last executing test programs: 3m18.205458457s ago: executing program 32 (id=518): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x130, 0x98, 0x1f0, 0x130, 0x98, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x11000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x1) r6 = syz_io_uring_setup(0x4173, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$TCSETS(r5, 0x89f0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000100)='./file0\x00', r7}, 0x18) ptrace(0x4208, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x80680, 0x0) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f00000002c0)) 2m37.553486333s ago: executing program 33 (id=1410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000048010000b7080000000080007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m35.88346944s ago: executing program 34 (id=1454): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2000}, 0x58) 54.545429266s ago: executing program 35 (id=2026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r3, 0x25, 0x8, @void}, 0x10) 54.161764708s ago: executing program 36 (id=2039): socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010026bd700000000000200100000000000000000000000000007f00000100000000000000000000000000000000000000006c0020002c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000433000000ac1414aa0000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000002008f00000000000000000000000000ffffffffffffffffff0f0000000000000208000000000000000000000000000000000000000000001000000000000000020000fb29bd7000000000000a0002002600000000"], 0x140}}, 0x0) 30.58548812s ago: executing program 37 (id=2628): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}, 0x1, 0x0, 0x0, 0x44014}, 0x8000) 20.985537309s ago: executing program 6 (id=2800): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x100000000}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dvmrp0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x795, 0x0, 0x4, 0x2, 0xd, 0x2, 0x80, 0x3, 0x1, [0x7, 0x6, 0x4, 0x7f6b, 0x8, 0xffff, 0x7, 0xacc1], [0x68, 0x496948ba, 0xa, 0x9, 0x59, 0x39f, 0x537b, 0xfffffffe]}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) 20.732995584s ago: executing program 38 (id=2803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0xa772da54, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff, 0x0, 0x20], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 20.611537681s ago: executing program 6 (id=2805): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffffe}}, './file1\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c"], 0xe0}}, 0x0) 20.591049692s ago: executing program 6 (id=2806): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) write$qrtrtun(r0, &(0x7f0000000000)="c0", 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000004}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2350886, &(0x7f00000001c0)={[{}, {@i_version}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) 20.470507559s ago: executing program 6 (id=2807): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x408, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000010c0)=ANY=[@ANYBLOB="8c89cdd1bf6804000000002b009fbf2754585c689dbca209ffa3936003fa0d8a6078bd439489a488d6ae9e4523d8c597e07c816a406a3945b16a63809577c617e6eabfae707f973287024298421e56684f8c015688d9d57769683d09856958aeb17718edf8c72c7ad5", @ANYRES16=r6, @ANYBLOB="0100000000000000000023000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) pipe(&(0x7f0000000040)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) setns(r2, 0x66020000) 20.470080909s ago: executing program 6 (id=2808): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000005c0), 0xfe, 0x276, &(0x7f0000000600)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) rename(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000400)='./file1/file4/file5\x00') 20.157646547s ago: executing program 6 (id=2812): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x58, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x7}, {0xfffffffffffffe86, 0x4, 0xfffbfff9}}}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x20040000}, 0x2004c8c0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [], {}, [], {}, {0x4}}, 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x10000007, 0x1, 0x0, 0xe, 0x1, 0x1}, 0x20) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000000)=""/61, 0x3d, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 20.156434367s ago: executing program 39 (id=2812): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x58, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x7}, {0xfffffffffffffe86, 0x4, 0xfffbfff9}}}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x20040000}, 0x2004c8c0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [], {}, [], {}, {0x4}}, 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x10000007, 0x1, 0x0, 0xe, 0x1, 0x1}, 0x20) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000000)=""/61, 0x3d, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 19.894081182s ago: executing program 1 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 19.870572774s ago: executing program 1 (id=2818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a090000000000ffef0000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 19.524825183s ago: executing program 1 (id=2820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x1200000000000000) 19.41701859s ago: executing program 1 (id=2823): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x408, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) setns(r2, 0x66020000) 19.277755218s ago: executing program 1 (id=2824): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2000, 0x0, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.74038514s ago: executing program 1 (id=2827): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdb7e, {{}, {}, {0x14, 0x19, {0xffffbff7, 0x3, 0xf, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40014) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x4, 0x6}, {0x9, 0xb9}}}], 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x501020, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)) (async, rerun: 32) sendmsg(r3, &(0x7f0000000840)={&(0x7f0000000400)=@phonet={0x23, 0x9, 0x2, 0x6}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)="f1bdecef7da3e451c30fe5d9b719772f3dcb5bc7557c587aec6e3ba4e27fb3804e0ccd3d5e050d15aaeb3f5748c1ddd71105451b9f798d29581cba8e0b6b08d9f38c4a228b1c734837a148089f39e3c669834417d8a7843967356f2dcbec2057649a8f4414dc38cd2623da38be5ae39ba06843a99413aecf9549ee088fd6de9f95f1595ace8242efe4707d4e9ac40319224837cf7a5f4b40d7cc6a68b619e10d88e2a1b31ee5a828f1ea7e1add98edc8134af727", 0xb4}, {&(0x7f0000000540)="ad241cbd5e7a85a6b435724c9187b117b51e32a7df9c4cb8aedc0196bc1bdcf4060d1b317891de042799e71b34f973f984b276f2", 0x34}, {&(0x7f0000000580)="af83cc60bc4a96088cc54a98eabb29", 0xf}, {&(0x7f00000005c0)="4441eda5b3dfcbdd99ea2b5c759c7f6c7776beb0e244bfa11f9310d622a8f595e47a32855655c51583556868e017c27300bc944fdd00c47bbd53eb85096d5e6df3e7d53a0d7063b56d5d4855a8cfa949e9e9800ce194504c838b99e1c9a16fdff7e17e95bf6f23c2b8f23314dcadffae58382cd10fccdd4e35cc3142a04e6931ede5f34f31da944bb56ee8fd26f02175361c3e3680764cada1651342aca99b6e2759d325ad5a52fabe32c5", 0xab}, {&(0x7f0000000680)="3a3c904a8aa809d7961dbd1afa6c365105d9cd8cb3c4fe411847d20cb8425097b031f1deb7cff54cde466f86f7a3d5454a128383fbc34ff4a7aa1e0b070c1f46b7b059852e59f2305181b0b454202143aeee2d7c45c42ba506170e5e30c57ae1e9095bf506be39099424f3b793c71a18369c8abb5aa9a98e12e0651e6056381700b30ebe15963e1f4c81b863e23bc2d71493e03cea04829e9be158eba923b00793cfce246ac3a2b718b5ecd37ef5539e849a07d5d9feb0c6e5145c696451fa40d0acab53a8d41217e91030f39715938f2e4ebb25758ad61ce1873a75237a", 0xde}, {&(0x7f0000000780)="7a37330192c9bf03ed686ffcf4682fca1502813fca52f3bf834ee96db37c907004f26c71accc", 0x26}], 0x6}, 0x20008080) (async, rerun: 32) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000003c0)=0x2c) (async, rerun: 64) io_uring_enter(r2, 0x70f, 0x969f, 0x11, &(0x7f0000000080)={[0x2]}, 0x8) (async, rerun: 64) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x7f, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x400004}}], 0x1c) 18.676845113s ago: executing program 9 (id=2829): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x100000000}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dvmrp0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x795, 0x0, 0x4, 0x2, 0xd, 0x2, 0x80, 0x3, 0x1, [0x7, 0x6, 0x4, 0x7f6b, 0x8, 0xffff, 0x7, 0xacc1], [0x68, 0x496948ba, 0xa, 0x9, 0x59, 0x39f, 0x537b, 0xfffffffe]}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) 18.657002174s ago: executing program 40 (id=2827): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdb7e, {{}, {}, {0x14, 0x19, {0xffffbff7, 0x3, 0xf, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40014) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x4, 0x6}, {0x9, 0xb9}}}], 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x501020, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)) (async, rerun: 32) sendmsg(r3, &(0x7f0000000840)={&(0x7f0000000400)=@phonet={0x23, 0x9, 0x2, 0x6}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)="f1bdecef7da3e451c30fe5d9b719772f3dcb5bc7557c587aec6e3ba4e27fb3804e0ccd3d5e050d15aaeb3f5748c1ddd71105451b9f798d29581cba8e0b6b08d9f38c4a228b1c734837a148089f39e3c669834417d8a7843967356f2dcbec2057649a8f4414dc38cd2623da38be5ae39ba06843a99413aecf9549ee088fd6de9f95f1595ace8242efe4707d4e9ac40319224837cf7a5f4b40d7cc6a68b619e10d88e2a1b31ee5a828f1ea7e1add98edc8134af727", 0xb4}, {&(0x7f0000000540)="ad241cbd5e7a85a6b435724c9187b117b51e32a7df9c4cb8aedc0196bc1bdcf4060d1b317891de042799e71b34f973f984b276f2", 0x34}, {&(0x7f0000000580)="af83cc60bc4a96088cc54a98eabb29", 0xf}, {&(0x7f00000005c0)="4441eda5b3dfcbdd99ea2b5c759c7f6c7776beb0e244bfa11f9310d622a8f595e47a32855655c51583556868e017c27300bc944fdd00c47bbd53eb85096d5e6df3e7d53a0d7063b56d5d4855a8cfa949e9e9800ce194504c838b99e1c9a16fdff7e17e95bf6f23c2b8f23314dcadffae58382cd10fccdd4e35cc3142a04e6931ede5f34f31da944bb56ee8fd26f02175361c3e3680764cada1651342aca99b6e2759d325ad5a52fabe32c5", 0xab}, {&(0x7f0000000680)="3a3c904a8aa809d7961dbd1afa6c365105d9cd8cb3c4fe411847d20cb8425097b031f1deb7cff54cde466f86f7a3d5454a128383fbc34ff4a7aa1e0b070c1f46b7b059852e59f2305181b0b454202143aeee2d7c45c42ba506170e5e30c57ae1e9095bf506be39099424f3b793c71a18369c8abb5aa9a98e12e0651e6056381700b30ebe15963e1f4c81b863e23bc2d71493e03cea04829e9be158eba923b00793cfce246ac3a2b718b5ecd37ef5539e849a07d5d9feb0c6e5145c696451fa40d0acab53a8d41217e91030f39715938f2e4ebb25758ad61ce1873a75237a", 0xde}, {&(0x7f0000000780)="7a37330192c9bf03ed686ffcf4682fca1502813fca52f3bf834ee96db37c907004f26c71accc", 0x26}], 0x6}, 0x20008080) (async, rerun: 32) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) (async) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000003c0)=0x2c) (async, rerun: 64) io_uring_enter(r2, 0x70f, 0x969f, 0x11, &(0x7f0000000080)={[0x2]}, 0x8) (async, rerun: 64) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x7f, 0xfd, @tick=0xa, {0x28}, {}, @result={0x0, 0x400004}}], 0x1c) 18.170912712s ago: executing program 9 (id=2836): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x1246, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x6604, 0x5}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000022000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) 16.691597129s ago: executing program 9 (id=2842): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) (fail_nth: 2) 16.521679519s ago: executing program 9 (id=2844): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) setns(r2, 0x66020000) 16.003780159s ago: executing program 9 (id=2845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) r2 = io_uring_setup(0x4c08, &(0x7f0000000140)={0x0, 0xf96f, 0x20000, 0x4, 0x10001d4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) syz_read_part_table(0x5c9, &(0x7f0000000000)="$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") r4 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000080)) r5 = eventfd2(0x6, 0x80800) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000340)=r5, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffffd, 0x410000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r9 = dup2(r6, r1) sendmmsg$inet_sctp(r9, &(0x7f0000000940)=[{&(0x7f0000000580)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000005c0)='\b', 0xffeb}], 0x1, 0x0, 0x0, 0x400c040}], 0x1, 0x20045084) recvfrom$inet_nvme(r9, 0x0, 0x0, 0x2e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15.834321368s ago: executing program 9 (id=2846): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000007c0)=[{&(0x7f0000000ac0)="4191062c1421f8d286fea25179d3bff47ffb95a24f597e0388f330e7dfb81fde917ae89f97d5fde0855ce2942ff541f21652a7409dad35f8886d587bb6e6dc67532c99235c3f4d65696cdb98986ca5f808b1b92c1a374dbcf9109eb576c388dca33df6129f9efd43ccbd58a93f146ce183a410b8959fe192652e32068e0d8e24d8eab4ecbd5ebaa165771a07c890804037074a1ebad3bcdd46b8f34ecb2f4a6e1bbc6ac3d80ea44fbfedf338583f63ba4607f430acc0a98b4fcbb501006052cb83625cbf60ebf28e9095458c1e9971417b2912bbe30037dd5c1ac06f612816e97ac304404619b0c75222e9339f6ba14eac3c1486ac997f919248498f073eb173a9b70dd4e2df0b14c490155bf06e801547ed96f1264b5c220cf3f65681d44cd20b1b2b2067fa91e1c30217b0e5f65358b8b08301da7c4349eeec41fd9a50c651d12551ceb6a6fd4989751a4bbb244b9d3d260ebeb8aad132df7ef16f67663238a327f0ab114f7241b4fb5fc9ea1813dfd2c9fba8858541166adf9cfaa6a4b7d77272d0698f742bdea73a6424f0b586cf40cf6dc0ad5a4f886231e736e2d15ae7b54e799376ddcfb2b9a8c25d1bdf50eaf8565c2b3927b5887a961fcf7ffd6847ddb974e774e3a4cd7a7766ca8500"/472, 0x1d8}, {&(0x7f0000000380)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b042a3105e6ff295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74f9afe55639834dc4c941dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb47ee61e5be16f4c7701cc671d25000000000000aeebbef22d7f2d931c963877fead2ab06279afc4ae478a7078a7bbdac4c800a22f128ee9bc899bfd5deb66020573afcc8defb54a535ea2b58349463561392e0524203e7be632e162559fc3b538b8338b4bf1e6de1bc735612bb2fc209ba7eb2dbdd06fed65af89e8b314b5a6b309e10c4a50d56fafac82f33c79cd5b0d4324fd65e76f059f29ab898eeacc72ff0299a6c434fda16e04721b0a4b6ff9698edda863d6511e6b5a531197b508318d6ccaaac93baed37b29d42ba4f7bcec7bf73b01f307ce317774f78b245f53a1b2a746c2af0357c3adcd2c1a25e14bb3b4262c66becae48d37d8cb602cc911341c71d3b2011215cd29f5844a277d9f48f3096366405f32fd866ee6a6eaaba51628919f78374a13baeb3c64efe1b36845e4ef44c545fcb86bf851289081cef3a358f10e49b5c923d729315ac0e6ad", 0x224}, {&(0x7f0000001100)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf60311fd29e60958434b6f595565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd0000000000000000006ba99149a712f4817121372f3569277bfba7b29fb8dc50f4ce01800000c18885439e40f2f7fb2309521d9949b4a2324f3eda920dd580fda0debe5ab3cf8f7339a4d58875517a9dd823b0b0c66d3b9f023c216f104faab5aa1e2811e357e8d2c0cdb12f7d2511200492b37b69165ab789a331e490b59667063d010018073c3486fbf619e627a9f60774e8fcc662e7f61722833fb1a512569e0ea6bb4f96164e06859c4e8d355f271488c6864081337851a15910a11c8b579946977d562265f9e298d7082bb4ea75f44a2259b3fea45561000000009d9cfa50cbb5b0c3ef1dba3ff7fee5900ec569671bc573f8df4c6f2a7fa5ba55a16d423d8d78cc6566b30882b8b9f5b555360ea61473da519e4d1cdd6722144ca77b9ddf9ce1c2e22faab797ff7ccecf210c13e0987f97ef979ad42db53f494af9e5c9a73b5e9fb7bbe57c456583b7378e9882f89e", 0x1c5}], 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) close(r1) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) setxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)=':/\x00', 0x3, 0x3) read(r5, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @loopback}, 0x1000004, 0x0, 0x6}}, 0x2e) 15.802229331s ago: executing program 41 (id=2846): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000007c0)=[{&(0x7f0000000ac0)="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"/472, 0x1d8}, {&(0x7f0000000380)="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", 0x224}, {&(0x7f0000001100)="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", 0x1c5}], 