea9e823c9a96d7bb036c603b471b9ec23b3badc0d811e4de3a79125954095c6de00000000"], 0x20}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.729503721s ago: executing program 5 (id=670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x44, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x20004085}, 0x80) 2m8.712820662s ago: executing program 5 (id=672): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) llistxattr(0x0, 0x0, 0x0) 2m7.516881463s ago: executing program 5 (id=675): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2m7.137090199s ago: executing program 5 (id=677): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000400)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@debug}, {@usrquota}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x1400, 0x1224, 0x0, 0x819ad65fc2db671b, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0xae) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000003c0)={0x33de, 0x7ffe, 0x3, 0x400c, 0x5, "00000004e200", 0x70000001, 0x3}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @empty}, 0xc) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$cgroup_devices(r0, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 2m6.184764433s ago: executing program 5 (id=688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) r2 = socket$netlink(0x10, 0x3, 0x0) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002e000305000000000000000018000080060000000d0000000001"], 0x28}], 0x1}, 0x14008010) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x21dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xb, 0x9, 0x8, 0x5, 0x0, 0x8, 0x80200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x100040, 0xfffffffffffffffc, 0xaa, 0x7, 0x1be, 0x8, 0x8001, 0x0, 0x8001, 0x0, 0xfffffffffffffffb}, r6, 0x9, r5, 0x1) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) 2m4.881284481s ago: executing program 5 (id=698): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x22020600) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049367, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 2m4.76177556s ago: executing program 33 (id=698): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x22020600) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049367, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 1m22.693401211s ago: executing program 1 (id=1029): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f696c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e8e0000c80080025000000000005000600000000001400190003dd"], 0x270}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 1m22.354339164s ago: executing program 1 (id=1032): socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x65, 0x4b, 0x0, 0x2, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0xa2, 0x10000, 0x0, 0x7d, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x6, 0xa20e, 0x0, 0x0, 0x5989, 0x2}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) socket(0xa, 0x3, 0x87) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r2}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000500)=[{0xc9b4, 0x6, 0x5, 0xfe}]}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) 1m22.059587184s ago: executing program 1 (id=1036): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x2, 0x788, 0x600, 0x5c8a98ea, 0x7, 0x5, 0xfffffffd}}}}]}, 0x58}, 0x1, 0x8100}, 0x0) 1m21.952311361s ago: executing program 1 (id=1039): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r2 = creat(0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000040)={0x3, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000062b000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xe26f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x2, 0x0) tgkill(r8, r8, 0x4) socket$rxrpc(0x21, 0x2, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r2, @ANYBLOB], 0x50) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1m21.654481771s ago: executing program 1 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x6e) getuid() fstat(0xffffffffffffffff, &(0x7f00000003c0)) sendmmsg$unix(r0, &(0x7f0000000480), 0x0, 0x40891) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r4 = syz_open_dev$loop(0x0, 0x8, 0x80000) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xfc}}, 0x0) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) truncate(0x0, 0x2fffffd) 1m21.345067082s ago: executing program 1 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff000000080005"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r9 = epoll_create1(0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r9}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r8, 0x12a, 0x14, 0x17, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x200400d1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000380)=0x387fffff, 0x4) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0xfffffffffffffff2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xd5}}]}, 0x94}}, 0x0) sendmmsg(r12, &(0x7f0000001c00), 0x40000000000017a, 0x40840) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="200026bd7000fcdbdf257300000008000300", @ANYRESHEX, @ANYBLOB="0c00990004000000230000000800ef00060000000800ef00040000000800ef0008000000d1e9514effb93d97b8714bf9077e4ac860f418e785e8d53e9994a81772530ccdb0b7c532b111304666ee3d2299b4d6f761d47b352bad444042ee3496465527fef5f20f3480a301bbcc4bec78394bedeb23a4689ae328aad77cb1743153d3ebbaad5b9003cbe516936411a95e5c5a73250e37496502e4ada73b839fd9626aa20597dc4ad5ac9a9ebc90049056428fe18e108aadaab7e1221faad9e0b2c3ad6fbdaa5bdaaf045c9ec24528719e2c5a1759200c328c4e9243c40ae544b6cfdca7fe9bda"], 0x40}, 0x1, 0x0, 0x0, 0x40845}, 0x8000) 1m21.194314183s ago: executing program 34 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff000000080005"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r9 = epoll_create1(0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r9}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r8, 0x12a, 0x14, 0x17, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x200400d1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000380)=0x387fffff, 0x4) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0xfffffffffffffff2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0xd5}}]}, 0x94}}, 0x0) sendmmsg(r12, &(0x7f0000001c00), 0x40000000000017a, 0x40840) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="200026bd7000fcdbdf257300000008000300", @ANYRESHEX, @ANYBLOB="0c00990004000000230000000800ef00060000000800ef00040000000800ef0008000000d1e9514effb93d97b8714bf9077e4ac860f418e785e8d53e9994a81772530ccdb0b7c532b111304666ee3d2299b4d6f761d47b352bad444042ee3496465527fef5f20f3480a301bbcc4bec78394bedeb23a4689ae328aad77cb1743153d3ebbaad5b9003cbe516936411a95e5c5a73250e37496502e4ada73b839fd9626aa20597dc4ad5ac9a9ebc90049056428fe18e108aadaab7e1221faad9e0b2c3ad6fbdaa5bdaaf045c9ec24528719e2c5a1759200c328c4e9243c40ae544b6cfdca7fe9bda"], 0x40}, 0x1, 0x0, 0x0, 0x40845}, 0x8000) 1m19.717712832s ago: executing program 3 (id=1061): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00"/12, @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405", @ANYRES8=r2, @ANYRES32], 0x48}, 0x0) 1m19.564201363s ago: executing program 3 (id=1063): mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x1, 0x8, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2c, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m19.398829634s ago: executing program 3 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000003f58d168a9af2b41fe10644e11d02de4c7d9350cadcecb314b7029cf4b90c619ba710fd40583c4295851f07d79bb366baafff4067be870b5b623434b861b931411a1681ca80c4d50b42b42f8071132c4b809d5a9e4de03843e93eec7b18b375ab10463b242195abbb1b74a974e0bca68a9efba4b34d20f57ab9fa171a7847b376ce4243fba0914fac1efd9c7d195da9d4959a789e35994b66041677eb0ec37f5a1db0723339f3ea6b078255b0f1af43e1886d51e9a957625422fc12afd8debbfad474c06e2d7d578e239260fed2d8c"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x401, 0x8000000, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x2008000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x70bd27, 0x5, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_IIF={0x8, 0x3, r4}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x18}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0001}, 0x80) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r4, 0x3, {0x1, 0x1, 0x2}}, 0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x52b242d) keyctl$search(0xa, r6, &(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x10000}, 0x50) 1m19.31558815s ago: executing program 3 (id=1067): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, &(0x7f0000000340)}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@errors_remount}]}, 0x1, 0x5a8, &(0x7f0000000680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x2000, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x34) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x4) close(0x3) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0x3706) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000080)=[r3, r4]}, 0x2) ptrace$pokeuser(0x6, r5, 0x388, 0xfffffffffffffffc) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f0000000580)="13297acbde74ba", 0x7}], 0x1) 1m18.359292734s ago: executing program 3 (id=1070): socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x65, 0x4b, 0x0, 0x2, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0xa2, 0x10000, 0x0, 0x7d, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x6, 0xa20e, 0x0, 0x0, 0x5989, 0x2}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) socket(0xa, 0x3, 0x87) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r2}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000500)=[{0xc9b4, 0x6, 0x5, 0xfe}]}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) 1m17.210783541s ago: executing program 3 (id=1079): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000391000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2c, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r6}}) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, r7, 0x4, r7}, 0xffffffffffffffe7) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) bind$xdp(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x1, 0x0, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x88c1) 1m17.131438767s ago: executing program 35 (id=1079): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000391000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2c, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r6}}) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, r7, 0x4, r7}, 0xffffffffffffffe7) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) bind$xdp(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x1, 0x0, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x88c1) 38.296776035s ago: executing program 6 (id=1478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000002000a0100005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797d32114564a714000000d80800006bd1ca44d192813377164c99544fa1d63c349710a06bf3c36fba0de3da35324b88054a851559fc974af39b7d98888f3699666431c7b109dedc4374a111d614c15a9aa506fa02000000f2b290ea1bac89638ee8a54214ff0a6727193d913710fb51874afe83040000000b977b46f706cc38a3c580dd632efe937c8fcf3cb42382d2441fd677a609728683f843a68a8b28919a0793f6aac485eb253d324676e33a0279121b648da77ff7c4f5b49e531cceb1105d27d9dec49ae799f5b5948d3a8455b5681b8c95a8b038025d5d0a39dd911629d6503712017f09b41c1d13a623e7437c4cfc688145df9650864c700af6b140a09f9045ef846f278060782e4c3adc4a58f4edbb7132b104b17ca35df6eda2ec084e9eba4857b294e6fb99c81a5a9b02d2da63c4754b77872a54b681906bb96e6ee697dd1734c0eddacafec62eb67051cdcf3d932876898d912b98556410a1a3d7adef94307ff414e90c6ca51c1808391d4d59c3acebcfc42e320000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="ade557b36344109ac09336e42eccb9aed5dc3973d5f95421eecd1a5df36158378e1b95cff2afe68f3dc7d24df9e1babadee2895c3a5b8e143c0e0c0c2643fdf6d544fed7d458bdfc4b3d6e744da0634c3fbf6535ac38cd602afb07f5964a1ed25926adba76ddbccb1581126a326ee1cb4d066f2713b09b241fa17b08a4", @ANYRES32=r0], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x17764f1d8061aca6, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r7, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) getdents(0xffffffffffffffff, 0x0, 0x58) 37.93054256s ago: executing program 6 (id=1480): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001040)=[{{&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/116, 0x74}], 0x1, &(0x7f00000006c0)=""/128, 0x80}, 0xd}, {{&(0x7f0000000740)=@pptp, 0x80, &(0x7f0000000fc0)=[{&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000a80)=""/244, 0xf4}, {&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f0000000c80)=""/69, 0x45}, {&(0x7f0000000d00)=""/89, 0x59}, {&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000f80)=""/10, 0xa}], 0x7}, 0x8000}], 0x2, 0x2100, &(0x7f00000010c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$random(0xffffffffffffff9c, 0x0, 0x508402, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x24000010) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x4000000a, 0x0) 35.935538835s ago: executing program 6 (id=1485): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f696c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e8e0000c80080025000000000005000600000000001400190003dd"], 0x270}, 0x1, 0x0, 0x0, 0x40015}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) sysinfo(&(0x7f0000000200)=""/32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x852dd6c070cd7e4d, 0x70bd2c, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000008000000000000000080012"], 0xa0}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r9) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=""/116) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d49566e9c39c851199afaa74c3c1f71ae40808e676c6ab21654ad91a73569deeef0972c992505b9903b1c2", @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf2505000000080001000000000005000a006d000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004040) 35.603729048s ago: executing program 6 (id=1490): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000440)=0x0) io_cancel(r4, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000002cc0)="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", 0x116d, 0x0, 0x0, 0x3, r3}, &(0x7f0000002c80)) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x25, 0x0, 0xea, 0x1, 0x0, r3, 0x0, 0x0, 0xa00, 0x0, 0x2}]) setns(r1, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',\x00']) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000c40)=""/4096) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) write$P9_RVERSION(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000165ffff"], 0x15) setns(r6, 0x24020000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fadbdf2527000000180001801400020065727370616e30"], 0x2c}}, 0x4) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x48}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsopen(&(0x7f0000000180)='sysfs\x00', 0x0) 34.99750218s ago: executing program 6 (id=1494): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) socket(0x2, 0xa, 0xff) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x7fff, 0x7, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x68, 0x0, 0x4, 0x29, 0x0, @loopback, @private=0xa010100, {[@cipso={0x86, 0x15, 0x0, [{0x5, 0x9, "31f37fef11597b"}, {0x1, 0x4, 'i%'}, {0x6, 0x2}]}, @lsrr={0x83, 0x7, 0x64, [@remote]}, @rr={0x7, 0xb, 0x5d, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1]}, @cipso={0x86, 0x56, 0x1, [{0x6, 0x3, "05"}, {0x2, 0x7, "596548e273"}, {0x7, 0x11, "24800bf739d2dd8c0c1c2d618a8f51"}, {0x0, 0x2}, {0x6, 0x11, "f05b5e0dc6c5204884244a2af7123e"}, {0x7, 0xf, "3da31ae9d0c4115715407c4dcb"}, {0x6, 0xd, "e562293a7c204a1c6dff18"}, {0x7, 0x6, "1ba7f073"}]}, @lsrr={0x83, 0xf, 0x37, [@dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101, @private=0xa010101]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {0x3, 0xffe0}, {0xc, 0xc}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000000)=',$[@.\x00', 0x8c1, 0x118, &(0x7f0000000040)={0x2a04, 0x5ea, 0x8001, 0x4}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) socket(0x2, 0xa, 0xff) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840) (async) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x7fff, 0x7, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x68, 0x0, 0x4, 0x29, 0x0, @loopback, @private=0xa010100, {[@cipso={0x86, 0x15, 0x0, [{0x5, 0x9, "31f37fef11597b"}, {0x1, 0x4, 'i%'}, {0x6, 0x2}]}, @lsrr={0x83, 0x7, 0x64, [@remote]}, @rr={0x7, 0xb, 0x5d, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1]}, @cipso={0x86, 0x56, 0x1, [{0x6, 0x3, "05"}, {0x2, 0x7, "596548e273"}, {0x7, 0x11, "24800bf739d2dd8c0c1c2d618a8f51"}, {0x0, 0x2}, {0x6, 0x11, "f05b5e0dc6c5204884244a2af7123e"}, {0x7, 0xf, "3da31ae9d0c4115715407c4dcb"}, {0x6, 0xd, "e562293a7c204a1c6dff18"}, {0x7, 0x6, "1ba7f073"}]}, @lsrr={0x83, 0xf, 0x37, [@dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010101, @private=0xa010101]}]}}}}}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {0x3, 0xffe0}, {0xc, 0xc}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000000)=',$[@.