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) close(r1) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) setxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)=':/\x00', 0x3, 0x3) read(r5, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @loopback}, 0x1000004, 0x0, 0x6}}, 0x2e) 13.757301259s ago: executing program 4 (id=2865): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)}], 0x1}, 0x8841) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000700)="442e8d40", 0x0}, 0x20) 13.669769364s ago: executing program 4 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01040000000000fff500010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100ffff08000b4000000000090001"], 0xa4}}, 0x0) 13.489764395s ago: executing program 4 (id=2869): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a006080", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000", @ANYBLOB], 0xb8}}, 0x4000) 13.428410588s ago: executing program 4 (id=2871): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) setns(r2, 0x66020000) 13.314864565s ago: executing program 4 (id=2874): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7fffc00000001, 0xffffffffffffffff, 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) unshare(0x2a020400) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x2009140, 0x3) 12.726969689s ago: executing program 4 (id=2882): set_mempolicy(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff000000000bdf000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 12.677942042s ago: executing program 42 (id=2882): set_mempolicy(0x3, 0x0, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff000000000bdf000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 8.276969948s ago: executing program 3 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x10000000000000) 8.215943071s ago: executing program 3 (id=2962): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0xa700, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x11}, 0x94) 8.131657927s ago: executing program 3 (id=2965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, r2, 0x1, 0x100000002}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000180)=""/205) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x44}}, 0x0) unshare(0x22020600) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000000040)) getpid() fcntl$addseals(r0, 0x409, 0x8) 8.014255093s ago: executing program 3 (id=2970): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = getuid() quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000000)='./file0\x00') r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) listen(r1, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x67, 0x1, 0xc, 0x1, 0x7f, 0x81}) 7.633681026s ago: executing program 3 (id=2974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x20008000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)='>', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r4, 0x3, 0x2}, &(0x7f0000000300)=0x8) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) 7.21742709s ago: executing program 3 (id=2978): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000100000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 7.197797411s ago: executing program 43 (id=2978): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000100000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 7.05090881s ago: executing program 8 (id=2985): socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010026bd700000000000200100000000000000000000000000007f000001000000000000000000000000000000003c000000000020002c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000433000000ac1414aa0000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000002008f00000000000000000000000000ffffffffffffffffff0f0000000000000208000000000000000000000000000000000000000000001000000000000000020000fb29bd7000000000000a0002002600000000"], 0x140}}, 0x0) 6.899468289s ago: executing program 8 (id=2989): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = dup3(r1, r0, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "24b38000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007052cbd7000fedbdf25047c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008011}, 0x8010) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r0}]) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r11 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r10, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r11, 0x0}]) r12 = epoll_create1(0x0) r13 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000b80)={0x60000012}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r13, &(0x7f0000000180)={0x80002014}) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, &(0x7f0000000880)={0xf, 0x8e, 0x20000}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012800900010078090000000000000c00028008000200ea000000140003007866726d3000000000000000000000bb"], 0x50}}, 0x0) 6.577598287s ago: executing program 8 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01040000000000000200010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100ffff08000b40000000000900010073797a30"], 0xa4}}, 0x0) 4.874498526s ago: executing program 8 (id=3023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000002070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 2.272390348s ago: executing program 5 (id=2980): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000140)) 2.22953442s ago: executing program 5 (id=3070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x37}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.174107483s ago: executing program 5 (id=3071): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) getpid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) unshare(0x2000080) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4577, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) fsopen(0x0, 0x0) (async) getpid() (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) (async) unshare(0x2000080) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4577, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2.109170887s ago: executing program 5 (id=3073): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x1, 0xb, 0x38, 0x65, 0x0, 0x8, 0x1, 0x0, @multicast1, @remote, {[@rr={0x7, 0xf, 0x99, [@private=0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x401, 0x8, 0xc00, 0x7}}}}}, &(0x7f0000000080)={0x0, 0x1, [0xb7, 0xed2, 0x2f4, 0xa13]}) unshare(0x6a040000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x7fffffff, 0x8000000000000000) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = accept$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) sendmsg$sock(r2, &(0x7f00000007c0)={&(0x7f00000002c0)=@l2={0x1f, 0xfffa}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="8ce089ed31e4924ebcf9c0fa02e1c1b5", 0x10}, {&(0x7f00000003c0)="2a67cd5ac51d3364bb7a71e5ff6b0de8052e085bc69219e48dbe612ee1408f2aa0ccef0d7e58971a8c2d770a844db6c5d091d4aee9cb50c280b9c26f454481bc164e393e1c63a10386f0b8b24c69268bfedbd4bff2afa4404a661ba45c40bdb14f777a4576ee1c65443b09f560fa1ed489b026921c136fef416df7f9745189154c7e38ad71a9b3d20aa89825cf2097de8562f9b455e836c215e41ace4093a04620e4b6564bd5a44a52e5553cfd9ed958e10ac338a572e34368993379333caff502197826b48c20807526a86a8de9c1e72dc4636f79746afafa7269441bb5ac369d895a0c1e502e3b77d2775e35dfdf802af9091455acfb", 0xf7}, {&(0x7f00000004c0)="2622f8f03f9dda9508a9b38d5c4bc9f4d96c51434fa62791141321d8557d477ffecf4aa6a0c4603986917a524cc6a2b6c21256d8597eb7ab84f142c3a8ac089a02b78baa12c0ba7fd5746536c44cfe790ad1dab2d52359882f3aa67cb66645b8c2f3d865efdf062153b2f980e2b0a872757634d5e3cc2b67ffe375b916a8e02689724e3398f5650974ef8b8e2e4433d2d456fb9971c33488586d97c63d9039be6a0230fc11c5ed09821d1858d37219da6e591dcc800e1ad301e654cb8cdd14d266ea8e7a49d113f2028bfc2beda595d3a778", 0xd2}, {&(0x7f00000005c0)="bedc77", 0x3}, {&(0x7f0000000600)="122c91e7833b1358635a2951ba4c58dbff23eb45604a8250bca7c8f50f34f012893806244fa9acfd6b72622ffe328da2a9ba563e832ac959de1eaa4c931ceca092e4e5a12f4e48e9de50028570415b69cb175783e3d92a96a63d559cf38d7f9779ef6a3227a1a1157d8a932b4076ec9ac424b5d9352012436b33fff19f1124305ef6be4edf3bbf66daa9008b27e2f457d9e171e1b79dc25f", 0x98}], 0x5, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x213}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}, 0x4000801) sendfile(r4, r0, 0x0, 0x3fffff) getsockopt(r0, 0x10bf, 0x7, 0x0, 0x0) 1.37765574s ago: executing program 5 (id=3079): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r4, 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7fffc00000001, 0xffffffffffffffff, 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) unshare(0x2a020400) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x2009140, 0x3) 1.255576826s ago: executing program 2 (id=3082): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0xb7, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000ffffffffffffff8000ff851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000003000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.189423641s ago: executing program 2 (id=3085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010400000000f4000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100ffff08000b40000000000900010073797a30"], 0xa4}}, 0x0) 1.149270303s ago: executing program 2 (id=3086): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x100) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x8, 0xa, [0x1, 0xffff, 0x7c7, 0x7, 0xe, 0x1, 0x1, 0xf001, 0x7, 0x2]}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0xfff7, 0x8, 0x8, 0x7, 0xfff, 0x8, 0x3, r2}, &(0x7f0000000640)=0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000c40)='./file2\x00', 0x10447, &(0x7f0000000140), 0x3, 0x43b, &(0x7f0000000200)="$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") 1.086429146s ago: executing program 7 (id=3087): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, 0x0, &(0x7f0000000140)) 940.308055ms ago: executing program 7 (id=3090): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000100)="bf7ede72f5f550c21b0c17549d521227958f13f2b9607c2a5fe57019128a51b74878b21d0b409e56c00512bf2c40d599f0b00e6b9056928a70c61695659894e6aa5c", 0x42}, {0x0}], 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x514, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = getpid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 841.424201ms ago: executing program 5 (id=3091): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x6, &(0x7f0000000240)=0x1) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {0x3, 0x2}, {0xffe5, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x9, 0x7) syz_emit_ethernet(0x238, &(0x7f0000000580)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x4, 0x6, '\x00', 0x1fa, 0x6, 0x1, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x62, 0x1, '\x00', [@ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x401}, @ra={0x5, 0x2, 0x4}]}, @dstopts={0x1d, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa5}, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x32, 0x1c, '\x00', [@generic={0x4, 0xbf, "77167ce04ea792901f32bb4579803274d5d2e7a9e0c62b199b6d7d8c2bd602c85dfd980e9c3b1f7cb587e06236da1bd3058fe7618b25a413dbd2282343b33bba2e1abcab3ca6d695976724647ce1fcd623dd12cee724de71a6c6bd1abbb30636b9025f01eb2a4e0afc4a83462a66ca34000ef47a96389535384343baa0457041ac6040810996caa6f5f14e8782f337d846fe2ba41dc57ba6073046e02a0e6fbd732f9b5d0a565aed8760d7ef95459087034f6d61625d14334c17d401ba87c5"}, @pad1, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0xa9}, @hao={0xc9, 0x10, @empty}]}, @fragment={0x8, 0x0, 0x3, 0x0, 0x0, 0x12, 0x65}], {{0x4e21, 0x4e22, 0x41424344, r11, 0x0, 0x0, 0x15, 0x40, 0x101, 0x0, 0x7, {[@exp_fastopen={0xfe, 0xc, 0xf989, "3ee8f8a079665c8d"}, @md5sig={0x13, 0x12, "96b45fde0320797904110c088c9685b9"}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x80000000, 0x1c}, @mptcp=@add_addr={0x1e, 0xe, 0x0, 0xe, 0x10, @rand_addr=0x64010102, 0x42d4, "894d89bc"}, @nop, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}, {"a397fe15ae6cca2cd0fc2892e6dedfdf26e023f7a4791a9a6bd0549aa26f8430869005416d3cedea28220e15d08b729084076aa3da4f4227b53bee32810078b2c1b31f9cbad77b2fa16376019ced72307297cb4b8cf512aec0a047cc27687c6919aeea5899eaf814cd9c228e28d2c1a5a4f7544a1c35"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 831.397081ms ago: executing program 7 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x37}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 769.067185ms ago: executing program 7 (id=3095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="bad330fbc9b55400041900ea0756a85d86dd4e11bce43a5dbf38ff29aabe94b749222147b4d6", 0x26, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 744.927546ms ago: executing program 2 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 672.953781ms ago: executing program 2 (id=3098): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x9, 0x7, 0x5, 0x5, 0xffffffffffffffff, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x2, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x104021, 0x6, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000180)=ANY=[]) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000180)=ANY=[]) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 241.504736ms ago: executing program 2 (id=3099): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10000}}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x61}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x24, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000000)=0x2003, 0x4) sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r11], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$can_bcm(r4, &(0x7f0000000c40)={&(0x7f0000000580)={0x1d, r7}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x3, 0x24, 0x1f, {r9, r10/1000+10000}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x2}, 0x32, 0x2, 0x0, 0x0, "ea0e27ef353b2819db494cf6fa8b6e1a4e5664eb69ef0a90a6df91d10ffde7c0abdd6010bad2381bd52f7dbc90d53787908c0ad4eebe515086b91b78f904e011"}}, 0x80}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x2) r12 = socket$kcm(0x29, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="976996da66783b543b5f7d3d7aed8902fca91330ccf3b9af9ed1b3fc32991fb687d386cc95498a327c6dd94ea81bf7b7bac72c6c388839e15a9ea3b36f9a3892092ac815907c3b38e82f6e9ef301a95927a843def997bd159a799ff608a84642a8231e5b778d1cadf297b21cc796d31bcd24d53075c31e42c9a7d7aaf0765880d823f6acc6db1052665a22b98ff64541c991b411d92723ae2be2d6d09a1e79acad5775a322c368381d3fd971146f91ce91df8672059c56cb9fa558abb3cef28b7440d46a7b1f476749ec599fd2bb46e88b316771f8cc40", 0xd7, 0x24040000, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x1, 0xc, 0x6, @random="02663d3b0375"}, 0x14) sendmmsg$inet(r12, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) 226.813146ms ago: executing program 0 (id=3100): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000b00000000030005000000000002000000e0000001"], 0x50}}, 0x0) 153.461111ms ago: executing program 0 (id=3101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r1 = semget$private(0x0, 0x4, 0x2a) semop(r1, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x1000007, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x94, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x78, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "15e90d7f4ad8fd988036e75270cc80da"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1ec3a24c5262d70e68d37d8f24418f08"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x28}}, 0x20000800) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 151.729171ms ago: executing program 0 (id=3102): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000000000000000000000000000000000000000000000080ff00000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 144.030531ms ago: executing program 0 (id=3103): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000050000000300060000000e0002000000e0001009000000000000000002000100000000000000050200000000030005000000000002"], 0x50}}, 0x0) 120.142803ms ago: executing program 0 (id=3104): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1008, 0x4, 0x10001, 0x1, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0xb) (async) unshare(0x22020400) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000680)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="850062733023332c00"/19], 0x1, 0xa2f, &(0x7f00000018c0)="$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") (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (rerun: 32) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x5}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) (async, rerun: 64) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, 0x0) (rerun: 64) getpid() (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) (async) perf_event_open(0x0, 0x0, 0xdffffeffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000900)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf1675000000000000e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02", @ANYRES64=r2, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$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") (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd']) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) sendmmsg$inet(r7, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="000019b600", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000001c0)="833ca1424e2564694d63a48ed28fc3c56958d27cde4cffd91b9ebfd134237aba8d7612de72340c0382fa382352b6758ff13ec4fdc81b06168030960bfae6b3a90f06a1afc25b8a7e5902e8217443854d9a9750be23a4edd054a2ddd94bc58fa29d7887c0d22b512d6dfe5a45a78a0498f7ee67b52a6276", 0x77}], 0x2}}], 0x2, 0x2081) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="645f0243099db738b9e95fbe75a8cb576fa08c9e44aa74a50fc97c2141b4f0688f93435b157be788d4f3b8ac5bb9c6f74ec9ddd6121d1bdca0bd7d925b04fc06b9823d34ad0d47f3e3b161208afbdb13d959c0874449d71b3fc93bbd188d19e6b1822d22f6f98370f39586980be0fb160019a83d5c488ab1834c2a4a05396afd3df0d8c9968c63ae174a0380cc4b92e9ab3d3ee8fa13ee8b91037c0766a539b4d567d8232632525a639b936036f5a21d15846c8277f66088d5b3907c2b7cf2f1b3d25a98ecafb4c5b30a1e49cf149eb57f56d3ff9535e9c8", @ANYRES32=0x0, @ANYBLOB="321302000000000020001280080001006772654094000280080006800a01017a0800050004010000"], 0x40}, 0x1, 0xba01}, 0x8810) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (rerun: 64) syz_io_uring_setup(0x7dc9, &(0x7f0000000500)={0x0, 0x849b, 0x2, 0xfffffff8, 0x234, 0x0, r3}, &(0x7f0000000140), &(0x7f0000000000)) 33.539368ms ago: executing program 7 (id=3105): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x37}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 33.377318ms ago: executing program 0 (id=3106): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000002000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 0s ago: executing program 7 (id=3107): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000200)='\x00\v', 0x2) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x10c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xc4, 0x1, [@m_ife={0xc0, 0x1b, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x20000, 0x4, 0x1, 0xd45a}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x8, 0x6, 0x245}}}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x34, 0x1, [@m_simple={0x30, 0x3fff, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff8000}]}) socket(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, r6}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r6}, 0x14) openat$dir(0xffffffffffffff9c, 0x0, 0x101542, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, 0x0, 0x181242, 0x1ea) kernel console output (not intermixed with test programs): [T11652] ref_ctr increment failed for inode: 0x43 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104541440 [ 216.660414][T11666] loop5: detected capacity change from 0 to 512 [ 216.669305][T11666] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.724157][T11666] EXT4-fs (loop5): 1 truncate cleaned up [ 216.731256][T11666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.758927][T11672] netlink: 'syz.9.2513': attribute type 27 has an invalid length. [ 216.766969][T11672] xfrm0: left promiscuous mode [ 216.775421][T11672] batadv1: left promiscuous mode [ 216.782257][ T5514] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.793272][ T5514] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.804147][ T5514] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.813432][ T5514] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.887375][T11678] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2515'. [ 216.897386][T11678] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2515'. [ 216.910971][T11678] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 217.033808][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.069082][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.152213][T11690] loop2: detected capacity change from 0 to 7 [ 217.211019][T11692] tmpfs: Bad value for 'mpol' [ 217.307570][T11652] syz.6.2506 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 217.322461][T11652] CPU: 0 UID: 0 PID: 11652 Comm: syz.6.2506 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.322497][T11652] Tainted: [W]=WARN [ 217.322505][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.322519][T11652] Call Trace: [ 217.322593][T11652] [ 217.322601][T11652] __dump_stack+0x1d/0x30 [ 217.322625][T11652] dump_stack_lvl+0x95/0xd0 [ 217.322645][T11652] dump_stack+0x15/0x1b [ 217.322666][T11652] dump_header+0x80/0x240 [ 217.322734][T11652] oom_kill_process+0x295/0x350 [ 217.322762][T11652] out_of_memory+0x97d/0xb80 [ 217.322805][T11652] try_charge_memcg+0x62e/0xa10 [ 217.322831][T11652] obj_cgroup_charge_pages+0x23/0xc0 [ 217.322923][T11652] __memcg_kmem_charge_page+0x9e/0x170 [ 217.322982][T11652] __alloc_frozen_pages_noprof+0x18a/0x350 [ 217.323015][T11652] alloc_pages_mpol+0xb3/0x260 [ 217.323047][T11652] alloc_pages_noprof+0x8f/0x130 [ 217.323153][T11652] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 217.323251][T11652] __kvmalloc_node_noprof+0x471/0x680 [ 217.323277][T11652] ? ip_set_alloc+0x24/0x30 [ 217.323310][T11652] ? ip_set_alloc+0x24/0x30 [ 217.323358][T11652] ip_set_alloc+0x24/0x30 [ 217.323384][T11652] hash_netiface_create+0x282/0x740 [ 217.323414][T11652] ? __pfx_hash_netiface_create+0x10/0x10 [ 217.323446][T11652] ip_set_create+0x3cf/0x970 [ 217.323489][T11652] ? __nla_parse+0x40/0x60 [ 217.323507][T11652] nfnetlink_rcv_msg+0x509/0x5d0 [ 217.323601][T11652] netlink_rcv_skb+0x123/0x220 [ 217.323633][T11652] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 217.323665][T11652] nfnetlink_rcv+0x167/0x1720 [ 217.323791][T11652] ? event_sched_in+0xebd/0xf90 [ 217.323828][T11652] ? __list_add_valid_or_report+0x38/0xe0 [ 217.323850][T11652] ? merge_sched_in+0x5db/0xbe0 [ 217.323875][T11652] ? rb_next+0x5c/0x80 [ 217.323898][T11652] ? visit_groups_merge+0xf7e/0xfd0 [ 217.323948][T11652] ? event_sched_out+0x896/0x8f0 [ 217.324043][T11652] ? _raw_spin_lock_bh+0x56/0xb0 [ 217.324076][T11652] ? should_fail_ex+0x30/0x280 [ 217.324106][T11652] ? selinux_nlmsg_lookup+0x99/0x890 [ 217.324127][T11652] ? __rcu_read_unlock+0x33/0x70 [ 217.324180][T11652] ? __netlink_lookup+0x276/0x2b0 [ 217.324206][T11652] netlink_unicast+0x5c0/0x690 [ 217.324247][T11652] netlink_sendmsg+0x5c8/0x6f0 [ 217.324268][T11652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.324303][T11652] ____sys_sendmsg+0x5af/0x600 [ 217.324326][T11652] ___sys_sendmsg+0x195/0x1e0 [ 217.324357][T11652] __x64_sys_sendmsg+0xd4/0x160 [ 217.324440][T11652] x64_sys_call+0x17ba/0x3000 [ 217.324457][T11652] do_syscall_64+0xc0/0x2a0 [ 217.324476][T11652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.324501][T11652] RIP: 0033:0x7f892adcaeb9 [ 217.324511][T11652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.324522][T11652] RSP: 002b:00007f8929827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.324535][T11652] RAX: ffffffffffffffda RBX: 00007f892b045fa0 RCX: 00007f892adcaeb9 [ 217.324544][T11652] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 000000000000000a [ 217.324552][T11652] RBP: 00007f892ae38c1f R08: 0000000000000000 R09: 0000000000000000 [ 217.324634][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.324698][T11652] R13: 00007f892b046038 R14: 00007f892b045fa0 R15: 00007fff62d0b258 [ 217.324709][T11652] [ 217.324713][T11652] memory: usage 307200kB, limit 307200kB, failcnt 692 [ 217.401621][T11700] netlink: 'syz.4.2524': attribute type 21 has an invalid length. [ 217.405731][T11652] memory+swap: usage 312288kB, limit 9007199254740988kB, failcnt 0 [ 217.405750][T11652] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 217.405764][T11652] Memory cgroup stats for /syz6: [ 217.406143][T11652] cache 36864 [ 217.406152][T11652] rss 0 [ 217.406159][T11652] shmem 0 [ 217.406167][T11652] mapped_file 0 [ 217.406175][T11652] dirty 0 [ 217.406183][T11652] writeback 0 [ 217.406192][T11652] workingset_refault_anon 287 [ 217.406280][T11652] workingset_refault_file 126 [ 217.406334][T11652] swap 5210112 [ 217.406342][T11652] swapcached 28672 [ 217.406392][T11652] pgpgin 31890 [ 217.406400][T11652] pgpgout 31869 [ 217.406408][T11652] pgfault 44642 [ 217.406417][T11652] pgmajfault 142 [ 217.406425][T11652] inactive_anon 24576 [ 217.406433][T11652] active_anon 4096 [ 217.406441][T11652] inactive_file 0 [ 217.757661][T11652] active_file 57344 [ 217.757672][T11652] unevictable 0 [ 217.764904][T11652] hierarchical_memory_limit 314572800 [ 217.770287][T11652] hierarchical_memsw_limit 9223372036854771712 [ 217.776457][T11652] total_cache 36864 [ 217.780238][T11652] total_rss 0 [ 217.783541][T11652] total_shmem 0 [ 217.787531][T11652] total_mapped_file 0 [ 217.791541][T11652] total_dirty 0 [ 217.794975][T11652] total_writeback 0 [ 217.798833][T11652] total_workingset_refault_anon 287 [ 217.804105][T11652] total_workingset_refault_file 126 [ 217.809320][T11652] total_swap 5210112 [ 217.813197][T11652] total_swapcached 28672 [ 217.817995][T11652] total_pgpgin 31890 [ 217.821928][T11652] total_pgpgout 31869 [ 217.825886][T11652] total_pgfault 44642 [ 217.829876][T11652] total_pgmajfault 142 [ 217.833996][T11652] total_inactive_anon 24576 [ 217.838493][T11652] total_active_anon 4096 [ 217.842739][T11652] total_inactive_file 0 [ 217.847383][T11652] total_active_file 57344 [ 217.851689][T11652] total_unevictable 0 [ 217.855641][T11652] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2506,pid=11651,uid=0 [ 217.870350][T11652] Memory cgroup out of memory: Killed process 11651 (syz.6.2506) total-vm:94168kB, anon-rss:1156kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 217.970028][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.998017][T11723] netlink: 'syz.9.2535': attribute type 10 has an invalid length. [ 218.025568][T11723] ipvlan2: entered promiscuous mode [ 218.038447][T11723] bridge0: port 3(ipvlan2) entered blocking state [ 218.041527][ T29] audit: type=1326 audit(1770803037.214:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.044960][T11723] bridge0: port 3(ipvlan2) entered disabled state [ 218.069160][ T29] audit: type=1326 audit(1770803037.214:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.086605][T11723] ipvlan2: entered allmulticast mode [ 218.099857][ T29] audit: type=1326 audit(1770803037.214:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.105091][T11723] bridge0: entered allmulticast mode [ 218.129337][ T29] audit: type=1326 audit(1770803037.214:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.157996][ T29] audit: type=1326 audit(1770803037.214:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.182303][ T29] audit: type=1326 audit(1770803037.214:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.190565][T11723] ipvlan2: left allmulticast mode [ 218.205717][ T29] audit: type=1326 audit(1770803037.214:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.211515][T11723] bridge0: left allmulticast mode [ 218.240788][ T29] audit: type=1326 audit(1770803037.214:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11724 comm="syz.5.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 218.432542][T11741] loop2: detected capacity change from 0 to 7 [ 218.610219][T11758] loop6: detected capacity change from 0 to 512 [ 218.673318][T11758] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 218.745108][T11758] EXT4-fs (loop6): mount failed [ 218.779174][T11770] xfrm0: entered promiscuous mode [ 218.894826][T11787] loop8: detected capacity change from 0 to 128 [ 219.019813][ T5507] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.048280][ T5507] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.080897][ T5507] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.125218][ T5507] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.258903][T11788] loop6: detected capacity change from 0 to 2048 [ 219.327363][ T9230] loop6: p3 p4 < > [ 219.336490][ T9230] loop6: p3 start 11362048 is beyond EOD, truncated [ 219.371823][T11788] loop6: p3 p4 < > [ 219.396480][T11788] loop6: p3 start 11362048 is beyond EOD, truncated [ 219.463825][ T3000] loop6: p3 p4 < > [ 219.467798][ T3000] loop6: p3 start 11362048 is beyond EOD, truncated [ 219.640894][T11842] loop2: detected capacity change from 0 to 7 [ 219.918332][T11867] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.948225][T11867] EXT4-fs (loop4): mount failed [ 220.069893][T11889] can: request_module (can-proto-0) failed. [ 220.113924][T11894] lo speed is unknown, defaulting to 1000 [ 220.309660][T11916] EXT4-fs: Ignoring removed bh option [ 220.348167][T11916] EXT4-fs: Ignoring removed oldalloc option [ 220.370529][T11916] EXT4-fs: quotafile must be on filesystem root [ 220.430177][ T5515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.434634][T11923] netlink: 'syz.8.2617': attribute type 21 has an invalid length. [ 220.459958][ T5515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.479769][ T5515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.515782][ T5515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.618218][T11936] macsec1: entered allmulticast mode [ 220.624857][T11936] dummy0: entered allmulticast mode [ 220.632076][T11936] dummy0: left allmulticast mode [ 220.643681][T11940] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.659872][T11940] EXT4-fs (loop4): 1 truncate cleaned up [ 220.671092][T11940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.720011][ T5507] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.960411][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 220.960427][ T29] audit: type=1400 audit(1770803040.084:9017): avc: denied { module_load } for pid=11960 comm="syz.5.2633" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=34631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 221.049374][T11963] __nla_validate_parse: 21 callbacks suppressed [ 221.049389][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2634'. [ 221.117884][ T5507] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.186416][ T5507] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.188525][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.211115][T11978] xt_hashlimit: size too large, truncated to 1048576 [ 221.399479][T11983] set_capacity_and_notify: 5 callbacks suppressed [ 221.399560][T11983] loop4: detected capacity change from 0 to 512 [ 221.422044][T11983] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 221.432086][T11983] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.449189][T11983] EXT4-fs (loop4): mount failed [ 221.499730][T11968] lo speed is unknown, defaulting to 1000 [ 221.524562][T11984] loop9: detected capacity change from 0 to 4096 [ 221.560418][T11984] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.576198][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2640'. [ 221.585319][T11984] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2640'. [ 221.594443][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2640'. [ 221.651408][ T5507] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.702244][T11981] –: renamed from vxcan1 [ 221.743372][T11967] lo speed is unknown, defaulting to 1000 [ 221.755482][T11999] netlink: 'syz.6.2643': attribute type 27 has an invalid length. [ 221.815182][T11999] batadv2: left promiscuous mode [ 221.841057][T11949] lo speed is unknown, defaulting to 1000 [ 221.964887][T12002] loop4: detected capacity change from 0 to 128 [ 222.002701][ T5507] bridge_slave_1: left allmulticast mode [ 222.008417][ T5507] bridge_slave_1: left promiscuous mode [ 222.014123][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.029799][ T5507] bridge_slave_0: left allmulticast mode [ 222.035586][ T5507] bridge_slave_0: left promiscuous mode [ 222.041295][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.082767][T10105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.137515][T12011] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2645'. [ 222.164864][T12011] IPVS: stopping backup sync thread 10935 ... [ 222.232308][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'. [ 222.248589][ T5507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.258850][ T5507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.271573][ T5507] bond0 (unregistering): Released all slaves [ 222.281995][ T5507] bond1 (unregistering): left allmulticast mode [ 222.288319][ T5507] bond1 (unregistering): left promiscuous mode [ 222.297724][ T5507] bond1 (unregistering): Released all slaves [ 222.306868][ T5507] bond2 (unregistering): Released all slaves [ 222.342083][ T5510] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.357989][ T5507] hsr_slave_0: left promiscuous mode [ 222.363850][ T5507] hsr_slave_1: left promiscuous mode [ 222.369819][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.377241][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.385005][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.393155][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.393527][T12038] netlink: 'syz.9.2650': attribute type 29 has an invalid length. [ 222.412537][ T5507] veth1_macvtap: left promiscuous mode [ 222.418453][ T5507] veth0_macvtap: left promiscuous mode [ 222.424172][ T5507] veth1_vlan: left promiscuous mode [ 222.430245][ T5507] veth0_vlan: left promiscuous mode [ 222.479217][ T29] audit: type=1400 audit(1770803041.644:9018): avc: denied { create } for pid=12044 comm="syz.9.