\x00', 0x8c1, 0x118, &(0x7f0000000040)={0x2a04, 0x5ea, 0x8001, 0x4}) (async) 34.54155947s ago: executing program 6 (id=1500): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 34.504592863s ago: executing program 36 (id=1500): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 4.761416006s ago: executing program 7 (id=1712): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) getdents64(r0, 0x0, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x8, 0x1, 0x8}}, 0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x4, 0x1, 0xa00000, 0x3, 0x1, 0x5d86c5d0, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r2, r1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xffffdfffffffffff, 0x1000}, 0x20) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pwritev(r8, &(0x7f0000000140)=[{&(0x7f0000000040)="ab6e512ed54a6517f12c45744d94046d4e45cef0e70425eae8ba40de4032496007757b8ffa7f69f6e683bbe8be7661c74f7ef195c6fb816e8abfc4e439682bcc4b98230c40c5601f236eac21ba658fa620b3f2bbcf23d3a055aaec3c9f3132640c0564389d0c91cece64404336768ad99ad6a16847ae", 0x76}, {&(0x7f0000000100)="03cabf5f062c61863cfdd292c1c74db3769132ae14952408e053", 0x1a}], 0x2, 0x35, 0x1000) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001480)=""/4102, 0x101e}], 0x2f}, 0xacb}], 0x1, 0xc7dca51c736e71e5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setreuid(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.311488317s ago: executing program 7 (id=1718): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xa4}, {0x6}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xa4}, {0x6}]}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021100000000000100000000000200080008000000f100000000000000020001000000000000000500000000a0050006003c0000000a004e210000000700000000000000000000ffffac1414aa000800000000000005000500000000000a004e240000000e00000000000000000000ffffe0000002280b000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021100000000000100000000000200080008000000f100000000000000020001000000000000000500000000a0050006003c0000000a004e210000000700000000000000000000ffffac1414aa000800000000000005000500000000000a004e240000000e00000000000000000000ffffe0000002280b000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000080)={0x3, 0x0, {0x2, 0x2, 0x4, 0x2, 0x638d}, 0x2}) 3.962524391s ago: executing program 9 (id=1719): socket$inet_icmp_raw(0x2, 0x3, 0x1) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) (fail_nth: 14) 3.925239633s ago: executing program 9 (id=1721): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0xc}, 0x0) syz_io_uring_setup(0x10e9, &(0x7f0000000640)={0x0, 0x2454, 0x800, 0x0, 0x8022d}, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440088c4) 3.903623115s ago: executing program 2 (id=1722): sched_setscheduler(0x0, 0x2, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (rerun: 32) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x6}, 0x8000, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='dots,nodots,nodots,check=strict\b\x00os1xfloppy,nodots,dmask=00000000000000000000004,\x00'], 0x0, 0x22e, &(0x7f0000000100)="$eJzs3D9ra2UcB/CnTdu0KS2ZBJ0edNElaGcHRSoUA4o1RR2EU5pqSExKTobEKbOTr8HRQRc3wXfQN6FuRShddLrn0p6kTdp7S7k3aeH281nyO8/3PCe/kz+H8ATOyfs/fd88TCuHSW9vtbgQFj8Iw/+yLCuHxTA2DO/89uXZj7srYUqMcTMr5vX63u+bfxTDcfmbk9Otf45fO3795MkX3zXS2Ehju9OLSdzvdHrJfqseDxppsxLjZ616ktZjo53Wu1P5YatzdDSISftgo3TUradpTNqD2KwPYq8Te91BTL5NGu1YqVTiRinwMmq//J9l4TTLsqw4DFmWPXRD3DPv/+O2+9XXn3xYrW5/HuNqCP8O+7V+LX/M8493qtvvxgvlq1ln/X6tcJm/l+dx4rD9fm05lEb51o38fP5KePutPD/PPvq0ei1fCwdzP3sAAAAAAHg1VeKlm+v7C6PN6fzv0sX6fr4x8f9Avn7/85+j+UvhjaV7PhkAAADgmdLBD82k1ap3J4u/dkKYGCmEEK72WQvTO8+pWArTI+OG5/qksy4WQr6IMsMjZ8UQ5t98YfRqX49WxiNrt31+Zl8sP6efGRXrlyOhfLdZhVm38ev9fK3uXtxy0XhzftcjAABgfq5+9D90JwAAAAAAAAAAAAAAAAAAAPB43eF+YONbvb3w7cQe+BQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG71NAAA//8uk1Er") socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x2b46, 0x53, 0x1, 0x2, 0x9, 0x9}, &(0x7f0000000280)=0x9c) (async) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(0x0, r5) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) 3.793477863s ago: executing program 2 (id=1723): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4015}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x713, 0x3, 0x0, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x4000000000}, {0x0, 0x80000000000, 0xfffffffffffffffd, 0x3}, {0x0, 0x0, 0x80000000}, 0x70bd2a, 0x1000, 0xa, 0x5}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1d0, &(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, r5, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) r7 = fsmount(r2, 0x0, 0x0) fchownat(r7, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa36810000000806"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3.792821862s ago: executing program 9 (id=1724): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100000000005e39a075040000000000100000000000000020000000000095702f4a5f934cf9191200"/59], 0x24, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051401002abd7000ffdbdf250800010000000000080003b6"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x6, 0x0, 0xfffffffd}, {0x0, 0x49, 0xc1, 0xe}, {0xfffa, 0x9, 0x8, 0xe0}, {0x6, 0x6, 0x0, 0xfffffffc}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x11}}) fchown(r1, 0xffffffffffffffff, 0xee01) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getqdisc={0x34, 0x26, 0x100, 0x30bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x9, 0x3}, {0x5, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) flistxattr(r3, &(0x7f0000000080)=""/99, 0x63) r5 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000684100d0ab637b36c951e9a5000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000024c0)={r1, 0x20, &(0x7f0000002480)={&(0x7f00000013c0)=""/4096, 0x1000, 0x0, &(0x7f00000023c0)=""/144, 0x90}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES64=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @private2, 0x9}, 0x1c) 3.792331823s ago: executing program 7 (id=1725): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000"/68], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3, 0xc) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000010c0)={0x0, 0x0, 0x13, 0x9, 0x1b0, &(0x7f0000000cc0)="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"}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000370436a75be4c1a2f2b400000000", @ANYRES32=r5, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r4, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00442f002001000000000000000000000000000100000000000000000000ffff000000002421880b000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.145736126s ago: executing program 2 (id=1739): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4015}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x713, 0x3, 0x0, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x4000000000}, {0x0, 0x80000000000, 0xfffffffffffffffd, 0x3}, {0x0, 0x0, 0x80000000}, 0x70bd2a, 0x1000, 0xa, 0x5}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1d0, &(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, r5, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) r7 = fsmount(r2, 0x0, 0x0) fchownat(r7, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa36810000000806"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3.103469569s ago: executing program 7 (id=1730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x5}]}, {0x0, [0x30, 0x61, 0x2e, 0x61, 0x0, 0x61, 0x25a049f4d060172d]}}, 0x0, 0x2d}, 0x28) io_uring_setup(0x14fee, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) 2.877381025s ago: executing program 2 (id=1731): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f00000001c0)) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x800, @vifc_lcl_addr=@loopback, @remote}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x7}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2.049473611s ago: executing program 9 (id=1733): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000043c0)={0xffffffffffffffff, 0x0, 0x0, 0x7a, 0x0, &(0x7f0000002340)=""/122, 0x9, 0x0, 0x0, 0x8b3, 0x0, &(0x7f00000033c0)="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", 0x2, 0x0, 0x10001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f000000008000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) (fail_nth: 7) 2.045130751s ago: executing program 8 (id=1734): openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) perf_event_open(&(0x7f0000000040)={0x2, 0xfd31, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getgid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(0x0, 0x0) 1.785405829s ago: executing program 0 (id=1736): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000500)={[&(0x7f0000000400)=':@}$$\x00']}, 0x0, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c64"], 0xec}, 0x1, 0x0, 0x0, 0x20004085}, 0x80) 1.465876691s ago: executing program 9 (id=1737): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x20, 0x0, 0x401, 0x6cd, 0xaa8, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xe000000000000001, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r2, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600000005000500000000"], 0x2c}}, 0x24000806) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000600)={0x3001a6100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x50) 1.346014279s ago: executing program 0 (id=1749): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r0, 0x40f, 0x1) 1.296078152s ago: executing program 0 (id=1740): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7, 0xffff45fc}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x800) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x200, 0x4, 0x28}, 0x18) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.233302646s ago: executing program 7 (id=1741): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000"/68], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3, 0xc) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000010c0)={0x0, 0x0, 0x13, 0x9, 0x1b0, &(0x7f0000000cc0)="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"}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000370436a75be4c1a2f2b400000000", @ANYRES32=r5, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32=r4, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) setsockopt$sock_void(r3, 0x1, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6092c01f00442f002001000000000000000000000000000100000000000000000000ffff000000002421880b000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 845.171253ms ago: executing program 8 (id=1742): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x50, 0x5}, {0x30, 0x0, 0x0, 0xffeff010}, {0x6, 0x0, 0x8, 0x5}]}, 0x10) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x7c41, &(0x7f0000000440)={0x0, 0x5065, 0x800, 0x0, 0x99}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000001780), 0xa) r5 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) epoll_pwait(r5, &(0x7f0000000780)=[{}], 0x1, 0x12, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48800) socket$isdn(0x22, 0x3, 0x1) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) statx(r7, &(0x7f0000000100)='./file0\x00', 0x1c00, 0x7ff, &(0x7f0000000400)) 796.952986ms ago: executing program 2 (id=1743): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4015}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x713, 0x3, 0x0, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x4000000000}, {0x0, 0x80000000000, 0xfffffffffffffffd, 0x3}, {0x0, 0x0, 0x80000000}, 0x70bd2a, 0x1000, 0xa, 0x5}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1d0, &(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r4, r5, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) r7 = fsmount(r2, 0x0, 0x0) fchownat(r7, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa36810000000806"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 713.453571ms ago: executing program 8 (id=1744): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf251100000096f44671fb73b54a8dbad72018b2a1610f7e96bae6bb0333f95cf5"], 0x14}}, 0x0) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xc}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x3b, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x40004) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x0, 0x0, 0x0, 0xb, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) openat2$dir(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x10000, 0x6a, 0x20}, 0x18) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x280040c1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x0, 0x4, 0x2d, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffe, 0x1}}) socket$caif_seqpacket(0x25, 0x5, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd7c}, 0x94) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r8, 0x40044591, 0x0) write$evdev(r8, &(0x7f0000000280), 0x0) 543.794793ms ago: executing program 7 (id=1745): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0)={0x10}, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(0x0, 0x0) 433.390861ms ago: executing program 8 (id=1746): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14008042}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)={0x7c, r2, 0x1, 0x170bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x66, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4351}, @device_a, @broadcast, @random="63cfcdfc1d88", {0x9, 0x8}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x7, @default, 0x901, @void, @void, @void, @val={0x4, 0x6, {0xc, 0xa4, 0x493f, 0x5}}, @void, @val={0x5, 0x3, {0x5, 0x78, 0x80}}, @void, @void, @void, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x1ff, 0x2, 0x0, 0x8, 0x0, 0x1}, 0x8, 0x539, 0x35}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x5, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x48}}, @void}}]}, 0x7c}}, 0x4040000) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x904, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "52c0594d12"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x80) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x25, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0xfbfd}}) io_uring_enter(r3, 0x742f, 0x7fae, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000140), 0x80) 363.315755ms ago: executing program 0 (id=1747): socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x65, 0x4b, 0x0, 0x2, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0xa2, 0x10000, 0x0, 0x7d, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x6, 0xa20e, 0x0, 0x0, 0x5989, 0x2}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, 0x0}, 0x20) socket(0xa, 0x3, 0x87) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r2}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000680), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000500)=[{0xc9b4, 0x6, 0x5, 0xfe}]}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) 362.543885ms ago: executing program 8 (id=1748): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x40015}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) sysinfo(&(0x7f0000000200)=""/32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000008000000000000000080012"], 0xa0}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r6) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=""/116) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d49566e9c39c851199afaa74c3c1f71ae40808e676c6ab21654ad91a73569deeef0972c992505b9903b1c2", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf2505000000080001000000000005000a006d000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004040) 283.834251ms ago: executing program 0 (id=1750): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0x200}, 0x16, 0x2) tkill(r0, 0x34) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x40001a2) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace(0x4208, r0) 129.617882ms ago: executing program 8 (id=1751): socket$inet_icmp_raw(0x2, 0x3, 0x1) modify_ldt$write2(0x11, &(0x7f0000000040)={0x10010001, 0x20001000, 0x4000, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x8, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r3, 0xd}, 0x8) modify_ldt$write(0x1, &(0x7f0000000080)={0x2, 0x100000, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 129.278522ms ago: executing program 0 (id=1752): r0 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffeffa, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0xc0239, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x20a3, 0x0, 0x0, 0x7, 0x89, 0x0, 0x43, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x36, [@loopback]}, @rr={0x7, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x2, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x34008041) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x149a82, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0xfe8e, 0x12) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) 0s ago: executing program 2 (id=1753): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4f9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89123839d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde00"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001180)="b9074ee92d14cc047497e5f0888e", 0x0, 0x8, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = semget$private(0x0, 0x4, 0x0) semtimedop(r7, &(0x7f0000000000)=[{0x2, 