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 222.482733][T12045] netlink: 'syz.9.2652': attribute type 21 has an invalid length. [ 222.508105][ T29] audit: type=1400 audit(1770803041.644:9019): avc: denied { write } for pid=12044 comm="syz.9.2652" path="socket:[35961]" dev="sockfs" ino=35961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 222.533361][T12043] loop5: detected capacity change from 0 to 8192 [ 222.558339][T12046] loop9: detected capacity change from 0 to 4096 [ 222.570920][T12046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.601317][ T5507] team0 (unregistering): Port device team_slave_1 removed [ 222.611427][ T5507] team0 (unregistering): Port device team_slave_0 removed [ 222.646442][T12031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2647'. [ 222.657524][ T5510] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.667181][ T3400] lo speed is unknown, defaulting to 1000 [ 222.667246][ T5510] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.673664][ T3400] infiniband syz2: ib_query_port failed (-19) [ 222.681922][ T5510] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.722082][T11949] chnl_net:caif_netlink_parms(): no params data found [ 222.750913][T10105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.751450][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 222.798900][T12053] xfrm0: entered promiscuous mode [ 222.889075][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.893843][T12067] loop5: detected capacity change from 0 to 1024 [ 222.896195][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.908295][T12067] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 222.920468][T12067] EXT4-fs (loop5): group descriptors corrupted! [ 222.929290][T11949] bridge_slave_0: entered allmulticast mode [ 222.937108][T11949] bridge_slave_0: entered promiscuous mode [ 222.945500][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.952760][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.960352][T11949] bridge_slave_1: entered allmulticast mode [ 222.968830][T12067] loop5: detected capacity change from 0 to 512 [ 222.970792][T11949] bridge_slave_1: entered promiscuous mode [ 223.030904][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.053784][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.143670][T11949] team0: Port device team_slave_0 added [ 223.150425][T11949] team0: Port device team_slave_1 added [ 223.250986][T12104] loop5: detected capacity change from 0 to 512 [ 223.259194][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.265615][T12109] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2669'. [ 223.266271][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.301735][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.344611][T12104] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 223.356127][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.363165][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.389852][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.432114][T12104] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.459533][T11949] hsr_slave_0: entered promiscuous mode [ 223.465690][T11949] hsr_slave_1: entered promiscuous mode [ 223.484024][T12104] EXT4-fs (loop5): mount failed [ 223.503344][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2674'. [ 223.691919][ T5514] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.719501][ T5514] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.754498][T12159] FAULT_INJECTION: forcing a failure. [ 223.754498][T12159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.759809][ T29] audit: type=1400 audit(1770803042.906:9020): avc: denied { setopt } for pid=12156 comm="syz.5.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 223.767660][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.6.2686 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.767699][T12159] Tainted: [W]=WARN [ 223.767707][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.767720][T12159] Call Trace: [ 223.767727][T12159] [ 223.767768][T12159] __dump_stack+0x1d/0x30 [ 223.767795][T12159] dump_stack_lvl+0x95/0xd0 [ 223.767819][T12159] dump_stack+0x15/0x1b [ 223.767888][T12159] should_fail_ex+0x263/0x280 [ 223.767921][T12159] should_fail+0xb/0x20 [ 223.767963][T12159] should_fail_usercopy+0x1a/0x20 [ 223.767996][T12159] _copy_from_user+0x1c/0xb0 [ 223.768018][T12159] ___sys_sendmsg+0xc1/0x1e0 [ 223.768062][T12159] __x64_sys_sendmsg+0xd4/0x160 [ 223.768086][T12159] x64_sys_call+0x17ba/0x3000 [ 223.768112][T12159] do_syscall_64+0xc0/0x2a0 [ 223.768216][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.768279][T12159] RIP: 0033:0x7f892adcaeb9 [ 223.768297][T12159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.768316][T12159] RSP: 002b:00007f8929827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.768360][T12159] RAX: ffffffffffffffda RBX: 00007f892b045fa0 RCX: 00007f892adcaeb9 [ 223.768394][T12159] RDX: 0000000020008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 223.768409][T12159] RBP: 00007f8929827090 R08: 0000000000000000 R09: 0000000000000000 [ 223.768424][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.768438][T12159] R13: 00007f892b046038 R14: 00007f892b045fa0 R15: 00007fff62d0b258 [ 223.768459][T12159] [ 223.932569][T12155] loop4: detected capacity change from 0 to 8192 [ 223.954048][T12172] loop6: detected capacity change from 0 to 764 [ 223.987873][ T5515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.014624][T12155] ref_ctr increment failed for inode: 0x4a offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881045406c0 [ 224.018531][ T5515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.119892][T11949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.144245][T11949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.151906][T12154] uprobe: syz.4.2685:12154 failed to unregister, leaking uprobe [ 224.170503][T11949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.177277][ T29] audit: type=1326 audit(1770803043.323:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 224.201717][ T29] audit: type=1326 audit(1770803043.323:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 224.225210][ T29] audit: type=1326 audit(1770803043.323:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 224.255412][T11949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.313006][ T29] audit: type=1326 audit(1770803043.462:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.5.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 224.344426][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.355997][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.368528][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.375646][ T5512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.421918][ T5510] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.429004][ T5510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.561973][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.649179][T12244] xt_hashlimit: size too large, truncated to 1048576 [ 224.687952][T12252] netlink: 'syz.9.2699': attribute type 27 has an invalid length. [ 224.699494][ T5510] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.711824][ T5510] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.721231][T12256] –: renamed from vxcan1 [ 224.757820][ T5510] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.816147][T11949] veth0_vlan: entered promiscuous mode [ 224.826241][T11949] veth1_vlan: entered promiscuous mode [ 224.854231][T11949] veth0_macvtap: entered promiscuous mode [ 224.861854][T11949] veth1_macvtap: entered promiscuous mode [ 224.898081][T11949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.925318][T11949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.955200][ T5510] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.005932][ T5512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.041134][ T5512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.066440][T12273] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 225.113274][ T5512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.154500][T12273] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #3: block 1: comm syz.6.2701: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.190434][ T5512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.245935][T12273] EXT4-fs (loop6): Remounting filesystem read-only [ 225.273780][T12273] EXT4-fs (loop6): 1 orphan inode deleted [ 225.299992][T12273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.389108][T12295] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2704: ea_inode with extended attributes [ 225.429105][T12295] EXT4-fs (loop1): Remounting filesystem read-only [ 225.437340][T12295] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 225.446600][T12295] EXT4-fs (loop1): 1 orphan inode deleted [ 225.452883][T12295] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.493585][T12295] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 225.574186][T12304] ref_ctr increment failed for inode: 0x4c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104543600 [ 225.621147][T12324] netlink: 'syz.9.2708': attribute type 21 has an invalid length. [ 225.744781][T12303] uprobe: syz.4.2706:12303 failed to unregister, leaking uprobe [ 225.758067][T12333] EXT4-fs: Ignoring removed bh option [ 225.785133][T12333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.824711][T10105] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.869895][ T7925] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.960114][T12352] FAULT_INJECTION: forcing a failure. [ 225.960114][T12352] name failslab, interval 1, probability 0, space 0, times 0 [ 225.972831][T12352] CPU: 0 UID: 0 PID: 12352 Comm: syz.9.2713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.972866][T12352] Tainted: [W]=WARN [ 225.972873][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.972907][T12352] Call Trace: [ 225.972914][T12352] [ 225.972921][T12352] __dump_stack+0x1d/0x30 [ 225.972947][T12352] dump_stack_lvl+0x95/0xd0 [ 225.972971][T12352] dump_stack+0x15/0x1b [ 225.972995][T12352] should_fail_ex+0x263/0x280 [ 225.973056][T12352] should_failslab+0x8c/0xb0 [ 225.973082][T12352] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 225.973112][T12352] ? __alloc_skb+0x2f0/0x4b0 [ 225.973209][T12352] __alloc_skb+0x2f0/0x4b0 [ 225.973238][T12352] ? __alloc_skb+0x219/0x4b0 [ 225.973344][T12352] netlink_alloc_large_skb+0xbf/0xf0 [ 225.973414][T12352] netlink_sendmsg+0x40c/0x6f0 [ 225.973438][T12352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.973459][T12352] ____sys_sendmsg+0x5af/0x600 [ 225.973483][T12352] ___sys_sendmsg+0x195/0x1e0 [ 225.973571][T12352] __x64_sys_sendmsg+0xd4/0x160 [ 225.973593][T12352] x64_sys_call+0x17ba/0x3000 [ 225.973616][T12352] do_syscall_64+0xc0/0x2a0 [ 225.973733][T12352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.973757][T12352] RIP: 0033:0x7fe13561aeb9 [ 225.973775][T12352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.973796][T12352] RSP: 002b:00007fe134077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.973818][T12352] RAX: ffffffffffffffda RBX: 00007fe135895fa0 RCX: 00007fe13561aeb9 [ 225.973862][T12352] RDX: 0000000020008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 225.973878][T12352] RBP: 00007fe134077090 R08: 0000000000000000 R09: 0000000000000000 [ 225.973893][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.973908][T12352] R13: 00007fe135896038 R14: 00007fe135895fa0 R15: 00007ffe6d20f6e8 [ 225.973929][T12352] [ 226.310732][T12372] __nla_validate_parse: 4 callbacks suppressed [ 226.310750][T12372] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2718'. [ 226.344934][T12372] vlan2: entered allmulticast mode [ 226.350083][T12372] gretap0: entered allmulticast mode [ 226.417309][T12388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'. [ 226.485680][T12396] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2723'. [ 226.535206][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 226.609326][T12407] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2725'. [ 226.662623][T12411] syz.4.2727 (12411): /proc/12410/oom_adj is deprecated, please use /proc/12410/oom_score_adj instead. [ 226.702920][T12417] lo speed is unknown, defaulting to 1000 [ 226.710432][T12417] lo speed is unknown, defaulting to 1000 [ 226.717516][T12417] lo speed is unknown, defaulting to 1000 [ 226.728677][T12417] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 226.743415][T12417] lo speed is unknown, defaulting to 1000 [ 226.751365][T12417] lo speed is unknown, defaulting to 1000 [ 226.775735][T12423] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2728'. [ 226.794402][T12417] lo speed is unknown, defaulting to 1000 [ 226.802014][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 226.802028][ T29] audit: type=1326 audit(1770803045.937:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 226.814961][T12417] lo speed is unknown, defaulting to 1000 [ 226.832370][ T29] audit: type=1326 audit(1770803045.937:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 226.839027][T12417] lo speed is unknown, defaulting to 1000 [ 226.861633][ T29] audit: type=1326 audit(1770803045.937:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 226.890746][ T29] audit: type=1326 audit(1770803045.937:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 226.914261][ T29] audit: type=1326 audit(1770803045.937:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 226.921477][T12430] netlink: 'syz.5.2729': attribute type 19 has an invalid length. [ 226.938616][ T29] audit: type=1326 audit(1770803045.937:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 226.946473][T12430] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2729'. [ 227.106321][ T29] audit: type=1326 audit(1770803046.026:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b579aeb9 code=0x7ffc0000 [ 227.130521][ T29] audit: type=1326 audit(1770803046.026:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f01b579ac22 code=0x7ffc0000 [ 227.154025][ T29] audit: type=1326 audit(1770803046.026:9057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f01b579acb7 code=0x7ffc0000 [ 227.177462][ T29] audit: type=1326 audit(1770803046.026:9058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12426 comm="syz.5.