0x1, 0x1800}], 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='autogroup\x00') sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) kernel console output (not intermixed with test programs): 195.851548][T11059] loop2: detected capacity change from 0 to 512 [ 195.864316][T11059] ext4: Invalid uid '0x00000000ffffffff' [ 195.896930][T11059] syz.2.1254 (11059) used obsolete PPPIOCDETACH ioctl [ 195.913408][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1256'. [ 196.006019][T11062] xt_hashlimit: size too large, truncated to 1048576 [ 196.040154][T11076] netlink: 'syz.7.1259': attribute type 25 has an invalid length. [ 196.048315][T11076] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1259'. [ 196.084075][T11076] loop7: detected capacity change from 0 to 1024 [ 196.158459][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 196.183700][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 196.259496][T11083] xt_hashlimit: size too large, truncated to 1048576 [ 196.555126][T11112] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 196.691220][T11122] netlink: 'syz.7.1271': attribute type 25 has an invalid length. [ 196.699632][T11122] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1271'. [ 196.725124][T11122] loop7: detected capacity change from 0 to 1024 [ 196.821818][T11133] EXT4-fs: Ignoring removed nobh option [ 196.847115][T11133] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.917447][T11133] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.960958][ T9910] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.214567][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1280'. [ 197.282781][T11174] xt_hashlimit: size too large, truncated to 1048576 [ 198.050250][T11195] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1284'. [ 198.145064][T11202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1286'. [ 198.183589][T11119] Set syz1 is full, maxelem 65536 reached [ 198.345256][ T28] kauditd_printk_skb: 442 callbacks suppressed [ 198.345274][ T28] audit: type=1326 audit(1775763112.853:15568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.2.1289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x0 [ 198.428386][ T28] audit: type=1400 audit(1775763112.913:15569): avc: denied { mount } for pid=11207 comm="syz.0.1288" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 198.581701][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 198.617988][T11225] xt_hashlimit: size too large, truncated to 1048576 [ 198.693035][T11230] validate_nla: 1 callbacks suppressed [ 198.693073][T11230] netlink: 'syz.0.1296': attribute type 25 has an invalid length. [ 198.845093][ T28] audit: type=1326 audit(1775763113.353:15570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 198.922733][ T28] audit: type=1326 audit(1775763113.383:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 198.977934][ T28] audit: type=1326 audit(1775763113.383:15571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 198.992785][T11251] set_capacity_and_notify: 1 callbacks suppressed [ 198.992841][T11251] loop8: detected capacity change from 0 to 512 [ 199.028500][ T28] audit: type=1326 audit(1775763113.383:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 199.039727][T11251] EXT4-fs: Ignoring removed oldalloc option [ 199.065872][ T28] audit: type=1326 audit(1775763113.383:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 199.112168][ T28] audit: type=1326 audit(1775763113.383:15575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 199.137003][ T28] audit: type=1326 audit(1775763113.383:15576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 199.161373][ T28] audit: type=1326 audit(1775763113.383:15577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 199.198518][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 199.198539][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 199.224103][T11251] EXT4-fs error (device loop8): ext4_iget_extra_inode:5040: inode #15: comm syz.8.1303: corrupted in-inode xattr: invalid ea_ino [ 199.274667][T11251] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 199.274965][T11251] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1303: couldn't read orphan inode 15 (err -117) [ 199.284716][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 199.284743][ C0] EXT4-fs (loop8): initial error at time 1775763113: ext4_iget_extra_inode:5040: inode 15 [ 199.284769][ C0] EXT4-fs (loop8): last error at time 1775763113: ext4_iget_extra_inode:5040: inode 15 [ 199.346027][T11261] loop7: detected capacity change from 0 to 512 [ 199.358650][T11261] EXT4-fs: Ignoring removed nobh option [ 199.369127][T11261] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 199.403554][T11251] loop8: lost filesystem error report for type 5 error -117 [ 199.404159][T11251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.428905][T11261] EXT4-fs (loop7): 1 truncate cleaned up [ 199.445246][T11261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.464579][T11267] xt_hashlimit: size too large, truncated to 1048576 [ 199.519428][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 199.631544][ T9910] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.701551][T11281] netlink: 'syz.8.1310': attribute type 25 has an invalid length. [ 199.993471][T11291] __nla_validate_parse: 7 callbacks suppressed [ 199.993491][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 200.042265][T11291] batadv_slave_0: entered promiscuous mode [ 200.079306][T11290] batadv_slave_0: left promiscuous mode [ 200.086347][T11292] loop6: detected capacity change from 0 to 128 [ 200.109178][ T9646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.155930][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 200.210596][T11298] xt_hashlimit: size too large, truncated to 1048576 [ 200.317354][T11306] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1318'. [ 200.386131][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1319'. [ 200.454396][T11309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11309 comm=syz.7.1319 [ 200.761250][T11338] loop6: detected capacity change from 0 to 1024 [ 200.771302][T11338] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.794808][T11340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1331'. [ 200.804014][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.818864][T11338] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 200.835043][T11338] EXT4-fs (loop6): mount failed [ 200.856251][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1330'. [ 200.904914][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 200.929554][T11345] xt_hashlimit: size too large, truncated to 1048576 [ 201.031508][T11348] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1334'. [ 201.054621][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1334'. [ 201.068220][T11348] ip6gre3: entered promiscuous mode [ 201.074278][T11348] ip6gre3: entered allmulticast mode [ 201.123746][T11348] xt_hashlimit: size too large, truncated to 1048576 [ 201.199895][T11354] netlink: 'syz.2.1336': attribute type 25 has an invalid length. [ 201.219228][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1335'. [ 201.271215][T11357] loop7: detected capacity change from 0 to 128 [ 201.292135][T11357] EXT4-fs: Ignoring removed nobh option [ 201.323519][T11357] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.350759][T11357] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.411329][ T9646] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.312728][T11389] netlink: 'syz.7.1348': attribute type 25 has an invalid length. [ 202.410000][T11393] random: crng reseeded on system resumption [ 202.448948][T11393] syzkaller0: entered promiscuous mode [ 202.454649][T11393] syzkaller0: entered allmulticast mode [ 202.690487][T11402] xt_hashlimit: size too large, truncated to 1048576 [ 203.163854][T11425] netlink: 'syz.6.1359': attribute type 25 has an invalid length. [ 203.840548][T11433] xt_hashlimit: size too large, truncated to 1048576 [ 203.877037][ T28] kauditd_printk_skb: 654 callbacks suppressed [ 203.877056][ T28] audit: type=1400 audit(1775763118.383:16231): avc: denied { append } for pid=11432 comm="syz.6.1361" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.227390][ T28] audit: type=1400 audit(1775763118.733:16232): avc: denied { cpu } for pid=11441 comm="syz.6.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 204.481903][ T28] audit: type=1326 audit(1775763118.993:16233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.526071][ T28] audit: type=1326 audit(1775763118.993:16234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.553364][ T28] audit: type=1326 audit(1775763118.993:16235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.579917][ T28] audit: type=1326 audit(1775763118.993:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.607092][ T28] audit: type=1326 audit(1775763118.993:16237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.633770][ T28] audit: type=1326 audit(1775763118.993:16238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.731970][T11463] xt_hashlimit: size too large, truncated to 1048576 [ 204.747395][ T28] audit: type=1326 audit(1775763118.993:16239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.801965][ T28] audit: type=1326 audit(1775763119.023:16240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11457 comm="syz.2.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 204.829548][T11470] netlink: 'syz.7.1371': attribute type 25 has an invalid length. [ 205.337001][T11491] FAULT_INJECTION: forcing a failure. [ 205.337001][T11491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.377431][T11491] CPU: 0 UID: 0 PID: 11491 Comm: syz.2.1376 Not tainted syzkaller #0 PREEMPT(full) [ 205.377497][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.377595][T11491] Call Trace: [ 205.377605][T11491] [ 205.377615][T11491] __dump_stack+0x1d/0x30 [ 205.377652][T11491] dump_stack_lvl+0x95/0xd0 [ 205.377684][T11491] dump_stack+0x15/0x1b [ 205.377711][T11491] should_fail_ex+0x263/0x280 [ 205.377800][T11491] should_fail+0xb/0x20 [ 205.377836][T11491] should_fail_usercopy+0x1a/0x20 [ 205.377876][T11491] _copy_to_user+0x20/0xa0 [ 205.377972][T11491] simple_read_from_buffer+0xb5/0x130 [ 205.378012][T11491] proc_fail_nth_read+0x10e/0x150 [ 205.378071][T11491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.378160][T11491] vfs_read+0x1ab/0x7f0 [ 205.378261][T11491] ? put_event+0x61/0x80 [ 205.378292][T11491] ? perf_pending_task+0x1df/0x210 [ 205.378337][T11491] ? task_work_run+0x169/0x1a0 [ 205.378367][T11491] ksys_read+0xdc/0x1a0 [ 205.378433][T11491] __x64_sys_read+0x40/0x50 [ 205.378457][T11491] x64_sys_call+0x2886/0x3020 [ 205.378490][T11491] do_syscall_64+0x12c/0x370 [ 205.378528][T11491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.378609][T11491] RIP: 0033:0x7f2e6bbcd04e [ 205.378630][T11491] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.378652][T11491] RSP: 002b:00007f2e6a666fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.378673][T11491] RAX: ffffffffffffffda RBX: 00007f2e6a6676c0 RCX: 00007f2e6bbcd04e [ 205.378690][T11491] RDX: 000000000000000f RSI: 00007f2e6a6670a0 RDI: 0000000000000005 [ 205.378775][T11491] RBP: 00007f2e6a667090 R08: 0000000000000000 R09: 0000000000000000 [ 205.378789][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.378803][T11491] R13: 00007f2e6be86038 R14: 00007f2e6be85fa0 R15: 00007fff1aedf6b8 [ 205.378862][T11491] [ 205.710158][T11522] __nla_validate_parse: 8 callbacks suppressed [ 205.710178][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1380'. [ 205.742748][T11522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11522 comm=syz.6.1380 [ 205.965881][T11538] netlink: 'syz.2.1385': attribute type 25 has an invalid length. [ 206.011198][T11542] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1386'. [ 206.023958][T11538] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1385'. [ 206.088465][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 206.152528][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1388'. [ 206.293017][T11554] xt_hashlimit: size too large, truncated to 1048576 [ 206.352477][T11586] loop8: detected capacity change from 0 to 1024 [ 206.393084][T11586] EXT4-fs: Ignoring removed bh option [ 206.488835][T11586] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.992560][T11605] netlink: 'syz.2.1402': attribute type 25 has an invalid length. [ 207.042275][T11605] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1402'. [ 207.198412][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.319420][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 207.401920][ T9910] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.580357][T11632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1400'. [ 207.640746][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1403'. [ 207.709266][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1404'. [ 207.767014][T11645] xt_hashlimit: size too large, truncated to 1048576 [ 207.838431][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.940226][T11650] FAULT_INJECTION: forcing a failure. [ 207.940226][T11650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.997795][T11650] CPU: 1 UID: 0 PID: 11650 Comm: syz.2.1406 Not tainted syzkaller #0 PREEMPT(full) [ 207.997836][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.997852][T11650] Call Trace: [ 207.997860][T11650] [ 207.997868][T11650] __dump_stack+0x1d/0x30 [ 207.997924][T11650] dump_stack_lvl+0x95/0xd0 [ 207.997955][T11650] dump_stack+0x15/0x1b [ 207.997984][T11650] should_fail_ex+0x263/0x280 [ 207.998037][T11650] should_fail+0xb/0x20 [ 207.998062][T11650] should_fail_usercopy+0x1a/0x20 [ 207.998132][T11650] _copy_from_iter+0xcf/0xea0 [ 207.998178][T11650] file_tty_write+0x322/0x690 [ 207.998271][T11650] ? __pfx_tty_write+0x10/0x10 [ 207.998295][T11650] tty_write+0x25/0x30 [ 207.998318][T11650] vfs_write+0x5a6/0x9f0 [ 207.998349][T11650] ksys_write+0xdc/0x1a0 [ 207.998374][T11650] __x64_sys_write+0x40/0x50 [ 207.998397][T11650] x64_sys_call+0x27e1/0x3020 [ 207.998432][T11650] do_syscall_64+0x12c/0x370 [ 207.998540][T11650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.998568][T11650] RIP: 0033:0x7f2e6bc0c819 [ 207.998588][T11650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.998608][T11650] RSP: 002b:00007f2e6a667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.998708][T11650] RAX: ffffffffffffffda RBX: 00007f2e6be85fa0 RCX: 00007f2e6bc0c819 [ 207.998752][T11650] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000003 [ 207.998766][T11650] RBP: 00007f2e6a667090 R08: 0000000000000000 R09: 0000000000000000 [ 207.998780][T11650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.998837][T11650] R13: 00007f2e6be86038 R14: 00007f2e6be85fa0 R15: 00007fff1aedf6b8 [ 207.998860][T11650] [ 208.345686][T11664] netlink: 'syz.8.1407': attribute type 25 has an invalid length. [ 208.363999][T11664] netlink: 184 bytes leftover after parsing attributes in process `syz.8.1407'. [ 208.513607][T11682] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.566879][T11682] loop2: detected capacity change from 0 to 1024 [ 208.613119][T11682] Invalid argument reading file caps for ./file0 [ 208.878472][ T28] kauditd_printk_skb: 704 callbacks suppressed [ 208.878490][ T28] audit: type=1326 audit(1775763123.393:16945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 208.953716][ T28] audit: type=1326 audit(1775763123.423:16946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.140657][ T28] audit: type=1326 audit(1775763123.423:16947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.336498][T11731] loop7: detected capacity change from 0 to 512 [ 209.410984][T11726] loop6: detected capacity change from 0 to 512 [ 209.500931][T11731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.658370][ T28] audit: type=1326 audit(1775763123.433:16948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.706332][T11726] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.737263][ T28] audit: type=1326 audit(1775763123.433:16949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.770971][ T9646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.787891][ T28] audit: type=1326 audit(1775763123.433:16950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.809048][T11726] EXT4-fs (loop6): 1 truncate cleaned up [ 209.816820][ T28] audit: type=1326 audit(1775763123.443:16951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.842403][ T28] audit: type=1326 audit(1775763123.443:16952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.867196][ T28] audit: type=1326 audit(1775763123.443:16953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.872054][T11726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.898286][ T28] audit: type=1326 audit(1775763123.443:16954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.7.