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f01b5757c51 code=0x7ffc0000 [ 227.220202][T12446] FAULT_INJECTION: forcing a failure. [ 227.220202][T12446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.234075][T12446] CPU: 1 UID: 0 PID: 12446 Comm: syz.4.2733 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.234111][T12446] Tainted: [W]=WARN [ 227.234118][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.234131][T12446] Call Trace: [ 227.234138][T12446] [ 227.234146][T12446] __dump_stack+0x1d/0x30 [ 227.234181][T12446] dump_stack_lvl+0x95/0xd0 [ 227.234262][T12446] dump_stack+0x15/0x1b [ 227.234283][T12446] should_fail_ex+0x263/0x280 [ 227.234316][T12446] should_fail+0xb/0x20 [ 227.234373][T12446] should_fail_usercopy+0x1a/0x20 [ 227.234454][T12446] _copy_from_user+0x1c/0xb0 [ 227.234478][T12446] mptcp_getsockopt+0x7da/0x1850 [ 227.234586][T12446] ? lockref_put_return+0xf7/0x130 [ 227.234612][T12446] ? __rcu_read_unlock+0x4e/0x70 [ 227.234644][T12446] ? path_openat+0x1d94/0x23c0 [ 227.234680][T12446] ? path_openat+0x1e8e/0x23c0 [ 227.234840][T12446] ? _parse_integer_limit+0x170/0x190 [ 227.234979][T12446] ? _parse_integer+0x27/0x40 [ 227.235007][T12446] ? __rcu_read_unlock+0x4e/0x70 [ 227.235038][T12446] ? avc_has_perm_noaudit+0xab/0x130 [ 227.235090][T12446] ? avc_has_perm+0x101/0x190 [ 227.235184][T12446] ? selinux_socket_getsockopt+0x192/0x1c0 [ 227.235208][T12446] sock_common_getsockopt+0x60/0x70 [ 227.235267][T12446] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 227.235294][T12446] do_sock_getsockopt+0x1c4/0x210 [ 227.235389][T12446] __x64_sys_getsockopt+0x11d/0x1a0 [ 227.235420][T12446] x64_sys_call+0x2dc7/0x3000 [ 227.235443][T12446] do_syscall_64+0xc0/0x2a0 [ 227.235622][T12446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.235683][T12446] RIP: 0033:0x7ffbe09baeb9 [ 227.235701][T12446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.235717][T12446] RSP: 002b:00007ffbdf417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 227.235743][T12446] RAX: ffffffffffffffda RBX: 00007ffbe0c35fa0 RCX: 00007ffbe09baeb9 [ 227.235758][T12446] RDX: 0000000000000002 RSI: 000000000000011c RDI: 0000000000000003 [ 227.235770][T12446] RBP: 00007ffbdf417090 R08: 0000200000000140 R09: 0000000000000000 [ 227.235783][T12446] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 227.235798][T12446] R13: 00007ffbe0c36038 R14: 00007ffbe0c35fa0 R15: 00007ffe5add1958 [ 227.235820][T12446] [ 227.506010][T12461] set_capacity_and_notify: 6 callbacks suppressed [ 227.506026][T12461] loop4: detected capacity change from 0 to 512 [ 227.534373][T12461] EXT4-fs: Ignoring removed i_version option [ 227.598026][T12461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.611504][T12461] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.662146][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.708175][T12491] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2742'. [ 227.807161][T12504] loop4: detected capacity change from 0 to 512 [ 227.833000][T12504] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2745: ea_inode with extended attributes [ 227.855514][T12510] netlink: 'syz.1.2744': attribute type 27 has an invalid length. [ 227.859167][T12504] EXT4-fs (loop4): Remounting filesystem read-only [ 227.870155][T12504] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 227.880353][T12504] EXT4-fs (loop4): 1 orphan inode deleted [ 227.895160][T12504] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.957715][T12504] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 227.987268][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.994537][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.191920][T12510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.203187][T12510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.287807][ T5508] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.313073][ T5508] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.322448][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2752'. [ 228.352049][ T5508] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.357490][T12542] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2753'. [ 228.404626][ T5508] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.677538][T12577] –: renamed from vxcan1 [ 228.772981][T12575] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.807417][T12575] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.845743][T12591] program syz.5.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.887705][T12575] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.951618][T12575] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.024453][ T5507] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.050479][ T5507] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.073089][ T5506] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.102915][ T5506] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.242866][T12618] loop4: detected capacity change from 0 to 256 [ 229.249820][T12618] vfat: Unknown parameter '' [ 229.496385][T12635] FAULT_INJECTION: forcing a failure. [ 229.496385][T12635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.504660][T12636] loop4: detected capacity change from 0 to 512 [ 229.509510][T12635] CPU: 1 UID: 0 PID: 12635 Comm: syz.5.2785 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.509540][T12635] Tainted: [W]=WARN [ 229.509546][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.509565][T12635] Call Trace: [ 229.509573][T12635] [ 229.509581][T12635] __dump_stack+0x1d/0x30 [ 229.509608][T12635] dump_stack_lvl+0x95/0xd0 [ 229.509682][T12635] dump_stack+0x15/0x1b [ 229.509703][T12635] should_fail_ex+0x263/0x280 [ 229.509800][T12635] should_fail+0xb/0x20 [ 229.509828][T12635] should_fail_usercopy+0x1a/0x20 [ 229.509866][T12635] _copy_from_iter+0xcf/0xea0 [ 229.509887][T12635] ? __alloc_skb+0x397/0x4b0 [ 229.509962][T12635] ? __alloc_skb+0x219/0x4b0 [ 229.509996][T12635] netlink_sendmsg+0x4ae/0x6f0 [ 229.510047][T12635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.510067][T12635] ____sys_sendmsg+0x5af/0x600 [ 229.510090][T12635] ___sys_sendmsg+0x195/0x1e0 [ 229.510121][T12635] __x64_sys_sendmsg+0xd4/0x160 [ 229.510172][T12635] x64_sys_call+0x17ba/0x3000 [ 229.510197][T12635] do_syscall_64+0xc0/0x2a0 [ 229.510285][T12635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.510308][T12635] RIP: 0033:0x7f01b579aeb9 [ 229.510325][T12635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.510343][T12635] RSP: 002b:00007f01b41f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.510387][T12635] RAX: ffffffffffffffda RBX: 00007f01b5a15fa0 RCX: 00007f01b579aeb9 [ 229.510505][T12635] RDX: 0000000020008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 229.510520][T12635] RBP: 00007f01b41f7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.510534][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.510611][T12635] R13: 00007f01b5a16038 R14: 00007f01b5a15fa0 R15: 00007ffc5475e898 [ 229.510632][T12635] [ 229.731690][T12636] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2784: invalid indirect mapped block 256 (level 2) [ 229.761956][T12636] EXT4-fs (loop4): 2 truncates cleaned up [ 229.768130][T12636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.819441][T12642] loop5: detected capacity change from 0 to 512 [ 229.842952][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.862525][T12642] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 229.919860][T12642] EXT4-fs (loop5): mount failed [ 229.945603][T12649] loop1: detected capacity change from 0 to 256 [ 229.945834][T12648] loop9: detected capacity change from 0 to 512 [ 229.984185][T12649] /dev/loop1: Can't open blockdev [ 230.057366][T12648] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.2789: ea_inode with extended attributes [ 230.127338][T12668] netlink: 'syz.5.2796': attribute type 21 has an invalid length. [ 230.136859][T12648] EXT4-fs (loop9): Remounting filesystem read-only [ 230.136914][T12648] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 230.136936][T12648] EXT4-fs (loop9): 1 orphan inode deleted [ 230.137454][T12648] EXT4-fs (loop9): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.139877][T12648] EXT4-fs (loop9): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 230.409128][T12680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.479803][T12680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.608739][ T5508] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.698195][ T5508] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.761694][ T5508] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.776284][T12698] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 230.791214][T12698] SELinux: failed to load policy [ 230.798905][ T5508] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.818831][T12703] netlink: 'syz.6.2807': attribute type 21 has an invalid length. [ 230.839763][T12689] lo speed is unknown, defaulting to 1000 [ 231.021585][ T5508] bond0 (unregistering): Released all slaves [ 231.032086][ T5508] bond1 (unregistering): Released all slaves [ 231.087295][ T5508] hsr_slave_0: left promiscuous mode [ 231.103489][ T5508] hsr_slave_1: left promiscuous mode [ 231.277438][T12689] chnl_net:caif_netlink_parms(): no params data found [ 231.342596][T12743] __nla_validate_parse: 14 callbacks suppressed [ 231.342612][T12743] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2815'. [ 231.420442][T12750] FAULT_INJECTION: forcing a failure. [ 231.420442][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 231.433919][T12750] CPU: 0 UID: 0 PID: 12750 Comm: syz.4.2816 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.433951][T12750] Tainted: [W]=WARN [ 231.433958][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.434020][T12750] Call Trace: [ 231.434026][T12750] [ 231.434035][T12750] __dump_stack+0x1d/0x30 [ 231.434062][T12750] dump_stack_lvl+0x95/0xd0 [ 231.434085][T12750] dump_stack+0x15/0x1b [ 231.434128][T12750] should_fail_ex+0x263/0x280 [ 231.434157][T12750] should_failslab+0x8c/0xb0 [ 231.434181][T12750] __kmalloc_cache_noprof+0x64/0x4a0 [ 231.434265][T12750] ? rtnl_newlink+0x5c/0x1370 [ 231.434286][T12750] ? __pfx_rtnl_newlink+0x10/0x10 [ 231.434359][T12750] rtnl_newlink+0x5c/0x1370 [ 231.434390][T12750] ? xas_load+0x413/0x430 [ 231.434443][T12750] ? css_rstat_updated+0xbb/0x280 [ 231.434466][T12750] ? xas_load+0x413/0x430 [ 231.434491][T12750] ? __rcu_read_unlock+0x4e/0x70 [ 231.434547][T12750] ? xa_load+0xb1/0xe0 [ 231.434575][T12750] ? __rcu_read_unlock+0x4e/0x70 [ 231.434749][T12750] ? avc_has_perm_noaudit+0xab/0x130 [ 231.434779][T12750] ? cred_has_capability+0x224/0x290 [ 231.434877][T12750] ? selinux_capable+0x31/0x40 [ 231.434905][T12750] ? security_capable+0x7b/0x90 [ 231.434981][T12750] ? ns_capable+0x7c/0xb0 [ 231.435006][T12750] ? __pfx_rtnl_newlink+0x10/0x10 [ 231.435030][T12750] rtnetlink_rcv_msg+0x64b/0x720 [ 231.435055][T12750] ? avc_has_perm_noaudit+0xab/0x130 [ 231.435090][T12750] netlink_rcv_skb+0x123/0x220 [ 231.435168][T12750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.435272][T12750] rtnetlink_rcv+0x1c/0x30 [ 231.435291][T12750] netlink_unicast+0x5c0/0x690 [ 231.435320][T12750] netlink_sendmsg+0x5c8/0x6f0 [ 231.435366][T12750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.435383][T12750] ____sys_sendmsg+0x5af/0x600 [ 231.435404][T12750] ___sys_sendmsg+0x195/0x1e0 [ 231.435432][T12750] __x64_sys_sendmsg+0xd4/0x160 [ 231.435485][T12750] x64_sys_call+0x17ba/0x3000 [ 231.435512][T12750] do_syscall_64+0xc0/0x2a0 [ 231.435542][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.435565][T12750] RIP: 0033:0x7ffbe09baeb9 [ 231.435649][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.435675][T12750] RSP: 002b:00007ffbdf417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.435698][T12750] RAX: ffffffffffffffda RBX: 00007ffbe0c35fa0 RCX: 00007ffbe09baeb9 [ 231.435803][T12750] RDX: 0000000020008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 231.435824][T12750] RBP: 00007ffbdf417090 R08: 0000000000000000 R09: 0000000000000000 [ 231.435839][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.435853][T12750] R13: 00007ffbe0c36038 R14: 00007ffbe0c35fa0 R15: 00007ffe5add1958 [ 231.435874][T12750] [ 231.459850][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2818'. [ 231.554808][T12689] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.741409][T12689] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.759496][T12689] bridge_slave_0: entered allmulticast mode [ 231.770085][T12689] bridge_slave_0: entered promiscuous mode [ 231.776974][T12689] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.784044][T12689] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.791298][T12689] bridge_slave_1: entered allmulticast mode [ 231.800027][T12689] bridge_slave_1: entered promiscuous mode [ 231.835137][T12689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.845254][T12762] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2820'. [ 231.854353][T12689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.876116][T12732] lo speed is unknown, defaulting to 1000 [ 231.919627][T12772] netlink: 'syz.1.2823': attribute type 21 has an invalid length. [ 231.931094][T12768] netlink: 'syz.4.2822': attribute type 1 has an invalid length. [ 231.939801][T12772] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2823'. [ 231.956177][T12763] xt_hashlimit: size too large, truncated to 1048576 [ 231.963733][T12767] netlink: 'syz.4.2822': attribute type 1 has an invalid length. [ 231.994876][T12689] team0: Port device team_slave_0 added [ 232.024986][T12689] team0: Port device team_slave_1 added [ 232.033130][T12768] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 232.033542][T12767] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 232.073305][T12689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.089250][T12689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.115913][T12689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.148987][T12689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.156022][T12689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.182792][T12689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.210666][T12689] hsr_slave_0: entered promiscuous mode [ 232.216908][T12689] hsr_slave_1: entered promiscuous mode [ 232.222777][T12689] debugfs: 'hsr0' already exists in 'hsr' [ 232.228566][T12689] Cannot create hsr debugfs directory [ 232.363330][T12732] chnl_net:caif_netlink_parms(): no params data found [ 232.542852][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.550691][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.566343][T12815] loop4: detected capacity change from 0 to 512 [ 232.640606][T12732] bridge_slave_0: entered allmulticast mode [ 232.655804][T12732] bridge_slave_0: entered promiscuous mode [ 232.686658][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.693840][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.747216][T12732] bridge_slave_1: entered allmulticast mode [ 232.760407][T12732] bridge_slave_1: entered promiscuous mode [ 232.822644][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.847001][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.933216][T12732] team0: Port device team_slave_0 added [ 232.953223][T12732] team0: Port device team_slave_1 added [ 232.962620][T12834] lo speed is unknown, defaulting to 1000 [ 