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734860d04e code=0x7ffc0000 [ 209.942267][T11743] xt_hashlimit: size too large, truncated to 1048576 [ 210.013958][T11749] FAULT_INJECTION: forcing a failure. [ 210.013958][T11749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.063795][T11749] CPU: 1 UID: 0 PID: 11749 Comm: syz.8.1420 Not tainted syzkaller #0 PREEMPT(full) [ 210.063881][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.063961][T11749] Call Trace: [ 210.063969][T11749] [ 210.063979][T11749] __dump_stack+0x1d/0x30 [ 210.064012][T11749] dump_stack_lvl+0x95/0xd0 [ 210.064039][T11749] dump_stack+0x15/0x1b [ 210.064125][T11749] should_fail_ex+0x263/0x280 [ 210.064235][T11749] should_fail+0xb/0x20 [ 210.064263][T11749] should_fail_usercopy+0x1a/0x20 [ 210.064362][T11749] _copy_from_user+0x1c/0xb0 [ 210.064478][T11749] __sys_bind+0x106/0x290 [ 210.064525][T11749] __x64_sys_bind+0x3f/0x50 [ 210.064561][T11749] x64_sys_call+0x2b30/0x3020 [ 210.064632][T11749] do_syscall_64+0x12c/0x370 [ 210.064668][T11749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.064699][T11749] RIP: 0033:0x7fd1391fc819 [ 210.064720][T11749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.064746][T11749] RSP: 002b:00007fd137c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 210.064767][T11749] RAX: ffffffffffffffda RBX: 00007fd139475fa0 RCX: 00007fd1391fc819 [ 210.064781][T11749] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000003 [ 210.064794][T11749] RBP: 00007fd137c57090 R08: 0000000000000000 R09: 0000000000000000 [ 210.064809][T11749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.064874][T11749] R13: 00007fd139476038 R14: 00007fd139475fa0 R15: 00007fff5ab673d8 [ 210.064896][T11749] [ 211.316981][ T7476] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.502210][T11796] loop6: detected capacity change from 0 to 2048 [ 211.519990][T11796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.613069][T11804] netlink: 'syz.7.1427': attribute type 25 has an invalid length. [ 211.649270][T11804] __nla_validate_parse: 2 callbacks suppressed [ 211.649293][T11804] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1427'. [ 211.889918][ T108] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 211.919127][ T108] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 211.947715][ T108] EXT4-fs (loop6): This should not happen!! Data will be lost [ 211.947715][ T108] [ 211.971983][ T108] EXT4-fs (loop6): Total free blocks count 0 [ 211.987187][ T108] EXT4-fs (loop6): Free/Dirty block details [ 211.996850][ T108] EXT4-fs (loop6): free_blocks=4096 [ 212.002376][ T108] EXT4-fs (loop6): dirty_blocks=208 [ 212.007895][ T108] EXT4-fs (loop6): Block reservation details [ 212.015207][ T108] EXT4-fs (loop6): i_reserved_data_blocks=13 [ 212.025845][ T7476] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 212.039233][ T7476] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.297949][T11862] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.305505][T11862] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.328572][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.389691][T11862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.418222][T11862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.498745][ T3605] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.520310][ T3605] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.553757][ T3605] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.588530][ T3605] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.615922][T11875] netlink: 'syz.6.1433': attribute type 1 has an invalid length. [ 212.683263][T11875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.710143][T11877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.731671][T11877] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 212.764245][T11880] loop7: detected capacity change from 0 to 512 [ 212.771491][T11877] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 212.822474][T11880] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1434: corrupted inode contents [ 212.883523][T11880] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.883808][T11880] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #16: comm syz.7.1434: mark_inode_dirty error [ 212.893032][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 212.893073][ C1] EXT4-fs (loop7): initial error at time 1775763127: ext4_do_update_inode:5602: inode 16 [ 212.893112][ C1] EXT4-fs (loop7): last error at time 1775763127: ext4_do_update_inode:5602: inode 16 [ 212.964611][T11880] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.964887][T11880] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1434: corrupted inode contents [ 212.987692][T11880] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 212.987917][T11880] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.1434: mark_inode_dirty error [ 213.012270][T11880] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 213.012498][T11880] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1434: corrupted inode contents [ 213.014788][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1435'. [ 213.022571][T11880] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 213.044872][T11880] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 213.066540][T11880] loop7: lost filesystem error report for type 5 error -117 [ 213.067716][T11880] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #16: comm syz.7.1434: corrupted inode contents [ 213.090475][T11880] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 213.091804][T11880] EXT4-fs error (device loop7): ext4_truncate:4602: inode #16: comm syz.7.1434: mark_inode_dirty error [ 213.093965][T11885] xt_hashlimit: size too large, truncated to 1048576 [ 213.101839][T11880] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 213.125853][T11880] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 213.144968][T11880] loop7: lost filesystem error report for type 5 error -117 [ 213.148243][T11880] EXT4-fs (loop7): 1 truncate cleaned up [ 213.162555][ T4573] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:28: Failed to release dquot type 1 [ 213.171485][T11880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.188223][ T4573] loop7: lost filesystem error report for type 5 error -117 [ 213.220060][T11880] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.361004][ T9646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.374266][ T108] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 213.408465][ T108] loop7: lost filesystem error report for type 5 error -117 [ 213.630708][T11902] netlink: 'syz.0.1442': attribute type 25 has an invalid length. [ 213.652060][T11902] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1442'. [ 213.698412][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1443'. [ 213.750367][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1443'. [ 213.775528][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.810541][T11904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.911615][T11913] ip6gretap0: entered promiscuous mode [ 214.238412][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 214.330070][ T28] kauditd_printk_skb: 856 callbacks suppressed [ 214.330090][ T28] audit: type=1400 audit(1775763128.843:17809): avc: denied { create } for pid=11937 comm="syz.7.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 214.572271][ T28] audit: type=1400 audit(1775763129.073:17810): avc: denied { create } for pid=11983 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.636591][ T28] audit: type=1400 audit(1775763129.083:17811): avc: denied { write } for pid=11983 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.690525][ T28] audit: type=1400 audit(1775763129.083:17812): avc: denied { setopt } for pid=11983 comm="syz.0.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.742798][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'. [ 214.758518][ T28] audit: type=1400 audit(1775763129.083:17813): avc: denied { ioctl } for pid=11983 comm="syz.0.1449" path="socket:[22008]" dev="sockfs" ino=22008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.786261][ T28] audit: type=1400 audit(1775763129.143:17814): avc: denied { sys_module } for pid=11983 comm="syz.0.1449" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.826984][T11995] xt_hashlimit: size too large, truncated to 1048576 [ 214.945742][ T28] audit: type=1326 audit(1775763129.453:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.6.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684d15c819 code=0x7ffc0000 [ 215.024680][ T28] audit: type=1326 audit(1775763129.453:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.6.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684d15c819 code=0x7ffc0000 [ 215.075307][T12015] netlink: 'syz.7.1457': attribute type 25 has an invalid length. [ 215.088400][T12015] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1457'. [ 215.101045][ T28] audit: type=1326 audit(1775763129.453:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.6.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684d15c819 code=0x7ffc0000 [ 215.184576][ T28] audit: type=1326 audit(1775763129.453:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12010 comm="syz.6.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f684d15c819 code=0x7ffc0000 [ 217.140649][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1463'. [ 217.413493][T12072] xt_hashlimit: size too large, truncated to 1048576 [ 218.078407][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.095087][T12120] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 218.140147][T12123] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 218.366782][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1469'. [ 218.483616][T12131] xt_hashlimit: size too large, truncated to 1048576 [ 218.594393][T12136] netlink: 'syz.7.1470': attribute type 25 has an invalid length. [ 218.645930][T12136] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1470'. [ 218.718448][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 220.009517][T12191] loop6: detected capacity change from 0 to 128 [ 221.343016][T12225] netlink: 'syz.0.1483': attribute type 4 has an invalid length. [ 221.479183][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 221.597084][T12231] xt_hashlimit: size too large, truncated to 1048576 [ 221.792037][T12264] netlink: 'syz.6.1485': attribute type 25 has an invalid length. [ 221.882041][T12264] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1485'. [ 222.039957][ T28] kauditd_printk_skb: 352 callbacks suppressed [ 222.039977][ T28] audit: type=1326 audit(1775763136.553:18171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.083602][T12278] loop6: detected capacity change from 0 to 512 [ 222.166689][ T28] audit: type=1326 audit(1775763136.553:18172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.222113][T12278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.234937][ T28] audit: type=1326 audit(1775763136.553:18173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.259463][ T28] audit: type=1326 audit(1775763136.553:18174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.283900][ T28] audit: type=1326 audit(1775763136.553:18175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.308382][ T28] audit: type=1326 audit(1775763136.553:18176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.367819][T12278] 9p: Bad value for 'rfdno' [ 222.384614][ T28] audit: type=1326 audit(1775763136.553:18177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.493041][ T28] audit: type=1326 audit(1775763136.553:18178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.568398][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 222.596730][ T28] audit: type=1326 audit(1775763136.553:18179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 222.718434][ T28] audit: type=1326 audit(1775763136.553:18180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.2.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 223.032428][T12287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.191614][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1503'. [ 223.229620][ T50] team0: Port device netdevsim1 removed [ 223.249134][T12307] netlink: 'syz.0.1502': attribute type 1 has an invalid length. [ 223.321753][T12309] xt_hashlimit: size too large, truncated to 1048576 [ 223.420263][T12314] loop8: detected capacity change from 0 to 8192 [ 223.528056][ T50] bridge_slave_1: left allmulticast mode [ 223.567296][ T50] bridge_slave_1: left promiscuous mode [ 223.604786][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.670358][ T50] bridge_slave_0: left allmulticast mode [ 223.677404][ T50] bridge_slave_0: left promiscuous mode [ 223.719704][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.857832][T12348] mmap: syz.8.1508 (12348): VmData 29077504 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 224.031057][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.049227][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.058709][ T50] bond0 (unregistering): Released all slaves [ 224.066551][ T50] bond1 (unregistering): Released all slaves [ 224.179733][T12357] ip6gretap0: entered promiscuous mode [ 224.185509][T12357] macvtap1: entered promiscuous mode [ 224.229621][T12357] macvtap1: entered allmulticast mode [ 224.235085][T12357] ip6gretap0: entered allmulticast mode [ 224.271139][T12357] ip6gretap0: left allmulticast mode [ 224.299390][T12357] ip6gretap0: left promiscuous mode [ 224.341572][ T50] hsr_slave_0: left promiscuous mode [ 224.358889][ T50] hsr_slave_1: left promiscuous mode [ 224.384981][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.456133][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.621668][ T50] team0 (unregistering): Port device team_slave_1 removed [ 224.649597][ T50] team0 (unregistering): Port device team_slave_0 removed [ 224.839631][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1518'. [ 224.952187][T12396] xt_hashlimit: size too large, truncated to 1048576 [ 224.973977][T12312] chnl_net:caif_netlink_parms(): no params data found [ 225.082690][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.098508][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.113988][T12312] bridge_slave_0: entered allmulticast mode [ 225.128062][T12312] bridge_slave_0: entered promiscuous mode [ 225.142355][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.159485][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.187132][T12312] bridge_slave_1: entered allmulticast mode [ 225.194850][T12312] bridge_slave_1: entered promiscuous mode [ 225.244052][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.277513][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.351594][T12312] team0: Port device team_slave_0 added [ 225.371349][T12312] team0: Port device team_slave_1 added [ 225.503483][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.531898][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.672284][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.709725][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.776035][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 226.398411][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.678365][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.757186][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.991588][T12312] hsr_slave_0: entered promiscuous mode [ 226.997781][T12312] hsr_slave_1: entered promiscuous mode [ 227.029547][T12312] debugfs: 'hsr0' already exists in 'hsr' [ 227.048432][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 227.050019][T12312] Cannot create hsr debugfs directory [ 227.376897][T12312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 227.391751][T12312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 227.411606][T12312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 227.431740][T12312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 227.484387][T12461] loop2: detected capacity change from 0 to 1024 [ 227.552762][T12461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.576017][T12466] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1528'. [ 227.729132][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.762840][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.804428][T12485] loop7: detected capacity change from 0 to 256 [ 227.806396][T12462] loop8: detected capacity change from 0 to 512 [ 227.873928][T12485] FAT-fs (loop7): Directory bread(block 64) failed [ 227.896447][T12485] FAT-fs (loop7): Directory bread(block 65) failed [ 227.914335][T12485] FAT-fs (loop7): Directory bread(block 66) failed [ 227.939136][T12485] FAT-fs (loop7): Directory bread(block 67) failed [ 227.947658][T12462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.978279][T12485] FAT-fs (loop7): Directory bread(block 68) failed [ 227.979371][T12462] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.996453][T12485] FAT-fs (loop7): Directory bread(block 69) failed [ 227.996605][T12485] FAT-fs (loop7): Directory bread(block 70) failed [ 228.039680][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.047016][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.057370][T12485] FAT-fs (loop7): Directory bread(block 71) failed [ 228.071255][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.078644][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.105691][T12485] FAT-fs (loop7): Directory bread(block 72) failed [ 228.125690][T12312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.143081][T12485] FAT-fs (loop7): Directory bread(block 73) failed [ 228.243318][T12473] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 228.255326][T12473] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.404794][T12485] syz.7.1531: attempt to access beyond end of device [ 228.404794][T12485] loop7: rw=2049, sector=1240, nr_sectors = 16 limit=256 [ 228.476577][T12485] syz.7.1531: attempt to access beyond end of device [ 228.476577][T12485] loop7: rw=2049, sector=1288, nr_sectors = 32 limit=256 [ 228.506161][T12485] syz.7.1531: attempt to access beyond end of device [ 228.506161][T12485] loop7: rw=2049, sector=1352, nr_sectors = 32 limit=256 [ 228.543968][T12485] syz.7.1531: attempt to access beyond end of device [ 228.543968][T12485] loop7: rw=2049, sector=1416, nr_sectors = 32 limit=256 [ 228.565121][T12485] syz.7.1531: attempt to access beyond end of device [ 228.565121][T12485] loop7: rw=2049, sector=1512, nr_sectors = 32 limit=256 [ 228.595386][T12485] syz.7.1531: attempt to access beyond end of device [ 228.595386][T12485] loop7: rw=2049, sector=1576, nr_sectors = 32 limit=256 [ 228.620084][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.644686][T12485] syz.7.1531: attempt to access beyond end of device [ 228.644686][T12485] loop7: rw=2049, sector=1640, nr_sectors = 32 limit=256 [ 228.668453][T12485] syz.7.1531: attempt to access beyond end of device [ 228.668453][T12485] loop7: rw=2049, sector=1704, nr_sectors = 32 limit=256 [ 228.693743][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.701898][T12485] syz.7.1531: attempt to access beyond end of device [ 228.701898][T12485] loop7: rw=2049, sector=1768, nr_sectors = 32 limit=256 [ 228.739402][T12485] syz.7.1531: attempt to access beyond end of device [ 228.739402][T12485] loop7: rw=2049, sector=1864, nr_sectors = 32 limit=256 [ 228.811961][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 228.823622][ T9910] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.859640][T12506] FAULT_INJECTION: forcing a failure. [ 228.859640][T12506] name failslab, interval 1, probability 0, space 0, times 0 [ 228.886256][T12503] xt_hashlimit: size too large, truncated to 1048576 [ 228.894396][T12506] CPU: 1 UID: 0 PID: 12506 Comm: syz.8.1534 Not tainted syzkaller #0 PREEMPT(full) [ 228.894432][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.894490][T12506] Call Trace: [ 228.894500][T12506] [ 228.894511][T12506] __dump_stack+0x1d/0x30 [ 228.894548][T12506] dump_stack_lvl+0x95/0xd0 [ 228.894582][T12506] dump_stack+0x15/0x1b [ 228.894659][T12506] should_fail_ex+0x263/0x280 [ 228.894698][T12506] ? nft_delrule+0x3b/0x620 [ 228.894776][T12506] should_failslab+0x8c/0xb0 [ 228.894848][T12506] __kmalloc_cache_noprof+0x5f/0x410 [ 228.894884][T12506] ? avc_has_perm_noaudit+0xab/0x130 [ 228.894929][T12506] nft_delrule+0x3b/0x620 [ 228.895024][T12506] ? nla_strcmp+0xc3/0xe0 [ 228.895117][T12506] nf_tables_delrule+0x6a4/0xad0 [ 228.895153][T12506] nfnetlink_rcv+0xc1e/0x1720 [ 228.895249][T12506] netlink_unicast+0x5c0/0x690 [ 228.895296][T12506] netlink_sendmsg+0x5c8/0x6f0 [ 228.895327][T12506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.895354][T12506] ____sys_sendmsg+0x563/0x5b0 [ 228.895419][T12506] ___sys_sendmsg+0x195/0x1e0 [ 228.895460][T12506] __x64_sys_sendmsg+0xd4/0x160 [ 228.895535][T12506] x64_sys_call+0x194c/0x3020 [ 228.895613][T12506] do_syscall_64+0x12c/0x370 [ 228.895654][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.895683][T12506] RIP: 0033:0x7fd1391fc819 [ 228.895705][T12506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.895785][T12506] RSP: 002b:00007fd137c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.895856][T12506] RAX: ffffffffffffffda RBX: 00007fd139475fa0 RCX: 00007fd1391fc819 [ 228.895876][T12506] RDX: 0000000020040010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 228.895894][T12506] RBP: 00007fd137c57090 R08: 0000000000000000 R09: 0000000000000000 [ 228.895908][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.895988][T12506] R13: 00007fd139476038 R14: 00007fd139475fa0 R15: 00007fff5ab673d8 [ 228.896015][T12506] [ 228.998697][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 229.155154][ T28] kauditd_printk_skb: 388 callbacks suppressed [ 229.155180][ T28] audit: type=1326 audit(1775763143.663:18569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.192727][ T28] audit: type=1326 audit(1775763143.693:18570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.218707][ T28] audit: type=1326 audit(1775763143.693:18571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.250097][ T28] audit: type=1326 audit(1775763143.693:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.274453][ T28] audit: type=1326 audit(1775763143.693:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.320418][T12521] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 229.344740][ T28] audit: type=1326 audit(1775763143.693:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.367425][T12525] veth1_to_hsr: entered promiscuous mode [ 229.377618][ T28] audit: type=1326 audit(1775763143.693:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.400432][T12525] macvtap1: entered allmulticast mode [ 229.409905][ T28] audit: type=1326 audit(1775763143.693:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.427539][T12525] veth1_to_hsr: entered allmulticast mode [ 229.435136][ T28] audit: type=1326 audit(1775763143.693:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.472996][T12312] veth0_vlan: entered promiscuous mode [ 229.487316][T12312] veth1_vlan: entered promiscuous mode [ 229.494882][ T28] audit: type=1326 audit(1775763143.693:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 229.541461][T12312] veth0_macvtap: entered promiscuous mode [ 229.550811][T12312] veth1_macvtap: entered promiscuous mode [ 229.576218][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.597243][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.655861][ T3583] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.666041][ T3583] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.688869][ T3583] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.713726][ T3583] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.777483][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1547'. [ 229.846855][T12550] xt_hashlimit: size too large, truncated to 1048576 [ 229.923581][T12549] netem: change failed [ 230.017130][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 230.884985][T12563] netlink: 'syz.9.1501': attribute type 25 has an invalid length. [ 230.894091][T12563] netlink: 184 bytes leftover after parsing attributes in process `syz.9.1501'. [ 230.936171][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1549'. [ 230.979496][T12566] 8021q: VLANs not supported on vcan0 [ 231.396153][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1553'. [ 231.528441][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 231.990007][T12577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.035145][T12574] xt_hashlimit: size too large, truncated to 1048576 [ 232.087264][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 232.100339][T12581] loop7: detected capacity change from 0 to 1024 [ 232.135282][T12581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.211892][T12582] xt_hashlimit: size too large, truncated to 1048576 [ 232.245458][ T9646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.432611][T12595] netem: change failed [ 232.517676][T12601] netlink: 'syz.0.1561': attribute type 25 has an invalid length. [ 232.527663][T12601] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1561'. [ 232.615648][T12612] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1564'. [ 232.806433][T12624] FAULT_INJECTION: forcing a failure. [ 232.806433][T12624] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 232.861634][T12624] CPU: 1 UID: 0 PID: 12624 Comm: syz.8.1569 Not tainted syzkaller #0 PREEMPT(full) [ 232.861734][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 232.861758][T12624] Call Trace: [ 232.861765][T12624] [ 232.861775][T12624] __dump_stack+0x1d/0x30 [ 232.861811][T12624] dump_stack_lvl+0x95/0xd0 [ 232.861882][T12624] dump_stack+0x15/0x1b [ 232.861913][T12624] should_fail_ex+0x263/0x280 [ 232.861961][T12624] should_fail_alloc_page+0xf2/0x100 [ 232.861993][T12624] __alloc_frozen_pages_noprof+0x108/0x360 [ 232.862035][T12624] alloc_pages_mpol+0xb3/0x260 [ 232.862068][T12624] alloc_pages_noprof+0x8f/0x140 [ 232.862196][T12624] __pmd_alloc+0x47/0x430 [ 232.862238][T12624] handle_mm_fault+0x1ebb/0x3020 [ 232.862328][T12624] ? mt_find+0x291/0x3d0 [ 232.862375][T12624] ? lock_mm_and_find_vma+0x8b/0x440 [ 232.862429][T12624] do_user_addr_fault+0x3fd/0x1050 [ 232.862532][T12624] ? lockref_put_return+0xf7/0x130 [ 232.862579][T12624] exc_page_fault+0x62/0xa0 [ 232.862609][T12624] asm_exc_page_fault+0x26/0x30 [ 232.862630][T12624] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 232.862726][T12624] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e [ 232.862759][T12624] RSP: 0018:ffffc90001adbc30 EFLAGS: 00050202 [ 232.862785][T12624] RAX: ffff888104ae6f48 RBX: 0000000000000004 RCX: 0000000000000004 [ 232.862804][T12624] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffffc90001adbcbc [ 232.862822][T12624] RBP: 0000000000000001 R08: 00000000000000f6 R09: 0000000000000000 [ 232.862865][T12624] R10: 0001c90001adbcbc R11: 0001c90001adbcbf R12: 00002000000003c0 [ 232.862885][T12624] R13: 0000000000000049 R14: ffffc90001adbcbc R15: 00002000000003c0 [ 232.862913][T12624] _copy_from_user+0x6f/0xb0 [ 232.862959][T12624] do_ipv6_setsockopt+0x124/0x21d0 [ 232.863001][T12624] ? kstrtoull+0x111/0x140 [ 232.863097][T12624] ? __rcu_read_unlock+0x4e/0x70 [ 232.863120][T12624] ? avc_has_perm_noaudit+0xab/0x130 [ 232.863154][T12624] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 232.863181][T12624] ipv6_setsockopt+0x59/0x130 [ 232.863242][T12624] tcp_setsockopt+0x98/0xb0 [ 232.863286][T12624] sock_common_setsockopt+0x69/0x80 [ 232.863350][T12624] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.863388][T12624] __sys_setsockopt+0x184/0x200 [ 232.863499][T12624] __x64_sys_setsockopt+0x64/0x80 [ 232.863543][T12624] x64_sys_call+0x2327/0x3020 [ 232.863580][T12624] do_syscall_64+0x12c/0x370 [ 232.863729][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.863781][T12624] RIP: 0033:0x7fd1391fc819 [ 232.863797][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.863814][T12624] RSP: 002b:00007fd137c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.863838][T12624] RAX: ffffffffffffffda RBX: 00007fd139475fa0 RCX: 00007fd1391fc819 [ 232.863931][T12624] RDX: 0000000000000049 RSI: 0000000000000029 RDI: 0000000000000003 [ 232.863947][T12624] RBP: 00007fd137c57090 R08: 0000000000000004 R09: 0000000000000000 [ 232.863963][T12624] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 232.864058][T12624] R13: 00007fd139476038 R14: 00007fd139475fa0 R15: 00007fff5ab673d8 [ 232.864081][T12624] [ 233.428863][T12640] FAULT_INJECTION: forcing a failure. [ 233.428863][T12640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.443783][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1574'. [ 233.446534][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz.8.1573 Not tainted syzkaller #0 PREEMPT(full) [ 233.446677][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.446731][T12640] Call Trace: [ 233.446761][T12640] [ 233.446895][T12640] __dump_stack+0x1d/0x30 [ 233.446977][T12640] dump_stack_lvl+0x95/0xd0 [ 233.447062][T12640] dump_stack+0x15/0x1b [ 233.447138][T12640] should_fail_ex+0x263/0x280 [ 233.447306][T12640] should_fail+0xb/0x20 [ 233.447385][T12640] should_fail_usercopy+0x1a/0x20 [ 233.447485][T12640] _copy_to_iter+0xd2/0xea0 [ 233.447589][T12640] ? chacha_block_generic+0x2dc/0x310 [ 233.447806][T12640] get_random_bytes_user+0x138/0x2b0 [ 233.447884][T12640] ? vfs_write+0x86e/0x9f0 [ 233.447967][T12640] ? import_ubuf+0xe8/0x120 [ 233.448160][T12640] __x64_sys_getrandom+0xcf/0x1a0 [ 233.448257][T12640] x64_sys_call+0x2a28/0x3020 [ 233.448357][T12640] do_syscall_64+0x12c/0x370 [ 233.448455][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.448531][T12640] RIP: 0033:0x7fd1391fc819 [ 233.448635][T12640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.448694][T12640] RSP: 002b:00007fd137c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 233.448768][T12640] RAX: ffffffffffffffda RBX: 00007fd139475fa0 RCX: 00007fd1391fc819 [ 233.448813][T12640] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 233.448955][T12640] RBP: 00007fd137c57090 R08: 0000000000000000 R09: 0000000000000000 [ 233.448999][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.449043][T12640] R13: 00007fd139476038 R14: 00007fd139475fa0 R15: 00007fff5ab673d8 [ 233.449109][T12640] [ 233.640285][T12647] xt_hashlimit: size too large, truncated to 1048576 [ 233.650182][T12638] ip6gre1: entered promiscuous mode [ 233.655501][T12638] ip6gre1: entered allmulticast mode [ 233.663507][ T3603] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.682540][ T3603] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.690450][ T9548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.762943][T12650] netlink: 'syz.8.1575': attribute type 25 has an invalid length. [ 233.802740][T12652] loop2: detected capacity change from 0 to 512 [ 233.842631][T12652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 233.864406][T12652] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1576: invalid indirect mapped block 4294967295 (level 0) [ 233.894888][T12652] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 233.896029][T12652] EXT4-fs (loop2): Remounting filesystem read-only [ 233.905246][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 233.905268][ C0] EXT4-fs (loop2): initial error at time 1775763148: ext4_free_branches:1023: inode 16 [ 233.905294][ C0] EXT4-fs (loop2): last error at time 1775763148: ext4_free_branches:1023: inode 16 [ 233.937780][T11868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.946072][T12652] EXT4-fs (loop2): 1 orphan inode deleted [ 233.953392][T12652] EXT4-fs (loop2): 1 truncate cleaned up [ 233.959971][T12652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.988472][T12652] __nla_validate_parse: 1 callbacks suppressed [ 233.988495][T12652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1576'. [ 234.118595][ T3603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.168463][T11868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.183518][ T3603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.266573][T12670] SELinux: Context ÷ is not valid (left unmapped). [ 234.279077][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.323990][ T3603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.336405][ T28] kauditd_printk_skb: 582 callbacks suppressed [ 234.336424][ T28] audit: type=1326 audit(1775763148.843:19161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.378586][ T3603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.435783][ T28] audit: type=1326 audit(1775763148.873:19162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.519125][ T28] audit: type=1326 audit(1775763148.913:19163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.545112][ T3603] team0: Port device netdevsim1 removed [ 234.554867][ T3603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.581706][ T3603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.627823][ T28] audit: type=1326 audit(1775763148.913:19164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.673726][ T3603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.690674][ T28] audit: type=1326 audit(1775763148.913:19165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.699302][ T3603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.758384][ T28] audit: type=1326 audit(1775763148.913:19166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.808416][ T28] audit: type=1326 audit(1775763148.913:19167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.864578][ T28] audit: type=1326 audit(1775763148.913:19168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 234.942117][ T3603] bridge_slave_1: left allmulticast mode [ 234.951103][ T3603] bridge_slave_1: left promiscuous mode [ 234.964894][ T3603] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.974994][ T28] audit: type=1326 audit(1775763148.913:19169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 235.031594][ T3603] bridge_slave_0: left allmulticast mode [ 235.037379][ T3603] bridge_slave_0: left promiscuous mode [ 235.053926][ T28] audit: type=1326 audit(1775763148.913:19170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.7.