233.002495][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.009459][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.036164][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.089053][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.096709][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.123378][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.176189][T12870] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2835'. [ 233.214184][T12732] hsr_slave_0: entered promiscuous mode [ 233.220381][T12732] hsr_slave_1: entered promiscuous mode [ 233.237101][T12732] debugfs: 'hsr0' already exists in 'hsr' [ 233.243496][T12732] Cannot create hsr debugfs directory [ 233.289411][T12689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.320509][T12689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.361663][T12689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.409372][T12882] xt_hashlimit: size too large, truncated to 1048576 [ 233.423884][T12689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.587377][T12689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.626429][T12689] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.721979][ T5506] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.729130][ T5506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.782374][ T5506] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.789477][ T5506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.860053][ T5508] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.903811][T12834] chnl_net:caif_netlink_parms(): no params data found [ 233.963973][ T5508] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.072357][ T5508] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.147055][T12834] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.154174][T12834] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.163383][T12834] bridge_slave_0: entered allmulticast mode [ 234.179114][T12834] bridge_slave_0: entered promiscuous mode [ 234.190125][T12834] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.197253][T12834] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.204701][T12834] bridge_slave_1: entered allmulticast mode [ 234.214541][T12834] bridge_slave_1: entered promiscuous mode [ 234.222945][ T5508] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.255938][T12930] FAULT_INJECTION: forcing a failure. [ 234.255938][T12930] name failslab, interval 1, probability 0, space 0, times 0 [ 234.269390][T12930] CPU: 0 UID: 0 PID: 12930 Comm: syz.4.2838 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.269422][T12930] Tainted: [W]=WARN [ 234.269428][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.269440][T12930] Call Trace: [ 234.269446][T12930] [ 234.269453][T12930] __dump_stack+0x1d/0x30 [ 234.269477][T12930] dump_stack_lvl+0x95/0xd0 [ 234.269515][T12930] dump_stack+0x15/0x1b [ 234.269607][T12930] should_fail_ex+0x263/0x280 [ 234.269637][T12930] should_failslab+0x8c/0xb0 [ 234.269739][T12930] __kvmalloc_node_noprof+0x148/0x680 [ 234.269767][T12930] ? alloc_netdev_mqs+0xa5/0xa40 [ 234.269815][T12930] ? vsnprintf+0x7ee/0x860 [ 234.269834][T12930] ? __pfx_geneve_setup+0x10/0x10 [ 234.269866][T12930] alloc_netdev_mqs+0xa5/0xa40 [ 234.269979][T12930] rtnl_create_link+0x239/0x720 [ 234.270012][T12930] rtnl_newlink_create+0x174/0x650 [ 234.270111][T12930] rtnl_newlink+0xf5b/0x1370 [ 234.270138][T12930] ? xas_load+0x413/0x430 [ 234.270196][T12930] ? css_rstat_updated+0xbb/0x280 [ 234.270225][T12930] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 234.270252][T12930] ? __rcu_read_unlock+0x4e/0x70 [ 234.270280][T12930] ? __rcu_read_unlock+0x4e/0x70 [ 234.270346][T12930] ? avc_has_perm_noaudit+0xab/0x130 [ 234.270377][T12930] ? cred_has_capability+0x224/0x290 [ 234.270405][T12930] ? selinux_capable+0x31/0x40 [ 234.270485][T12930] ? security_capable+0x7b/0x90 [ 234.270514][T12930] ? ns_capable+0x7c/0xb0 [ 234.270559][T12930] ? __pfx_rtnl_newlink+0x10/0x10 [ 234.270656][T12930] rtnetlink_rcv_msg+0x64b/0x720 [ 234.270759][T12930] ? avc_has_perm_noaudit+0xab/0x130 [ 234.270790][T12930] netlink_rcv_skb+0x123/0x220 [ 234.270875][T12930] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.270962][T12930] rtnetlink_rcv+0x1c/0x30 [ 234.270983][T12930] netlink_unicast+0x5c0/0x690 [ 234.271063][T12930] netlink_sendmsg+0x5c8/0x6f0 [ 234.271083][T12930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.271109][T12930] ____sys_sendmsg+0x5af/0x600 [ 234.271131][T12930] ___sys_sendmsg+0x195/0x1e0 [ 234.271237][T12930] __x64_sys_sendmsg+0xd4/0x160 [ 234.271367][T12930] x64_sys_call+0x17ba/0x3000 [ 234.271391][T12930] do_syscall_64+0xc0/0x2a0 [ 234.271488][T12930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.271510][T12930] RIP: 0033:0x7ffbe09baeb9 [ 234.271525][T12930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.271542][T12930] RSP: 002b:00007ffbdf417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.271621][T12930] RAX: ffffffffffffffda RBX: 00007ffbe0c35fa0 RCX: 00007ffbe09baeb9 [ 234.271636][T12930] RDX: 0000000020008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 234.271649][T12930] RBP: 00007ffbdf417090 R08: 0000000000000000 R09: 0000000000000000 [ 234.271663][T12930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.271682][T12930] R13: 00007ffbe0c36038 R14: 00007ffbe0c35fa0 R15: 00007ffe5add1958 [ 234.271701][T12930] [ 234.287291][T12689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.586940][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 234.657364][T12834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.663353][T12961] FAULT_INJECTION: forcing a failure. [ 234.663353][T12961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.680140][T12961] CPU: 0 UID: 0 PID: 12961 Comm: syz.9.2842 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.680204][T12961] Tainted: [W]=WARN [ 234.680211][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.680223][T12961] Call Trace: [ 234.680228][T12961] [ 234.680236][T12961] __dump_stack+0x1d/0x30 [ 234.680279][T12961] dump_stack_lvl+0x95/0xd0 [ 234.680301][T12961] dump_stack+0x15/0x1b [ 234.680319][T12961] should_fail_ex+0x263/0x280 [ 234.680351][T12961] should_fail+0xb/0x20 [ 234.680407][T12961] should_fail_usercopy+0x1a/0x20 [ 234.680437][T12961] _copy_to_user+0x20/0xa0 [ 234.680458][T12961] simple_read_from_buffer+0xb5/0x130 [ 234.680494][T12961] proc_fail_nth_read+0x10e/0x150 [ 234.680642][T12961] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.680666][T12961] vfs_read+0x1ab/0x7f0 [ 234.680683][T12961] ? sock_common_getsockopt+0x60/0x70 [ 234.680787][T12961] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 234.680812][T12961] ? do_sock_getsockopt+0x1c4/0x210 [ 234.680884][T12961] ksys_read+0xdc/0x1a0 [ 234.680901][T12961] __x64_sys_read+0x40/0x50 [ 234.680919][T12961] x64_sys_call+0x2889/0x3000 [ 234.680945][T12961] do_syscall_64+0xc0/0x2a0 [ 234.681015][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.681036][T12961] RIP: 0033:0x7fe1355db78e [ 234.681052][T12961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.681072][T12961] RSP: 002b:00007fe134076fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.681158][T12961] RAX: ffffffffffffffda RBX: 00007fe1340776c0 RCX: 00007fe1355db78e [ 234.681173][T12961] RDX: 000000000000000f RSI: 00007fe1340770a0 RDI: 0000000000000004 [ 234.681188][T12961] RBP: 00007fe134077090 R08: 0000000000000000 R09: 0000000000000000 [ 234.681202][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.681237][T12961] R13: 00007fe135896038 R14: 00007fe135895fa0 R15: 00007ffe6d20f6e8 [ 234.681254][T12961] [ 234.722141][T12834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.770429][T12967] netlink: 'syz.9.2844': attribute type 21 has an invalid length. [ 234.840017][ T5508] bridge_slave_1: left allmulticast mode [ 234.840053][ T5508] bridge_slave_1: left promiscuous mode [ 234.840174][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.944865][ T5508] bridge_slave_0: left allmulticast mode [ 234.950698][ T5508] bridge_slave_0: left promiscuous mode [ 234.956380][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.971775][ T5508] bridge_slave_1: left allmulticast mode [ 234.977429][ T5508] bridge_slave_1: left promiscuous mode [ 234.983522][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.022811][ T5508] bridge_slave_0: left allmulticast mode [ 235.028517][ T5508] bridge_slave_0: left promiscuous mode [ 235.035268][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.098909][ T5508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.126897][ T5508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.139669][ T5508] bond0 (unregistering): Released all slaves [ 235.223853][ T5508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.233194][ T5508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.242525][ T5508] bond0 (unregistering): Released all slaves [ 235.249790][ T5508] bond1 (unregistering): Released all slaves [ 235.257809][ T5508] bond2 (unregistering): Released all slaves [ 235.274173][T12967] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2844'. [ 235.299487][T12834] team0: Port device team_slave_0 added [ 235.306430][T12834] team0: Port device team_slave_1 added [ 235.335067][T12834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.342029][T12834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.368666][T12834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.385558][T12834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.393312][T12834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.419280][T12834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.433893][ T5508] hsr_slave_0: left promiscuous mode [ 235.439473][ T5508] hsr_slave_1: left promiscuous mode [ 235.445435][ T5508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.453176][ T5508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.462293][ T5508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.474352][ T5508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.561967][ T5508] team0 (unregistering): Port device team_slave_1 removed [ 235.588480][ T5508] team0 (unregistering): Port device team_slave_0 removed [ 235.619964][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 235.619978][ T29] audit: type=1400 audit(1770803054.707:9221): avc: denied { create } for pid=13013 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.710381][T13032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2850'. [ 235.720849][ T5508] team0 (unregistering): Port device team_slave_1 removed [ 235.736978][ T5508] team0 (unregistering): Port device team_slave_0 removed [ 235.803828][T12689] veth0_vlan: entered promiscuous mode [ 235.815246][T12689] veth1_vlan: entered promiscuous mode [ 235.863837][T12834] hsr_slave_0: entered promiscuous mode [ 235.870844][T13047] loop4: detected capacity change from 0 to 512 [ 235.872992][T12834] hsr_slave_1: entered promiscuous mode [ 235.920461][T12689] veth0_macvtap: entered promiscuous mode [ 235.929982][T13047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.942834][T13047] ext4 filesystem being mounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.954456][ T29] audit: type=1400 audit(1770803055.035:9222): avc: denied { setattr } for pid=13046 comm="syz.4.2853" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.955972][T13047] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2853: corrupted inode contents [ 235.994950][T13047] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.2853: mark_inode_dirty error [ 236.007760][T13047] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2853: corrupted inode contents [ 236.022593][T12689] veth1_macvtap: entered promiscuous mode [ 236.031028][T13010] lo speed is unknown, defaulting to 1000 [ 236.034900][T12689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.060379][T12689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.092808][ T5507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.109648][ T5507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.139283][ T5507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.148337][ T5507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.174466][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.242278][T13079] FAULT_INJECTION: forcing a failure. [ 236.242278][T13079] name failslab, interval 1, probability 0, space 0, times 0 [ 236.255845][T13079] CPU: 1 UID: 0 PID: 13079 Comm: syz.4.2854 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.255875][T13079] Tainted: [W]=WARN [ 236.255883][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.255895][T13079] Call Trace: [ 236.255902][T13079] [ 236.255909][T13079] __dump_stack+0x1d/0x30 [ 236.256013][T13079] dump_stack_lvl+0x95/0xd0 [ 236.256035][T13079] dump_stack+0x15/0x1b [ 236.256056][T13079] should_fail_ex+0x263/0x280 [ 236.256174][T13079] should_failslab+0x8c/0xb0 [ 236.256199][T13079] __kmalloc_node_noprof+0xbd/0x590 [ 236.256225][T13079] ? alloc_slab_obj_exts+0x3e/0xd0 [ 236.256249][T13079] alloc_slab_obj_exts+0x3e/0xd0 [ 236.256281][T13079] __memcg_slab_post_alloc_hook+0x23f/0x530 [ 236.256314][T13079] ? __list_add_valid_or_report+0x38/0xe0 [ 236.256341][T13079] __kvmalloc_node_noprof+0x4cf/0x680 [ 236.256407][T13079] ? alloc_netdev_mqs+0xa5/0xa40 [ 236.256484][T13079] ? __pfx_geneve_setup+0x10/0x10 [ 236.256507][T13079] alloc_netdev_mqs+0xa5/0xa40 [ 236.256542][T13079] rtnl_create_link+0x239/0x720 [ 236.256658][T13079] rtnl_newlink_create+0x174/0x650 [ 236.256691][T13079] rtnl_newlink+0xf5b/0x1370 [ 236.256720][T13079] ? __rcu_read_unlock+0x4e/0x70 [ 236.256796][T13079] ? css_rstat_updated+0xbb/0x280 [ 236.256822][T13079] ? __account_obj_stock+0x211/0x350 [ 236.256846][T13079] ? __rcu_read_unlock+0x4e/0x70 [ 236.256918][T13079] ? avc_has_perm_noaudit+0xab/0x130 [ 236.256953][T13079] ? cred_has_capability+0x224/0x290 [ 236.256998][T13079] ? selinux_capable+0x31/0x40 [ 236.257017][T13079] ? security_capable+0x7b/0x90 [ 236.257085][T13079] ? ns_capable+0x7c/0xb0 [ 236.257112][T13079] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.257136][T13079] rtnetlink_rcv_msg+0x64b/0x720 [ 236.257160][T13079] ? avc_has_perm_noaudit+0xab/0x130 [ 236.257283][T13079] netlink_rcv_skb+0x123/0x220 [ 236.257366][T13079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.257395][T13079] rtnetlink_rcv+0x1c/0x30 [ 236.257417][T13079] netlink_unicast+0x5c0/0x690 [ 236.257449][T13079] netlink_sendmsg+0x5c8/0x6f0 [ 236.257493][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.257575][T13079] ____sys_sendmsg+0x5af/0x600 [ 236.257598][T13079] ___sys_sendmsg+0x195/0x1e0 [ 236.257628][T13079] __x64_sys_sendmsg+0xd4/0x160 [ 236.257680][T13079] x64_sys_call+0x17ba/0x3000 [ 236.257706][T13079] do_syscall_64+0xc0/0x2a0 [ 236.257779][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.257802][T13079] RIP: 0033:0x7ffbe09baeb9 [ 236.257819][T13079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.257838][T13079] RSP: 002b:00007ffbdf417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.257953][T13079] RAX: ffffffffffffffda RBX: 00007ffbe0c35fa0 RCX: 00007ffbe09baeb9 [ 236.257972][T13079] RDX: 0000000020008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 236.257987][T13079] RBP: 00007ffbdf417090 R08: 0000000000000000 R09: 0000000000000000 [ 236.258001][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.258033][T13079] R13: 00007ffbe0c36038 R14: 00007ffbe0c35fa0 R15: 00007ffe5add1958 [ 236.258052][T13079] [ 236.297567][T12732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.346043][T13010] chnl_net:caif_netlink_parms(): no params data found [ 236.594493][T12732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.608400][T12732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.629311][T12732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.776486][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.844583][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.884768][ T5510] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.891864][ T5510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.913207][T13010] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.920284][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.947476][T13010] bridge_slave_0: entered allmulticast mode [ 236.954765][T13010] bridge_slave_0: entered promiscuous mode [ 236.971531][T13010] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.978597][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.986584][T13010] bridge_slave_1: entered allmulticast mode [ 236.993447][T13010] bridge_slave_1: entered promiscuous mode [ 237.042136][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.049281][ T5507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.100724][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 237.119636][T13010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.158744][T13010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.171577][T12732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.182044][T12732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.218838][T13010] team0: Port device team_slave_0 added [ 237.226049][T12834] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.239813][T12834] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.257020][T13010] team0: Port device team_slave_1 added [ 237.263822][T12834] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 237.278515][T13149] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2863'. [ 237.290290][T12834] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 237.290366][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 237.350464][T13010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.357469][T13010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.384033][T13010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.397386][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 237.413781][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 237.424845][T13010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.431797][T13010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.458452][T13010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.479280][T13161] netlink: 'syz.4.2864': attribute type 1 has an invalid length. [ 237.506810][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.639939][T13010] hsr_slave_0: entered promiscuous mode [ 237.661939][T13010] hsr_slave_1: entered promiscuous mode [ 237.664374][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 237.678938][T13010] debugfs: 'hsr0' already exists in 'hsr' [ 237.684706][T13010] Cannot create hsr debugfs directory [ 237.706948][T12834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.715998][T13185] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2867'. [ 237.733821][T12732] veth0_vlan: entered promiscuous mode [ 237.770812][T12834] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.803550][T12732] veth1_vlan: entered promiscuous mode [ 237.819684][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.826769][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.878021][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.885106][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.912669][T13197] netlink: 'syz.4.2871': attribute type 21 has an invalid length. [ 237.927971][T12732] veth0_macvtap: entered promiscuous mode [ 237.974810][T13197] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2871'. [ 237.985138][T12732] veth1_macvtap: entered promiscuous mode [ 238.039861][T12732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.078868][ T29] audit: type=1400 audit(1770803057.155:9223): avc: denied { write } for pid=13205 comm="syz.0.2875" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 238.125300][T12732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.160231][ T5513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.191118][ T5513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.219300][ T5513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.266694][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 238.274813][ T5513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.275762][T13225] netlink: 'syz.0.2877': attribute type 12 has an invalid length. [ 238.332626][T12834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.352757][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 238.353451][ T5513] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.361892][T13225] netlink: 'syz.0.2877': attribute type 12 has an invalid length. [ 238.411230][ T5513] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.421149][T13010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.431516][T13010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.443446][T13238] loop0: detected capacity change from 0 to 1024 [ 238.460937][ T5513] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.502217][T12012] bond0: (slave syz_tun): Releasing backup interface [ 238.550707][T13010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.562616][T13010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.574162][ T5513] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.623984][ T5507] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.699100][ T5507] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.752042][ T5507] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.795594][T13244] netlink: 'syz.0.2881': attribute type 5 has an invalid length. [ 238.807058][T13010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.822962][ T5507] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.845533][T12834] veth0_vlan: entered promiscuous mode [ 238.888953][T12834] veth1_vlan: entered promiscuous mode [ 238.913440][T13010] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.953252][ T5507] bridge_slave_1: left allmulticast mode [ 238.959004][ T5507] bridge_slave_1: left promiscuous mode [ 238.964699][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.973392][ T5507] bridge_slave_0: left allmulticast mode [ 238.979037][ T5507] bridge_slave_0: left promiscuous mode [ 238.984917][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.193888][ T5507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.203192][ T5507] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 239.211477][ T5507] bond0 (unregistering): Released all slaves [ 239.218931][ T5507] bond1 (unregistering): Released all slaves [ 239.226581][ T5507] bond2 (unregistering): Released all slaves [ 239.234607][ T5507] bond3 (unregistering): Released all slaves [ 239.244920][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.251980][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.263670][T13280] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 239.271893][T13259] lo speed is unknown, defaulting to 1000 [ 239.276317][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.293002][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.316376][ T5507] tipc: Disabling bearer [ 239.325399][ T5507] tipc: Left network mode [ 239.349585][ T5507] hsr_slave_0: left promiscuous mode [ 239.360889][ T5507] hsr_slave_1: left promiscuous mode [ 239.366735][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.374899][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.429288][ T5507] team0 (unregistering): Port device team_slave_1 removed [ 239.439666][ T29] audit: type=1400 audit(1770803058.508:9224): avc: denied { listen } for pid=13293 comm="syz.3.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 239.462321][ T5507] team0 (unregistering): Port device team_slave_0 removed [ 239.464542][ T29] audit: type=1400 audit(1770803058.528:9225): avc: denied { accept } for pid=13293 comm="syz.3.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 239.503979][T13296] loop0: detected capacity change from 0 to 512 [ 239.504968][T12834] veth0_macvtap: entered promiscuous mode [ 239.544786][T13296] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 239.552337][T12834] veth1_macvtap: entered promiscuous mode [ 239.554987][T13296] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.575785][T13296] EXT4-fs (loop0): mount failed [ 239.608194][T12834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.621590][T12834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.646838][ T5513] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.662596][T13010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.700109][ T5513] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.729133][ T5513] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.741854][ T5510] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.767976][ T5507] IPVS: stop unused estimator thread 0... [ 239.785569][T13322] loop7: detected capacity change from 0 to 1024 [ 239.798617][T13259] chnl_net:caif_netlink_parms(): no params data found [ 239.803840][T13326] loop2: detected capacity change from 0 to 7 [ 239.817550][T13322] EXT4-fs: Ignoring removed orlov option [ 239.823352][T13322] EXT4-fs: inline encryption not supported [ 239.907717][T13322] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.921677][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.928957][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.954801][T13259] bridge_slave_0: entered allmulticast mode [ 239.970611][T13259] bridge_slave_0: entered promiscuous mode [ 239.981215][T12834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.002827][ T29] audit: type=1326 audit(1770803059.065:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc8daeb9 code=0x7ffc0000 [ 240.026472][ T29] audit: type=1326 audit(1770803059.065:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdffc8daeb9 code=0x7ffc0000 [ 240.050014][ T29] audit: type=1326 audit(1770803059.065:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffc8daeb9 code=0x7ffc0000 [ 240.073582][ T29] audit: type=1326 audit(1770803059.065:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.0.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fdffc8daeb9 code=0x7ffc0000 [ 240.097476][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.104599][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.114372][T13259] bridge_slave_1: entered allmulticast mode [ 240.120997][T13259] bridge_slave_1: entered promiscuous mode [ 240.151402][T13010] veth0_vlan: entered promiscuous mode [ 240.164300][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.175430][T13010] veth1_vlan: entered promiscuous mode [ 240.191120][T13010] veth0_macvtap: entered promiscuous mode [ 240.206514][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.216745][T13010] veth1_macvtap: entered promiscuous mode [ 240.224686][T13373] netlink: 'syz.7.2903': attribute type 46 has an invalid length. [ 240.253119][T13010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.272848][T13373] vlan0: entered promiscuous mode [ 240.318724][T13259] team0: Port device team_slave_0 added [ 240.331879][T13010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.364781][T13259] team0: Port device team_slave_1 added [ 240.387542][ T5506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.436171][ T5506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.447489][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.454596][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.480702][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.518361][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.525389][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.551299][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.590709][ T5506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.636786][ T5506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.740374][T13410] tipc: Enabling of bearer rejected, failed to enable media [ 240.757423][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 240.757441][ T29] audit: type=1326 audit(1770803059.811:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ef3caeb9 code=0x7ffc0000 [ 240.761414][T13259] hsr_slave_0: entered promiscuous mode [ 240.763665][ T29] audit: type=1326 audit(1770803059.811:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ef3caeb9 code=0x7ffc0000 [ 240.816076][ T29] audit: type=1326 audit(1770803059.811:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f63ef3caeb9 code=0x7ffc0000 [ 240.839688][ T29] audit: type=1326 audit(1770803059.811:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f63ef3cac22 code=0x7ffc0000 [ 240.872768][T13433] loop7: detected capacity change from 0 to 512 [ 240.879090][ T29] audit: type=1326 audit(1770803059.861:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f63ef38b78e code=0x7ffc0000 [ 240.891010][T13259] hsr_slave_1: entered promiscuous mode [ 240.902506][ T29] audit: type=1326 audit(1770803059.861:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f63ef3cace7 code=0x7ffc0000 [ 240.929116][T13433] EXT4-fs: Ignoring removed orlov option [ 240.931484][ T29] audit: type=1326 audit(1770803059.931:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63ef38b78e code=0x7ffc0000 [ 240.931510][ T29] audit: type=1326 audit(1770803059.931:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63ef3cab4b code=0x7ffc0000 [ 240.989249][T13259] debugfs: 'hsr0' already exists in 'hsr' [ 240.995041][T13259] Cannot create hsr debugfs directory [ 241.032872][T13433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.078038][ T29] audit: type=1326 audit(1770803059.971:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f63ef38b78e code=0x7ffc0000 [ 241.101615][ T29] audit: type=1326 audit(1770803059.971:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13432 comm="syz.7.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f63ef38b78e code=0x7ffc0000 [ 241.134855][T12834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.231841][T13453] netlink: 'syz.2.2918': attribute type 1 has an invalid length. [ 241.243535][T13463] loop2: detected capacity change from 0 to 7 [ 241.286129][T13465] loop3: detected capacity change from 0 to 2048 [ 241.405077][T13482] loop3: detected capacity change from 0 to 512 [ 241.465311][T13485] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 241.551393][T13259] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 241.616484][T13511] loop7: detected capacity change from 0 to 128 [ 241.633794][T13259] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 241.666826][T13259] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 241.693555][T13259] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 241.826418][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.859654][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.882766][ T5506] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.889878][ T5506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.929367][ T5506] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.936477][ T5506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.047611][T13567] loop0: detected capacity change from 0 to 1024 [ 242.089335][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.184175][T13567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.198992][T13586] __nla_validate_parse: 11 callbacks suppressed [ 242.199042][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 242.252765][T13591] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2939'. [ 242.268964][T13594] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.2937: Allocating blocks 385-513 which overlap fs metadata [ 242.357626][T13599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 242.378515][T13564] EXT4-fs (loop0): pa ffff888107a2c380: logic 16, phys. 129, len 24 [ 242.386537][T13564] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 242.413125][T13599] EXT4-fs error (device loop2): ext4_init_orphan_info:583: comm syz.2.2940: inode #0: comm syz.2.2940: iget: illegal inode # [ 242.445606][T12689] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.470045][T13599] EXT4-fs (loop2): Remounting filesystem read-only [ 242.476580][T13599] EXT4-fs (loop2): get orphan inode failed [ 242.494711][T13259] veth0_vlan: entered promiscuous mode [ 242.506429][T13599] EXT4-fs (loop2): mount failed [ 242.512196][T13259] veth1_vlan: entered promiscuous mode [ 242.541455][T13259] veth0_macvtap: entered promiscuous mode [ 242.554853][T13259] veth1_macvtap: entered promiscuous