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 235.088485][ T3603] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.291064][T12694] FAULT_INJECTION: forcing a failure. [ 235.291064][T12694] name failslab, interval 1, probability 0, space 0, times 0 [ 235.351486][T12694] CPU: 0 UID: 0 PID: 12694 Comm: syz.9.1588 Not tainted syzkaller #0 PREEMPT(full) [ 235.351520][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.351537][T12694] Call Trace: [ 235.351545][T12694] [ 235.351565][T12694] __dump_stack+0x1d/0x30 [ 235.351635][T12694] dump_stack_lvl+0x95/0xd0 [ 235.351667][T12694] dump_stack+0x15/0x1b [ 235.351696][T12694] should_fail_ex+0x263/0x280 [ 235.351802][T12694] should_failslab+0x8c/0xb0 [ 235.351831][T12694] kmem_cache_alloc_noprof+0x66/0x400 [ 235.351861][T12694] ? prepare_creds+0x38/0x540 [ 235.351887][T12694] prepare_creds+0x38/0x540 [ 235.351964][T12694] __se_sys_capset+0x2da/0x480 [ 235.351993][T12694] __x64_sys_capset+0x31/0x40 [ 235.352067][T12694] x64_sys_call+0x2aac/0x3020 [ 235.352101][T12694] do_syscall_64+0x12c/0x370 [ 235.352138][T12694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.352205][T12694] RIP: 0033:0x7f929b34c819 [ 235.352222][T12694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.352246][T12694] RSP: 002b:00007f9299da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 235.352272][T12694] RAX: ffffffffffffffda RBX: 00007f929b5c5fa0 RCX: 00007f929b34c819 [ 235.352291][T12694] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 235.352309][T12694] RBP: 00007f9299da7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.352326][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.352344][T12694] R13: 00007f929b5c6038 R14: 00007f929b5c5fa0 R15: 00007ffc4c8b96a8 [ 235.352435][T12694] [ 235.578797][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 235.654243][T12716] xt_hashlimit: size too large, truncated to 1048576 [ 235.751790][ T3603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.764357][ T3603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.781638][ T3603] bond0 (unregistering): Released all slaves [ 235.856886][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1592'. [ 235.866169][T12720] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1592'. [ 235.883810][ T3603] hsr_slave_0: left promiscuous mode [ 235.895406][ T3603] hsr_slave_1: left promiscuous mode [ 235.910447][ T3603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.936137][ T3603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.946193][ T3603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.955653][ T3603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.973570][ T3603] veth1_macvtap: left promiscuous mode [ 235.979808][ T3603] veth1_vlan: left promiscuous mode [ 235.985315][ T3603] veth0_vlan: left promiscuous mode [ 236.186827][ T3603] team0 (unregistering): Port device team_slave_1 removed [ 236.202951][ T3603] team0 (unregistering): Port device team_slave_0 removed [ 236.747234][T12700] netlink: 'syz.8.1589': attribute type 25 has an invalid length. [ 236.756531][T12700] netlink: 184 bytes leftover after parsing attributes in process `syz.8.1589'. [ 236.906413][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1594'. [ 237.753841][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1598'. [ 237.762990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.836139][T12754] loop2: detected capacity change from 0 to 1024 [ 237.876089][T12754] EXT4-fs: Ignoring removed bh option [ 237.899847][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1598'. [ 237.936904][ T3603] IPVS: stop unused estimator thread 0... [ 237.956071][T12754] EXT4-fs: Ignoring removed oldalloc option [ 238.007254][T12754] EXT4-fs: Ignoring removed nobh option [ 238.060601][ T108] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.070154][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1598'. [ 238.123668][T12754] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 238.123668][T12754] [ 238.152870][ T108] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.162542][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1598'. [ 238.185195][ T108] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.210891][ T108] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.030475][T12769] loop7: detected capacity change from 0 to 512 [ 239.417943][ T28] kauditd_printk_skb: 259 callbacks suppressed [ 239.417961][ T28] audit: type=1326 audit(1775763153.923:19430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 239.458090][T12842] netlink: 'syz.0.1604': attribute type 25 has an invalid length. [ 239.483236][T12842] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1604'. [ 239.516802][ T28] audit: type=1326 audit(1775763153.963:19431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 239.623009][ T28] audit: type=1326 audit(1775763153.963:19432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 239.717059][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 239.745634][ T28] audit: type=1326 audit(1775763153.963:19433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 239.856744][T12885] xt_hashlimit: size too large, truncated to 1048576 [ 239.915803][ T28] audit: type=1326 audit(1775763153.973:19434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 240.084294][T12921] loop7: detected capacity change from 0 to 512 [ 240.093472][T12921] EXT4-fs: Ignoring removed oldalloc option [ 240.125985][ T28] audit: type=1326 audit(1775763153.973:19435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 240.159697][T12921] EXT4-fs: dax option not supported [ 240.185376][ T28] audit: type=1326 audit(1775763153.973:19436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 240.249483][ T28] audit: type=1326 audit(1775763153.973:19437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 240.314488][ T28] audit: type=1326 audit(1775763153.973:19438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 240.359762][ T28] audit: type=1326 audit(1775763153.983:19439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12845 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 240.983549][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 240.992659][T12983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1618'. [ 241.768549][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.921071][T13013] loop7: detected capacity change from 0 to 512 [ 241.969791][T13015] loop8: detected capacity change from 0 to 1024 [ 242.056602][T13015] EXT4-fs (loop8): blocks per group (1073741824) and clusters per group (8192) inconsistent [ 242.067162][T13013] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 242.336640][T13051] FAULT_INJECTION: forcing a failure. [ 242.336640][T13051] name failslab, interval 1, probability 0, space 0, times 0 [ 242.411123][T13051] CPU: 0 UID: 0 PID: 13051 Comm: syz.9.1623 Not tainted syzkaller #0 PREEMPT(full) [ 242.411157][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 242.411175][T13051] Call Trace: [ 242.411183][T13051] [ 242.411193][T13051] __dump_stack+0x1d/0x30 [ 242.411261][T13051] dump_stack_lvl+0x95/0xd0 [ 242.411288][T13051] dump_stack+0x15/0x1b [ 242.411375][T13051] should_fail_ex+0x263/0x280 [ 242.411407][T13051] should_failslab+0x8c/0xb0 [ 242.411434][T13051] kmem_cache_alloc_noprof+0x66/0x400 [ 242.411529][T13051] ? skb_clone+0x151/0x1f0 [ 242.411554][T13051] skb_clone+0x151/0x1f0 [ 242.411583][T13051] __netlink_deliver_tap+0x2c9/0x500 [ 242.411607][T13051] ? netlink_attachskb+0x2e2/0x660 [ 242.411648][T13051] netlink_sendskb+0x126/0x150 [ 242.411688][T13051] netlink_unicast+0x2a2/0x690 [ 242.411741][T13051] netlink_ack+0x4c8/0x500 [ 242.411776][T13051] netlink_rcv_skb+0x192/0x220 [ 242.411816][T13051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.411871][T13051] genl_rcv+0x28/0x40 [ 242.411944][T13051] netlink_unicast+0x5c0/0x690 [ 242.411984][T13051] netlink_sendmsg+0x5c8/0x6f0 [ 242.412039][T13051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.412062][T13051] ____sys_sendmsg+0x563/0x5b0 [ 242.412092][T13051] ___sys_sendmsg+0x195/0x1e0 [ 242.412131][T13051] __x64_sys_sendmsg+0xd4/0x160 [ 242.412200][T13051] x64_sys_call+0x194c/0x3020 [ 242.412268][T13051] do_syscall_64+0x12c/0x370 [ 242.412304][T13051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.412333][T13051] RIP: 0033:0x7f929b34c819 [ 242.412353][T13051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.412401][T13051] RSP: 002b:00007f9299da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.412424][T13051] RAX: ffffffffffffffda RBX: 00007f929b5c5fa0 RCX: 00007f929b34c819 [ 242.412438][T13051] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.412451][T13051] RBP: 00007f9299da7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.412465][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.412481][T13051] R13: 00007f929b5c6038 R14: 00007f929b5c5fa0 R15: 00007ffc4c8b96a8 [ 242.412538][T13051] [ 242.788450][T13013] EXT4-fs (loop7): 1 truncate cleaned up [ 242.801667][T13013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.946502][T13015] loop8: detected capacity change from 0 to 256 [ 243.013997][T13015] FAT-fs (loop8): codepage cp852 not found [ 243.023812][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 243.088592][T13089] xt_hashlimit: size too large, truncated to 1048576 [ 243.162662][ T9646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.329375][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1630'. [ 243.746758][T13160] FAULT_INJECTION: forcing a failure. [ 243.746758][T13160] name failslab, interval 1, probability 0, space 0, times 0 [ 243.746789][T13160] CPU: 0 UID: 0 PID: 13160 Comm: syz.2.1632 Not tainted syzkaller #0 PREEMPT(full) [ 243.746819][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.746834][T13160] Call Trace: [ 243.746840][T13160] [ 243.746854][T13160] __dump_stack+0x1d/0x30 [ 243.746940][T13160] dump_stack_lvl+0x95/0xd0 [ 243.746964][T13160] dump_stack+0x15/0x1b [ 243.746987][T13160] should_fail_ex+0x263/0x280 [ 243.747020][T13160] should_failslab+0x8c/0xb0 [ 243.747051][T13160] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 243.747095][T13160] ? kstrdup_const+0x3e/0x50 [ 243.747182][T13160] kstrdup+0x3e/0xd0 [ 243.747206][T13160] kstrdup_const+0x3e/0x50 [ 243.747230][T13160] __kernfs_new_node+0x42/0x3c0 [ 243.747263][T13160] ? raw_open+0x5b/0x1d0 [ 243.747304][T13160] kernfs_new_node+0xd0/0x140 [ 243.747356][T13160] kernfs_create_dir_ns+0x44/0xe0 [ 243.747437][T13160] sysfs_create_dir_ns+0xd4/0x1d0 [ 243.747465][T13160] kobject_add_internal+0x47a/0x780 [ 243.747548][T13160] kobject_init_and_add+0x14a/0x1f0 [ 243.747653][T13160] ? bus_add_driver+0x11f/0x450 [ 243.747716][T13160] bus_add_driver+0x1a7/0x450 [ 243.747753][T13160] driver_register+0x162/0x220 [ 243.747839][T13160] usb_gadget_register_driver_owner+0x92/0x1a0 [ 243.747890][T13160] raw_ioctl+0xc6c/0x1e10 [ 243.747930][T13160] ? ioctl_has_perm+0x27e/0x2d0 [ 243.748027][T13160] ? do_vfs_ioctl+0x84f/0xe70 [ 243.748052][T13160] ? selinux_file_ioctl+0x5f7/0xcb0 [ 243.748086][T13160] ? __rcu_read_unlock+0x4e/0x70 [ 243.748191][T13160] ? __fget_files+0x184/0x1c0 [ 243.748254][T13160] ? __pfx_raw_ioctl+0x10/0x10 [ 243.748292][T13160] __se_sys_ioctl+0xce/0x140 [ 243.748313][T13160] __x64_sys_ioctl+0x43/0x50 [ 243.748331][T13160] x64_sys_call+0x1563/0x3020 [ 243.748371][T13160] do_syscall_64+0x12c/0x370 [ 243.748408][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.748487][T13160] RIP: 0033:0x7f2e6bc0c4ab [ 243.748505][T13160] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 243.748525][T13160] RSP: 002b:00007f2e6a664f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.748554][T13160] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f2e6bc0c4ab [ 243.748572][T13160] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000009 [ 243.748619][T13160] RBP: 00007f2e6a665fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 243.748637][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.748654][T13160] R13: 00002000000012c0 R14: 0000000000000000 R15: 0000000000000000 [ 243.748715][T13160] [ 243.756682][T13160] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 243.756800][T13160] UDC core: USB Raw Gadget: driver registration failed: -12 [ 243.756949][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 244.100606][T13165] netlink: 'syz.7.1634': attribute type 25 has an invalid length. [ 244.100629][T13165] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1634'. [ 244.353662][T13175] netlink: 'syz.9.1638': attribute type 5 has an invalid length. [ 244.368693][T13173] loop2: detected capacity change from 0 to 512 [ 244.434490][T13173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.460591][T13173] EXT4-fs (loop2): 1 truncate cleaned up [ 244.475417][T13173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.511926][ T28] kauditd_printk_skb: 457 callbacks suppressed [ 244.511944][ T28] audit: type=1400 audit(1775763159.023:19897): avc: denied { create } for pid=13172 comm="syz.2.1637" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 244.543726][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1637'. [ 244.566854][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 244.612350][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.643754][T13190] xt_hashlimit: size too large, truncated to 1048576 [ 244.678143][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1654'. [ 244.721486][T13202] FAULT_INJECTION: forcing a failure. [ 244.721486][T13202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.763074][T13202] CPU: 1 UID: 0 PID: 13202 Comm: syz.2.1654 Not tainted syzkaller #0 PREEMPT(full) [ 244.763114][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.763137][T13202] Call Trace: [ 244.763161][T13202] [ 244.763170][T13202] __dump_stack+0x1d/0x30 [ 244.763199][T13202] dump_stack_lvl+0x95/0xd0 [ 244.763224][T13202] dump_stack+0x15/0x1b [ 244.763287][T13202] should_fail_ex+0x263/0x280 [ 244.763317][T13202] should_fail+0xb/0x20 [ 244.763344][T13202] should_fail_usercopy+0x1a/0x20 [ 244.763457][T13202] _copy_from_iter+0xcf/0xea0 [ 244.763491][T13202] ? _copy_from_iter+0x13e/0xea0 [ 244.763526][T13202] copy_page_from_iter+0x178/0x2a0 [ 244.763589][T13202] skb_copy_datagram_from_iter+0x22d/0x480 [ 244.763617][T13202] tun_get_user+0x90b/0x27c0 [ 244.763654][T13202] ? ref_tracker_alloc+0x1eb/0x2f0 [ 244.763694][T13202] tun_chr_write_iter+0x15e/0x210 [ 244.763841][T13202] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 244.763870][T13202] vfs_write+0x5a6/0x9f0 [ 244.763944][T13202] ksys_write+0xdc/0x1a0 [ 244.763966][T13202] __x64_sys_write+0x40/0x50 [ 244.763987][T13202] x64_sys_call+0x27e1/0x3020 [ 244.764050][T13202] do_syscall_64+0x12c/0x370 [ 244.764102][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.764131][T13202] RIP: 0033:0x7f2e6bc0c819 [ 244.764149][T13202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.764169][T13202] RSP: 002b:00007f2e6a667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.764191][T13202] RAX: ffffffffffffffda RBX: 00007f2e6be85fa0 RCX: 00007f2e6bc0c819 [ 244.764213][T13202] RDX: 000000000000ffc0 RSI: 0000200000000000 RDI: 00000000000000c8 [ 244.764227][T13202] RBP: 00007f2e6a667090 R08: 0000000000000000 R09: 0000000000000000 [ 244.764303][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.764317][T13202] R13: 00007f2e6be86038 R14: 00007f2e6be85fa0 R15: 00007fff1aedf6b8 [ 244.764338][T13202] [ 245.176556][T13216] netlink: 'syz.2.1645': attribute type 25 has an invalid length. [ 245.209138][T13216] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1645'. [ 245.303379][ T28] audit: type=1326 audit(1775763159.813:19898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13215 comm="syz.2.1645" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e6bc0c819 code=0x0 [ 245.434017][ T28] audit: type=1326 audit(1775763159.913:19899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.528384][ T28] audit: type=1326 audit(1775763159.913:19900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.574083][T13271] loop8: detected capacity change from 0 to 128 [ 245.598397][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.617143][ T28] audit: type=1326 audit(1775763159.913:19901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.710019][ T28] audit: type=1326 audit(1775763159.913:19902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.755719][ T28] audit: type=1326 audit(1775763159.913:19903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.790070][ T28] audit: type=1326 audit(1775763159.913:19904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.815354][ T28] audit: type=1326 audit(1775763159.913:19905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.859261][ T28] audit: type=1326 audit(1775763159.913:19906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2b57c819 code=0x7ffc0000 [ 245.911185][T13285] netlink: 'syz.8.1652': attribute type 4 has an invalid length. [ 245.962547][T13291] netlink: 'syz.8.1652': attribute type 4 has an invalid length. [ 245.999271][T13288] FAULT_INJECTION: forcing a failure. [ 245.999271][T13288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.023621][T13288] CPU: 1 UID: 0 PID: 13288 Comm: syz.7.1653 Not tainted syzkaller #0 PREEMPT(full) [ 246.023653][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 246.023669][T13288] Call Trace: [ 246.023676][T13288] [ 246.023685][T13288] __dump_stack+0x1d/0x30 [ 246.023723][T13288] dump_stack_lvl+0x95/0xd0 [ 246.023806][T13288] dump_stack+0x15/0x1b [ 246.023835][T13288] should_fail_ex+0x263/0x280 [ 246.023904][T13288] should_fail+0xb/0x20 [ 246.023956][T13288] should_fail_usercopy+0x1a/0x20 [ 246.023994][T13288] _copy_from_user+0x1c/0xb0 [ 246.024083][T13288] update_filter+0x4b/0x660 [ 246.024115][T13288] __tun_chr_ioctl+0xe83/0x14d0 [ 246.024160][T13288] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 246.024195][T13288] tun_chr_ioctl+0x27/0x40 [ 246.024303][T13288] __se_sys_ioctl+0xce/0x140 [ 246.024327][T13288] __x64_sys_ioctl+0x43/0x50 [ 246.024346][T13288] x64_sys_call+0x1563/0x3020 [ 246.024436][T13288] do_syscall_64+0x12c/0x370 [ 246.024553][T13288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.024706][T13288] RIP: 0033:0x7f734864c819 [ 246.024728][T13288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.024746][T13288] RSP: 002b:00007f73470a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.024802][T13288] RAX: ffffffffffffffda RBX: 00007f73488c5fa0 RCX: 00007f734864c819 [ 246.024821][T13288] RDX: 00002000000000c0 RSI: 00000000400454d1 RDI: 0000000000000005 [ 246.024838][T13288] RBP: 00007f73470a7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.024851][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.024867][T13288] R13: 00007f73488c6038 R14: 00007f73488c5fa0 R15: 00007fff30cb1118 [ 246.024893][T13288] [ 246.182042][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1652'. [ 246.245576][T13291] loop8: detected capacity change from 0 to 1024 [ 246.329012][T13291] loop8: detected capacity change from 0 to 512 [ 246.362957][T13291] ext4: Unknown parameter 'debug_want_extra_isizext4' [ 246.416555][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1657'. [ 246.473811][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 246.506143][T13333] xt_hashlimit: size too large, truncated to 1048576 [ 246.533762][T13335] xt_hashlimit: size too large, truncated to 1048576 [ 246.626811][T13340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1050 sclass=netlink_route_socket pid=13340 comm=syz.7.1659 [ 246.782590][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1662'. [ 246.900247][T13359] loop7: detected capacity change from 0 to 2048 [ 246.960258][T13359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.109171][ T9646] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.185397][T13378] netlink: 'syz.9.1667': attribute type 25 has an invalid length. [ 247.218695][T13378] netlink: 184 bytes leftover after parsing attributes in process `syz.9.1667'. [ 247.541880][T13433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13433 comm=syz.0.1670 [ 247.611761][T13433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=13433 comm=syz.0.1670 [ 247.682359][T13439] FAULT_INJECTION: forcing a failure. [ 247.682359][T13439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.742488][T13439] CPU: 0 UID: 0 PID: 13439 Comm: syz.8.1672 Not tainted syzkaller #0 PREEMPT(full) [ 247.742577][T13439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.742592][T13439] Call Trace: [ 247.742650][T13439] [ 247.742657][T13439] __dump_stack+0x1d/0x30 [ 247.742687][T13439] dump_stack_lvl+0x95/0xd0 [ 247.742712][T13439] dump_stack+0x15/0x1b [ 247.742800][T13439] should_fail_ex+0x263/0x280 [ 247.742832][T13439] should_fail+0xb/0x20 [ 247.742858][T13439] should_fail_usercopy+0x1a/0x20 [ 247.742890][T13439] _copy_from_user+0x1c/0xb0 [ 247.742988][T13439] ___sys_sendmsg+0xc1/0x1e0 [ 247.743022][T13439] __x64_sys_sendmsg+0xd4/0x160 [ 247.743046][T13439] x64_sys_call+0x194c/0x3020 [ 247.743124][T13439] do_syscall_64+0x12c/0x370 [ 247.743155][T13439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.743178][T13439] RIP: 0033:0x7fd1391fc819 [ 247.743195][T13439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.743215][T13439] RSP: 002b:00007fd137c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.743278][T13439] RAX: ffffffffffffffda RBX: 00007fd139475fa0 RCX: 00007fd1391fc819 [ 247.743294][T13439] RDX: 0000000000048000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 247.743308][T13439] RBP: 00007fd137c57090 R08: 0000000000000000 R09: 0000000000000000 [ 247.743322][T13439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.743336][T13439] R13: 00007fd139476038 R14: 00007fd139475fa0 R15: 00007fff5ab673d8 [ 247.743413][T13439] [ 248.013998][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1676'. [ 248.073846][T13452] xt_hashlimit: size too large, truncated to 1048576 [ 248.154716][T13468] loop7: detected capacity change from 0 to 256 [ 248.179198][T13456] 9p: Bad value for 'wfdno' [ 248.252863][T13468] FAT-fs (loop7): Directory bread(block 64) failed [ 248.260469][T13468] FAT-fs (loop7): Directory bread(block 65) failed [ 248.267061][T13468] FAT-fs (loop7): Directory bread(block 66) failed [ 248.298238][T13460] FAULT_INJECTION: forcing a failure. [ 248.298238][T13460] name failslab, interval 1, probability 0, space 0, times 0 [ 248.328981][T13468] FAT-fs (loop7): Directory bread(block 67) failed [ 248.335864][T13460] CPU: 1 UID: 0 PID: 13460 Comm: syz.9.1677 Not tainted syzkaller #0 PREEMPT(full) [ 248.335898][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.335913][T13460] Call Trace: [ 248.335922][T13460] [ 248.335932][T13460] __dump_stack+0x1d/0x30 [ 248.335965][T13460] dump_stack_lvl+0x95/0xd0 [ 248.336075][T13460] dump_stack+0x15/0x1b [ 248.336106][T13460] should_fail_ex+0x263/0x280 [ 248.336144][T13460] should_failslab+0x8c/0xb0 [ 248.336201][T13460] __kvmalloc_node_noprof+0x155/0x650 [ 248.336237][T13460] ? io_alloc_cache_init+0x36/0xb0 [ 248.336303][T13460] io_alloc_cache_init+0x36/0xb0 [ 248.336335][T13460] io_futex_cache_init+0x28/0x30 [ 248.336365][T13460] io_ring_ctx_alloc+0x311/0x670 [ 248.336399][T13460] io_uring_create+0x50/0x510 [ 248.336509][T13460] ? memchr_inv+0x30/0x2f0 [ 248.336548][T13460] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 248.336592][T13460] __x64_sys_io_uring_setup+0x31/0x40 [ 248.336624][T13460] x64_sys_call+0x2962/0x3020 [ 248.336655][T13460] do_syscall_64+0x12c/0x370 [ 248.336691][T13460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.336856][T13460] RIP: 0033:0x7f929b34c819 [ 248.336877][T13460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.336947][T13460] RSP: 002b:00007f9299da7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 248.336973][T13460] RAX: ffffffffffffffda RBX: 00007f929b5c5fa0 RCX: 00007f929b34c819 [ 248.336992][T13460] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000004fee [ 248.337010][T13460] RBP: 00007f9299da7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.337028][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.337042][T13460] R13: 00007f929b5c6038 R14: 00007f929b5c5fa0 R15: 00007ffc4c8b96a8 [ 248.337135][T13460] [ 248.525205][T13468] FAT-fs (loop7): Directory bread(block 68) failed [ 248.531959][T13468] FAT-fs (loop7): Directory bread(block 69) failed [ 248.539324][T13468] FAT-fs (loop7): Directory bread(block 70) failed [ 248.546102][T13468] FAT-fs (loop7): Directory bread(block 71) failed [ 248.557214][T13468] FAT-fs (loop7): Directory bread(block 72) failed [ 248.564678][T13468] FAT-fs (loop7): Directory bread(block 73) failed [ 248.788774][T13491] loop9: detected capacity change from 0 to 128 [ 248.802586][T13489] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 248.827129][T13491] vfat: Unknown parameter '' [ 249.332857][T13505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.389287][T13547] netlink: 'syz.2.1687': attribute type 25 has an invalid length. [ 249.595792][ T3423] IPVS: starting estimator thread 0... [ 249.618587][T13570] __nla_validate_parse: 4 callbacks suppressed [ 249.618606][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 249.675764][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 249.708481][T13571] IPVS: using max 2256 ests per chain, 112800 per kthread [ 249.934813][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 249.946501][ T28] kauditd_printk_skb: 437 callbacks suppressed [ 249.946524][ T28] audit: type=1326 audit(1775763164.453:20344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.033570][T13587] xt_hashlimit: size too large, truncated to 1048576 [ 250.060051][ T28] audit: type=1326 audit(1775763164.453:20345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.225403][ T28] audit: type=1326 audit(1775763164.493:20346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.313454][ T28] audit: type=1326 audit(1775763164.493:20347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.385986][ T28] audit: type=1326 audit(1775763164.503:20348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.469220][ T28] audit: type=1326 audit(1775763164.503:20349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.549041][ T28] audit: type=1326 audit(1775763164.503:20350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.629155][ T28] audit: type=1326 audit(1775763164.503:20351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.702774][T13629] loop9: detected capacity change from 0 to 8192 [ 250.710079][ T28] audit: type=1326 audit(1775763164.503:20352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.755691][T13629] bio_check_eod: 22 callbacks suppressed [ 250.755708][T13629] syz.9.1696: attempt to access beyond end of device [ 250.755708][T13629] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 250.799658][ T28] audit: type=1326 audit(1775763164.503:20353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.7.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f734864c819 code=0x7ffc0000 [ 250.837724][T13629] Buffer I/O error on dev loop9, logical block 57847, async page read [ 250.885019][T13629] syz.9.1696: attempt to access beyond end of device [ 250.885019][T13629] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 250.889254][T13635] netlink: 'syz.0.1698': attribute type 25 has an invalid length. [ 250.919475][T13629] Buffer I/O error on dev loop9, logical block 57847, async page read [ 250.943147][T13635] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1698'. [ 250.970115][T13632] syz.9.1696: attempt to access beyond end of device [ 250.970115][T13632] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 251.013903][T13632] Buffer I/O error on dev loop9, logical block 57847, async page read [ 251.067169][T13629] syz.9.1696: attempt to access beyond end of device [ 251.067169][T13629] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 251.085553][T13647] gre0 speed is unknown, defaulting to 1000 [ 251.098956][T13647] gre0 speed is unknown, defaulting to 1000 [ 251.105511][T13647] gre0 speed is unknown, defaulting to 1000 [ 251.205383][T13649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.205873][T13629] Buffer I/O error on dev loop9, logical block 57847, async page read [ 251.241926][T13649] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.267255][T13629] syz.9.1696: attempt to access beyond end of device [ 251.267255][T13629] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 251.296878][T13647] infiniband syz1: set active [ 251.304748][T13649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.331353][T13647] infiniband syz1: added gre0 [ 251.362827][T13659] FAULT_INJECTION: forcing a failure. [ 251.362827][T13659] name failslab, interval 1, probability 0, space 0, times 0 [ 251.376159][ T9548] gre0 speed is unknown, defaulting to 1000 [ 251.386145][ T9548] syz1: Port: 1 Link ACTIVE [ 251.396903][T13647] RDS/IB: syz1: added [ 251.401382][T13647] smc: adding ib device syz1 with port count 1 [ 251.408728][T13647] smc: ib device syz1 port 1 has no pnetid [ 251.416748][T13656] vlan3: entered promiscuous mode [ 251.422719][T13629] Buffer I/O error on dev loop9, logical block 57847, async page read [ 251.424406][T13659] CPU: 0 UID: 0 PID: 13659 Comm: syz.7.1702 Not tainted syzkaller #0 PREEMPT(full) [ 251.424593][T13659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.424639][T13659] Call Trace: [ 251.424662][T13659] [ 251.424686][T13659] __dump_stack+0x1d/0x30 [ 251.424784][T13659] dump_stack_lvl+0x95/0xd0 [ 251.424883][T13659] dump_stack+0x15/0x1b [ 251.425027][T13659] should_fail_ex+0x263/0x280 [ 251.425124][T13659] ? shrinker_alloc+0x3b/0x650 [ 251.425278][T13659] should_failslab+0x8c/0xb0 [ 251.425404][T13659] __kmalloc_cache_noprof+0x5f/0x410 [ 251.425495][T13659] shrinker_alloc+0x3b/0x650 [ 251.425616][T13659] ? alloc_super+0x3d1/0x580 [ 251.425815][T13659] alloc_super+0x41a/0x580 [ 251.425932][T13659] sget_fc+0x24e/0x6e0 [ 251.426023][T13659] ? __pfx_set_anon_super_fc+0x10/0x10 [ 251.426185][T13659] ? __pfx_devpts_fill_super+0x10/0x10 [ 251.426272][T13659] get_tree_nodev+0x2a/0x100 [ 251.426405][T13659] devpts_get_tree+0x1c/0x30 [ 251.426490][T13659] vfs_get_tree+0x57/0x1d0 [ 251.426548][T13659] vfs_cmd_create+0x8a/0x140 [ 251.426725][T13659] vfs_fsconfig_locked+0x6f/0x210 [ 251.426825][T13659] __se_sys_fsconfig+0x684/0x7d0 [ 251.427008][T13659] __x64_sys_fsconfig+0x67/0x80 [ 251.427176][T13659] x64_sys_call+0xd6e/0x3020 [ 251.427283][T13659] do_syscall_64+0x12c/0x370 [ 251.427376][T13659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.427454][T13659] RIP: 0033:0x7f734864c819 [ 251.427503][T13659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.427601][T13659] RSP: 002b:00007f73470a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 251.427670][T13659] RAX: ffffffffffffffda RBX: 00007f73488c5fa0 RCX: 00007f734864c819 [ 251.427718][T13659] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 251.427762][T13659] RBP: 00007f73470a7090 R08: 0000000000000000 R09: 0000000000000000 [ 251.427884][T13659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.427929][T13659] R13: 00007f73488c6038 R14: 00007f73488c5fa0 R15: 00007fff30cb1118 [ 251.428006][T13659] [ 251.608542][T13656] bridge0: entered promiscuous mode [ 251.721670][T13643] syz.9.1696: attempt to access beyond end of device [ 251.721670][T13643] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 251.759075][T13643] Buffer I/O error on dev loop9, logical block 57847, async page read [ 251.767693][T13643] syz.9.1696: attempt to access beyond end of device [ 251.767693][T13643] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 251.786876][T13647] gre0 speed is unknown, defaulting to 1000 [ 251.796587][T13665] loop7: detected capacity change from 0 to 8192 [ 251.796737][T13643] Buffer I/O error on dev loop9, logical block 57847, async page read [ 251.813106][T13638] syz.9.1696: attempt to access beyond end of device [ 251.813106][T13638] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 251.830522][T13638] Buffer I/O error on dev loop9, logical block 57847, async page read [ 251.839201][T13638] syz.9.1696: attempt to access beyond end of device [ 251.839201][T13638] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 251.854650][ T9548] gre0 speed is unknown, defaulting to 1000 [ 251.869512][ T3302] loop7: p3 p4[EZD] [ 251.873743][ T3302] loop7: p3 start 331781 is beyond EOD, truncated [ 251.879728][T13638] Buffer I/O error on dev loop9, logical block 57847, async page read [ 251.908395][ T3302] loop7: p4 size 197376 extends beyond EOD, truncated [ 251.934796][T13647] gre0 speed is unknown, defaulting to 1000 [ 251.947574][T13665] loop7: p3 p4[EZD] [ 251.952691][T13665] loop7: p3 start 331781 is beyond EOD, truncated [ 251.962741][T13665] loop7: p4 size 197376 extends beyond EOD, truncated [ 252.076507][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'. [ 252.112328][T13671] xt_hashlimit: size too large, truncated to 1048576 [ 252.146859][T13647] gre0 speed is unknown, defaulting to 1000 [ 252.207277][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1707'. [ 252.314853][T13647] gre0 speed is unknown, defaulting to 1000 [ 252.345502][T13665] loop7: detected capacity change from 0 to 8192 [ 252.410927][T13647] gre0 speed is unknown, defaulting to 1000 [ 252.417361][ T3302] loop7: p3 p4[EZD] [ 252.428018][ T3302] loop7: p3 start 331781 is beyond EOD, truncated [ 252.440223][ T3302] loop7: p4 size 197376 extends beyond EOD, truncated [ 252.458438][T13676] xt_hashlimit: size too large, truncated to 1048576 [ 252.489155][T13665] loop7: p3 p4[EZD] [ 252.493701][T13665] loop7: p3 start 331781 is beyond EOD, truncated [ 252.507374][T13665] loop7: p4 size 197376 extends beyond EOD, truncated [ 252.657179][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 252.713470][T13705] netlink: 'syz.2.1710': attribute type 25 has an invalid length. [ 252.735018][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 252.740298][T13705] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1710'. [ 252.833658][T13715] netlink: 'syz.7.1712': attribute type 4 has an invalid length. [ 252.873133][T13715] netlink: 'syz.7.1712': attribute type 4 has an invalid length. [ 253.138915][T13759] IPVS: Error connecting to the multicast addr [ 253.197088][T13758] loop8: detected capacity change from 0 to 512 [ 253.229729][T13758] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.280464][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.302218][T13758] EXT4-fs: Mount option(s) incompatible with ext3 [ 253.356922][T13758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13758 comm=syz.8.1715 [ 253.383861][T13767] FAULT_INJECTION: forcing a failure. [ 253.383861][T13767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.397369][T13767] CPU: 0 UID: 0 PID: 13767 Comm: syz.9.1719 Not tainted syzkaller #0 PREEMPT(full) [ 253.397397][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 253.397411][T13767] Call Trace: [ 253.397419][T13767] [ 253.397428][T13767] __dump_stack+0x1d/0x30 [ 253.397464][T13767] dump_stack_lvl+0x95/0xd0 [ 253.397558][T13767] dump_stack+0x15/0x1b [ 253.397640][T13767] should_fail_ex+0x263/0x280 [ 253.397669][T13767] should_fail_alloc_page+0xf2/0x100 [ 253.397765][T13767] __alloc_frozen_pages_noprof+0x108/0x360 [ 253.397871][T13767] alloc_pages_mpol+0xb3/0x260 [ 253.397905][T13767] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 253.397944][T13767] handle_mm_fault+0x1129/0x3020 [ 253.397997][T13767] ? mt_find+0x291/0x3d0 [ 253.398103][T13767] do_user_addr_fault+0x3fd/0x1050 [ 253.398152][T13767] exc_page_fault+0x62/0xa0 [ 253.398178][T13767] asm_exc_page_fault+0x26/0x30 [ 253.398318][T13767] RIP: 0010:rep_stos_alternative+0x57/0x80 [ 253.398358][T13767] Code: 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 83 c7 40 48 83 e9 40 48 83 f9 40 73 d3 [ 253.398383][T13767] RSP: 0018:ffffc90002befeb8 EFLAGS: 00050206 [ 253.398404][T13767] RAX: 0000000000000000 RBX: 0000200000002550 RCX: 0000000000004170 [ 253.398422][T13767] RDX: 0000000000000000 RSI: 0000200000002550 RDI: 000020000000dfd0 [ 253.398490][T13767] RBP: 00007ffffffff001 R08: 00000000000000b9 R09: 0000000000000000 [ 253.398522][T13767] R10: 00018881501cb000 R11: 00018881501cb40f R12: 0000200000012140 [ 253.398592][T13767] R13: 000000000000fbf0 R14: ffff888104dddd18 R15: 0000000000010000 [ 253.398618][T13767] __se_sys_modify_ldt+0x1f3/0x260 [ 253.398653][T13767] x64_sys_call+0x2f50/0x3020 [ 253.398689][T13767] do_syscall_64+0x12c/0x370 [ 253.398753][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.398830][T13767] RIP: 0033:0x7f929b34c819 [ 253.398855][T13767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.398879][T13767] RSP: 002b:00007f9299da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 253.398905][T13767] RAX: ffffffffffffffda RBX: 00007f929b5c5fa0 RCX: 00007f929b34c819 [ 253.398976][T13767] RDX: fffffffffffffe8e RSI: 0000200000002140 RDI: 0000000000000000 [ 253.398995][T13767] RBP: 00007f9299da7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.399012][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.399097][T13767] R13: 00007f929b5c6038 R14: 00007f929b5c5fa0 R15: 00007ffc4c8b96a8 [ 253.399178][T13767] [ 253.843301][T13796] loop9: detected capacity change from 0 to 512 [ 253.853584][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1725'. [ 253.867359][T13796] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.895541][T13795] xt_hashlimit: size too large, truncated to 1048576 [ 253.908871][T13796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.943136][T13796] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.987954][T13796] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.027517][T13811] FAULT_INJECTION: forcing a failure. [ 254.027517][T13811] name failslab, interval 1, probability 0, space 0, times 0 [ 254.053948][T13796] lo: entered allmulticast mode [ 254.069371][T13811] CPU: 0 UID: 0 PID: 13811 Comm: syz.8.1727 Not tainted syzkaller #0 PREEMPT(full) [ 254.069412][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 254.069430][T13811] Call Trace: [ 254.069439][T13811] [ 254.069450][T13811] __dump_stack+0x1d/0x30 [ 254.069536][T13811] dump_stack_lvl+0x95/0xd0 [ 254.069570][T13811] dump_stack+0x15/0x1b [ 254.069601][T13811] should_fail_ex+0x263/0x280 [ 254.069657][T13811] should_failslab+0x8c/0xb0 [ 254.069695][T13811] kmem_cache_alloc_noprof+0x66/0x400 [ 254.069727][T13811] ? skb_clone+0x151/0x1f0 [ 254.069754][T13811] skb_clone+0x151/0x1f0 [ 254.069852][T13811] nfnetlink_rcv+0x316/0x1720 [ 254.069894][T13811] ? nlmon_xmit+0x4f/0x60 [ 254.069925][T13811] ? consume_skb+0x4b/0x160 [ 254.069965][T13811] ? nlmon_xmit+0x4f/0x60 [ 254.070025][T13811] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 254.070078][T13811] ? __dev_queue_xmit+0x136c/0x1f20 [ 254.070123][T13811] ? __dev_queue_xmit+0x148/0x1f20 [ 254.070206][T13811] ? ref_tracker_free+0x37d/0x3e0 [ 254.070319][T13811] netlink_unicast+0x5c0/0x690 [ 254.070364][T13811] netlink_sendmsg+0x5c8/0x6f0 [ 254.070396][T13811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.070508][T13811] ____sys_sendmsg+0x563/0x5b0 [ 254.070539][T13811] ___sys_sendmsg+0x195/0x1e0 [ 254.070623][T13811] __x64_sys_sendmsg+0xd4/0x160 [ 254.070656][T13811] x64_sys_call+0x194c/0x3020 [ 254.070705][T13811] do_syscall_64+0x12c/0x370 [ 254.070761][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.070791][T13811] RIP: 0033:0x7fd1391fc819 [ 254.070813][T13811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.070847][T13811] RSP: 002b:00007fd137c57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.070875][T13811] RAX: ffffffffffffffda RBX: 00007fd139475fa0 RCX: 00007fd1391fc819 [ 254.070895][T13811] RDX: 0000000000008040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 254.070914][T13811] RBP: 00007fd137c57090 R08: 0000000000000000 R09: 0000000000000000 [ 254.070932][T13811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.070950][T13811] R13: 00007fd139476038 R14: 00007fd139475fa0 R15: 00007fff5ab673d8 [ 254.071039][T13811] [ 254.088281][T13796] tunl0: entered allmulticast mode [ 254.227940][T13816] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1728'. [ 254.457389][T13796] gre0: entered allmulticast mode [ 254.502128][T13796] gretap0: entered allmulticast mode [ 254.549199][T13796] erspan0: entered allmulticast mode [ 254.558492][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.586039][T13796] ip_vti0: entered allmulticast mode [ 254.596992][T13796] ip6_vti0: entered allmulticast mode [ 254.620969][T13796] sit0: entered allmulticast mode [ 254.660155][T13796] ip6tnl0: entered allmulticast mode [ 254.684996][T13796] ip6gre0: entered allmulticast mode [ 254.721212][T13796] syz_tun: entered allmulticast mode [ 254.750882][T13796] ip6gretap0: entered allmulticast mode [ 254.769019][T13796] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.776435][T13796] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.834233][T13796] bridge0: entered allmulticast mode [ 254.888111][T13796] vcan0: entered allmulticast mode [ 254.930127][T13796] bond0: entered allmulticast mode [ 254.944627][T13796] bond_slave_0: entered allmulticast mode [ 254.951111][T13796] bond_slave_1: entered allmulticast mode [ 254.961364][T13796] team0: entered allmulticast mode [ 254.966599][T13796] team_slave_0: entered allmulticast mode [ 254.973753][T13796] team_slave_1: entered allmulticast mode [ 254.995246][T13796] dummy0: entered allmulticast mode [ 255.003267][T13796] nlmon0: entered allmulticast mode [ 255.010264][T13796] caif0: entered allmulticast mode [ 255.015924][T13796] batadv0: entered allmulticast mode [ 255.023803][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 255.037569][T13796] vxcan0: entered allmulticast mode [ 255.043047][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 255.043067][T13881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1731'. [ 255.071388][T13796] vxcan1: entered allmulticast mode [ 255.077706][T13796] veth0: entered allmulticast mode [ 255.085020][T13796] veth1: entered allmulticast mode [ 255.102790][T13796] wg0: entered allmulticast mode [ 255.116323][T13796] wg1: entered allmulticast mode [ 255.123383][T13796] wg2: entered allmulticast mode [ 255.130419][T13796] veth0_to_bridge: entered allmulticast mode [ 255.144405][T13796] veth1_to_bridge: entered allmulticast mode [ 255.153953][T13796] veth0_to_bond: entered allmulticast mode [ 255.162900][T13796] veth1_to_bond: entered allmulticast mode [ 255.172640][T13796] veth0_to_team: entered allmulticast mode [ 255.181752][T13796] veth1_to_team: entered allmulticast mode [ 255.193110][T13796] veth0_to_batadv: entered allmulticast mode [ 255.205392][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.213382][T13796] batadv_slave_0: entered allmulticast mode [ 255.222487][T13796] veth1_to_batadv: entered allmulticast mode [ 255.230921][T13796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.239205][T13796] batadv_slave_1: entered allmulticast mode [ 255.246757][T13796] xfrm0: entered allmulticast mode [ 255.253658][T13796] veth0_to_hsr: entered allmulticast mode [ 255.261323][T13796] hsr_slave_0: entered allmulticast mode [ 255.268182][T13796] veth1_to_hsr: entered allmulticast mode [ 255.277104][T13796] hsr_slave_1: entered allmulticast mode [ 255.286125][T13796] hsr0: entered allmulticast mode [ 255.293335][T13796] veth1_virt_wifi: entered allmulticast mode [ 255.301656][T13796] veth0_virt_wifi: entered allmulticast mode [ 255.311998][T13796] veth1_vlan: entered allmulticast mode [ 255.319722][T13796] veth0_vlan: entered allmulticast mode [ 255.331861][T13796] vlan0: entered allmulticast mode [ 255.337319][T13796] vlan1: entered allmulticast mode [ 255.343907][T13796] macvlan0: entered allmulticast mode [ 255.351873][T13796] macvlan1: entered allmulticast mode [ 255.359383][T13796] ipvlan0: entered allmulticast mode [ 255.364844][T13796] ipvlan1: entered allmulticast mode [ 255.371137][T13796] veth1_macvtap: entered allmulticast mode [ 255.378858][T13796] veth0_macvtap: entered allmulticast mode [ 255.386394][T13796] macvtap0: entered allmulticast mode [ 255.393482][T13796] macsec0: entered allmulticast mode [ 255.402245][T13796] geneve0: entered allmulticast mode [ 255.409414][T13796] geneve1: entered allmulticast mode [ 255.416199][T13796] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 255.427855][T13796] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 255.437736][T13796] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 255.448706][T13796] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 255.457397][T13796] ip6gre1: left promiscuous mode [ 255.464366][T13796] ÿ: entered allmulticast mode [ 255.469943][T13796] vxlan0: entered allmulticast mode [ 255.476113][T13796] ip6erspan0: entered allmulticast mode [ 255.483503][T13796] wireguard0: entered allmulticast mode [ 255.511419][T13882] bridge1: entered promiscuous mode [ 255.516806][T13882] bridge1: entered allmulticast mode [ 255.534678][T12312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.645758][T13884] netlink: 'syz.0.1732': attribute type 25 has an invalid length. [ 255.679781][T13884] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1732'. [ 255.709850][ T3583] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.733549][ T3583] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.752387][ T3583] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.780660][ T3583] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.827784][ T3583] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.871916][ T3583] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.893190][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1733'. [ 255.917553][T13916] FAULT_INJECTION: forcing a failure. [ 255.917553][T13916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.944854][ T3583] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.950866][T13916] CPU: 1 UID: 0 PID: 13916 Comm: syz.9.1733 Not tainted syzkaller #0 PREEMPT(full) [ 255.951012][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 255.951028][T13916] Call Trace: [ 255.951035][T13916] [ 255.951043][T13916] __dump_stack+0x1d/0x30 [ 255.951219][T13916] dump_stack_lvl+0x95/0xd0 [ 255.951352][T13916] dump_stack+0x15/0x1b [ 255.951429][T13916] should_fail_ex+0x263/0x280 [ 255.951532][T13916] should_fail+0xb/0x20 [ 255.951657][T13916] should_fail_usercopy+0x1a/0x20 [ 255.951757][T13916] _copy_to_user+0x20/0xa0 [ 255.951932][T13916] simple_read_from_buffer+0xb5/0x130 [ 255.952012][T13916] proc_fail_nth_read+0x10e/0x150 [ 255.952185][T13916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.952329][T13916] vfs_read+0x1ab/0x7f0 [ 255.952396][T13916] ? __rcu_read_unlock+0x4e/0x70 [ 255.952465][T13916] ? __fget_files+0x184/0x1c0 [ 255.952554][T13916] ? fdget_pos+0x26/0x1d0 [ 255.952710][T13916] ? mutex_lock+0x57/0x90 [ 255.952793][T13916] ksys_read+0xdc/0x1a0 [ 255.952894][T13916] __x64_sys_read+0x40/0x50 [ 255.952913][T13916] x64_sys_call+0x2886/0x3020 [ 255.952965][T13916] do_syscall_64+0x12c/0x370 [ 255.953059][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.953126][T13916] RIP: 0033:0x7f929b30d04e [ 255.953183][T13916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.953252][T13916] RSP: 002b:00007f9299da6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.953342][T13916] RAX: ffffffffffffffda RBX: 00007f9299da76c0 RCX: 00007f929b30d04e [ 255.953396][T13916] RDX: 000000000000000f RSI: 00007f9299da70a0 RDI: 0000000000000006 [ 255.953486][T13916] RBP: 00007f9299da7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.953531][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.953614][T13916] R13: 00007f929b5c6038 R14: 00007f929b5c5fa0 R15: 00007ffc4c8b96a8 [ 255.953681][T13916] [ 256.173052][ T3583] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.186072][ T28] kauditd_printk_skb: 770 callbacks suppressed [ 256.186093][ T28] audit: type=1400 audit(1775763170.693:21124): avc: denied { create } for pid=13932 comm="syz.9.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.302170][ T28] audit: type=1400 audit(1775763170.743:21125): avc: denied { setopt } for pid=13932 comm="syz.9.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.372547][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1741'. [ 256.443505][T13944] loop9: detected capacity change from 0 to 512 [ 256.467465][T13955] xt_hashlimit: size too large, truncated to 1048576 [ 256.509714][T13944] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.529299][T13944] EXT4-fs: Mount option(s) incompatible with ext3 [ 256.686430][T13944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13944 comm=syz.9.1738 [ 256.837678][ T28] audit: type=1326 audit(1775763171.343:21126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 256.917733][ T28] audit: type=1326 audit(1775763171.343:21127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 256.942931][T14021] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:0 [ 256.976400][ T28] audit: type=1326 audit(1775763171.343:21128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 257.029663][ T28] audit: type=1326 audit(1775763171.343:21129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 257.084851][ T28] audit: type=1326 audit(1775763171.373:21130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 257.128294][ T28] audit: type=1326 audit(1775763171.373:21131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 257.180992][ T28] audit: type=1326 audit(1775763171.373:21132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 257.254246][ T28] audit: type=1326 audit(1775763171.373:21133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.2.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6bc0c819 code=0x7ffc0000 [ 257.323607][T14038] netlink: 'syz.8.1748': attribute type 25 has an invalid length. [ 257.346991][T14038] netlink: 184 bytes leftover after parsing attributes in process `syz.8.1748'. [ 258.619428][ T3580] ================================================================== [ 258.627588][ T3580] BUG: KCSAN: data-race in alloc_pid / copy_process [ 258.634311][ T3580] [ 258.636954][ T3580] read-write to 0xffffffff86c5ff68 of 4 bytes by task 3597 on cpu 1: [ 258.645131][ T3580] alloc_pid+0x651/0x940 [ 258.649423][ T3580] copy_process+0xf37/0x20b0 [ 258.654567][ T3580] kernel_clone+0x16b/0x5d0 [ 258.659216][ T3580] user_mode_thread+0x9c/0xd0 [ 258.663936][ T3580] call_usermodehelper_exec_work+0x7a/0x160 [ 258.669977][ T3580] process_scheduled_works+0x513/0xa10 [ 258.675909][ T3580] worker_thread+0x58a/0x780 [ 258.680665][ T3580] kthread+0x22a/0x280 [ 258.684881][ T3580] ret_from_fork+0x150/0x360 [ 258.689733][ T3580] ret_from_fork_asm+0x1a/0x30 [ 258.694644][ T3580] [ 258.696993][ T3580] read to 0xffffffff86c5ff68 of 4 bytes by task 3580 on cpu 0: [ 258.704570][ T3580] copy_process+0x187f/0x20b0 [ 258.709383][ T3580] kernel_clone+0x16b/0x5d0 [ 258.713921][ T3580] user_mode_thread+0x9c/0xd0 [ 258.718637][ T3580] call_usermodehelper_exec_work+0x7a/0x160 [ 258.724847][ T3580] process_scheduled_works+0x513/0xa10 [ 258.730442][ T3580] worker_thread+0x58a/0x780 [ 258.735170][ T3580] kthread+0x22a/0x280 [ 258.739897][ T3580] ret_from_fork+0x150/0x360 [ 258.744655][ T3580] ret_from_fork_asm+0x1a/0x30 [ 258.749482][ T3580] [ 258.751832][ T3580] value changed: 0x80000191 -> 0x80000192 [ 258.757608][ T3580] [ 258.759950][ T3580] Reported by Kernel Concurrency Sanitizer on: [ 258.766131][ T3580] CPU: 0 UID: 0 PID: 3580 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 258.775883][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.786260][ T3580] Workqueue: events_unbound call_usermodehelper_exec_work [ 258.793721][ T3580] ================================================================== [ 262.878677][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 266.728562][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!