mode [ 242.575506][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.603653][T13630] /dev/loop3: Can't open blockdev [ 242.623531][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.681140][ T5510] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.692575][T13640] xt_HMARK: proto mask must be zero with L3 mode [ 242.709471][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 242.711125][T13641] xt_HMARK: proto mask must be zero with L3 mode [ 242.728802][T13642] xfrm0: entered promiscuous mode [ 242.756170][ T5508] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.794528][ T5508] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.806729][ T5506] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.869009][T13658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.886874][T13671] xt_hashlimit: size too large, truncated to 1048576 [ 242.893667][T13671] xt_hashlimit: overflow, try lower: 18446744073709551610/3 [ 242.896446][T13672] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 242.909370][T13658] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.938045][T13672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.959348][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2956'. [ 242.961669][T13681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13681 comm=syz.2.2957 [ 243.010146][T12689] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.035076][T13688] vhci_hcd vhci_hcd.0: invalid port number 111 [ 243.041390][T13688] vhci_hcd vhci_hcd.0: default hub control req: 8031 v0300 i006f l1 [ 243.051375][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 243.082798][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 243.156465][T13705] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2964'. [ 243.185128][T13709] bond2 (unregistering): Released all slaves [ 243.215867][T13718] FAULT_INJECTION: forcing a failure. [ 243.215867][T13718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.229175][T13718] CPU: 0 UID: 0 PID: 13718 Comm: syz.2.2967 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.229265][T13718] Tainted: [W]=WARN [ 243.229271][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.229283][T13718] Call Trace: [ 243.229288][T13718] [ 243.229299][T13718] __dump_stack+0x1d/0x30 [ 243.229355][T13718] dump_stack_lvl+0x95/0xd0 [ 243.229430][T13718] dump_stack+0x15/0x1b [ 243.229452][T13718] should_fail_ex+0x263/0x280 [ 243.229493][T13718] should_fail+0xb/0x20 [ 243.229518][T13718] should_fail_usercopy+0x1a/0x20 [ 243.229617][T13718] _copy_from_user+0x1c/0xb0 [ 243.229663][T13718] mptcp_getsockopt+0x7da/0x1850 [ 243.229690][T13718] ? lockref_put_return+0xf7/0x130 [ 243.229715][T13718] ? __rcu_read_unlock+0x4e/0x70 [ 243.229759][T13718] ? path_openat+0x1d94/0x23c0 [ 243.229843][T13718] ? path_openat+0x1e8e/0x23c0 [ 243.229900][T13718] ? _parse_integer_limit+0x170/0x190 [ 243.229945][T13718] ? _parse_integer+0x27/0x40 [ 243.229976][T13718] ? __rcu_read_unlock+0x4e/0x70 [ 243.230005][T13718] ? avc_has_perm_noaudit+0xab/0x130 [ 243.230039][T13718] ? avc_has_perm+0x101/0x190 [ 243.230129][T13718] ? selinux_socket_getsockopt+0x192/0x1c0 [ 243.230155][T13718] sock_common_getsockopt+0x60/0x70 [ 243.230183][T13718] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 243.230227][T13718] do_sock_getsockopt+0x1c4/0x210 [ 243.230263][T13718] __x64_sys_getsockopt+0x11d/0x1a0 [ 243.230321][T13718] x64_sys_call+0x2dc7/0x3000 [ 243.230346][T13718] do_syscall_64+0xc0/0x2a0 [ 243.230378][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.230478][T13718] RIP: 0033:0x7fc5cbf0aeb9 [ 243.230495][T13718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.230514][T13718] RSP: 002b:00007fc5ca967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 243.230535][T13718] RAX: ffffffffffffffda RBX: 00007fc5cc185fa0 RCX: 00007fc5cbf0aeb9 [ 243.230550][T13718] RDX: 0000000000000002 RSI: 000000000000011c RDI: 0000000000000003 [ 243.230632][T13718] RBP: 00007fc5ca967090 R08: 0000200000000140 R09: 0000000000000000 [ 243.230646][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.230659][T13718] R13: 00007fc5cc186038 R14: 00007fc5cc185fa0 R15: 00007ffce74c68a8 [ 243.230737][T13718] [ 243.338152][T13732] EXT4-fs: Ignoring removed orlov option [ 243.340984][T13732] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 243.500450][T13749] netlink: 'syz.7.2971': attribute type 27 has an invalid length. [ 243.517248][T13732] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2970: attempt to clear invalid blocks 2 len 1 [ 243.547754][T13732] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 243.562733][T13732] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2970: invalid indirect mapped block 1819239214 (level 0) [ 243.585915][T13732] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2970: invalid indirect mapped block 1819239214 (level 1) [ 243.602353][T13732] EXT4-fs (loop3): 1 truncate cleaned up [ 243.608461][T13732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.630553][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.637846][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.642733][T12732] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 243.668125][T12732] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 243.683288][T12732] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 243.727892][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.737892][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.758395][T13749] vlan0: left promiscuous mode [ 243.798638][ T5508] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.812663][ T5508] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.823955][ T5508] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.834104][ T5508] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.956246][T12732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.999732][ T5510] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.066272][ T5510] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.093734][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2977'. [ 244.128549][ T5510] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.204096][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2983'. [ 244.244538][ T5510] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.292209][T13827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13827 comm=syz.2.2986 [ 244.305704][T13825] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2985'. [ 244.385685][ T5510] bridge_slave_1: left allmulticast mode [ 244.391629][ T5510] bridge_slave_1: left promiscuous mode [ 244.397435][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.412041][ T5510] bridge_slave_0: left allmulticast mode [ 244.417763][ T5510] bridge_slave_0: left promiscuous mode [ 244.423611][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.601007][ T5510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.611635][ T5510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.622632][ T5510] bond0 (unregistering): Released all slaves [ 244.641791][ T5510] bond1 (unregistering): Released all slaves [ 244.687073][ T9044] IPVS: starting estimator thread 0... [ 244.737681][ T5510] hsr_slave_0: left promiscuous mode [ 244.749575][ T5510] hsr_slave_1: left promiscuous mode [ 244.758931][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.766353][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.778718][T13870] IPVS: using max 2352 ests per chain, 117600 per kthread [ 244.802319][T13886] set_capacity_and_notify: 5 callbacks suppressed [ 244.802334][T13886] loop2: detected capacity change from 0 to 512 [ 244.802706][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.822501][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.849761][T13886] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.869194][ T5510] veth1_macvtap: left promiscuous mode [ 244.874806][ T5510] veth0_macvtap: left promiscuous mode [ 244.880697][ T5510] veth1_vlan: left promiscuous mode [ 244.886066][ T5510] veth0_vlan: left promiscuous mode [ 244.919440][T13886] EXT4-fs (loop2): mount failed [ 244.938329][T13892] loop7: detected capacity change from 0 to 1024 [ 244.958559][T13892] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 245.042356][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 245.051710][T13910] netlink: 'syz.7.2998': attribute type 1 has an invalid length. [ 245.063177][ T5510] team0 (unregistering): Port device team_slave_0 removed [ 245.278215][T13816] chnl_net:caif_netlink_parms(): no params data found [ 245.419832][T13948] netlink: 'syz.7.3004': attribute type 27 has an invalid length. [ 245.461365][T13816] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.468548][T13816] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.496234][T13816] bridge_slave_0: entered allmulticast mode [ 245.513910][T13816] bridge_slave_0: entered promiscuous mode [ 245.530390][T13816] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.537512][T13816] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.556847][T13816] bridge_slave_1: entered allmulticast mode [ 245.572824][T13816] bridge_slave_1: entered promiscuous mode [ 245.600936][T13816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.615234][T13816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.646056][T13816] team0: Port device team_slave_0 added [ 245.655885][T13816] team0: Port device team_slave_1 added [ 245.717792][T13816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.724857][T13816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.750914][T13816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.798847][T13816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.805903][T13816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.831856][T13816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.882678][T13816] hsr_slave_0: entered promiscuous mode [ 245.906380][T13816] hsr_slave_1: entered promiscuous mode [ 245.931114][T13816] debugfs: 'hsr0' already exists in 'hsr' [ 245.937030][T13816] Cannot create hsr debugfs directory [ 246.170483][T14020] loop2: detected capacity change from 0 to 164 [ 246.272313][T14037] FAULT_INJECTION: forcing a failure. [ 246.272313][T14037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.285521][T14037] CPU: 0 UID: 0 PID: 14037 Comm: syz.0.3020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.285557][T14037] Tainted: [W]=WARN [ 246.285572][T14037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.285587][T14037] Call Trace: [ 246.285596][T14037] [ 246.285605][T14037] __dump_stack+0x1d/0x30 [ 246.285631][T14037] dump_stack_lvl+0x95/0xd0 [ 246.285676][T14037] dump_stack+0x15/0x1b [ 246.285710][T14037] should_fail_ex+0x263/0x280 [ 246.285739][T14037] should_fail+0xb/0x20 [ 246.285818][T14037] should_fail_usercopy+0x1a/0x20 [ 246.285875][T14037] _copy_from_user+0x1c/0xb0 [ 246.285898][T14037] do_sock_getsockopt+0xf1/0x210 [ 246.286014][T14037] __x64_sys_getsockopt+0x11d/0x1a0 [ 246.286122][T14037] x64_sys_call+0x2dc7/0x3000 [ 246.286193][T14037] do_syscall_64+0xc0/0x2a0 [ 246.286222][T14037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.286246][T14037] RIP: 0033:0x7fdffc8daeb9 [ 246.286288][T14037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.286327][T14037] RSP: 002b:00007fdffb337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 246.286350][T14037] RAX: ffffffffffffffda RBX: 00007fdffcb55fa0 RCX: 00007fdffc8daeb9 [ 246.286365][T14037] RDX: 0000000000000002 RSI: 000000000000011c RDI: 0000000000000003 [ 246.286379][T14037] RBP: 00007fdffb337090 R08: 0000200000000140 R09: 0000000000000000 [ 246.286424][T14037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.286437][T14037] R13: 00007fdffcb56038 R14: 00007fdffcb55fa0 R15: 00007ffdc0e8b258 [ 246.286459][T14037] [ 246.286831][T14040] loop7: detected capacity change from 0 to 128 [ 246.468196][ T5514] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.528116][T13816] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.544394][T14068] loop2: detected capacity change from 0 to 512 [ 246.558696][T13816] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.599614][ T5514] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.634857][T13816] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.656858][T14068] __quota_error: 41 callbacks suppressed [ 246.656876][T14068] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 246.685802][T14068] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 246.694643][T13816] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.712935][T14068] EXT4-fs (loop2): mount failed [ 246.736222][ T5514] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.825485][ T5514] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.868888][T13816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.881599][T13816] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.899920][T14121] 9p: Bad value for 'wfdno' [ 246.912422][T14119] loop7: detected capacity change from 0 to 4096 [ 246.933136][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.940218][ T5507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.965180][T14119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.989468][ T5508] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.996528][ T5508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.071427][T13816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.081837][T13816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.104263][ T5514] bridge_slave_1: left allmulticast mode [ 247.109943][ T5514] bridge_slave_1: left promiscuous mode [ 247.115570][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.158916][ T5514] bridge_slave_0: left allmulticast mode [ 247.164652][ T5514] bridge_slave_0: left promiscuous mode [ 247.170379][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.222007][T12834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.261541][ T29] audit: type=1400 audit(1770803066.291:9291): avc: denied { bind } for pid=14153 comm="syz.2.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.297448][T14163] __nla_validate_parse: 6 callbacks suppressed [ 247.297466][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 247.348384][T14169] futex_wake_op: syz.7.3040 tries to shift op by -3; fix this program [ 247.363572][ T29] audit: type=1400 audit(1770803066.391:9292): avc: denied { shutdown } for pid=14159 comm="syz.7.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.403468][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.422072][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.434467][ T5514] bond0 (unregistering): Released all slaves [ 247.566767][ T5514] hsr_slave_0: left promiscuous mode [ 247.578693][ T5514] hsr_slave_1: left promiscuous mode [ 247.586983][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.594602][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.615157][T14196] loop0: detected capacity change from 0 to 512 [ 247.623727][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.631130][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.703691][ T5514] veth1_macvtap: left promiscuous mode [ 247.709187][ T5514] veth0_macvtap: left promiscuous mode [ 247.715218][ T5514] veth1_vlan: left promiscuous mode [ 247.720653][ T5514] veth0_vlan: left promiscuous mode [ 247.727690][T14196] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 247.735828][T14196] EXT4-fs (loop0): orphan cleanup on readonly fs [ 247.743173][T14196] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (4398046510080 > 6144). [ 247.757010][T14196] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.772172][T14196] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 247.823951][T14196] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.3045: corrupted inode contents [ 247.838423][T14196] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.3045: mark_inode_dirty error [ 247.850034][T14196] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.3045: corrupted inode contents [ 247.862288][T14196] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3045: mark_inode_dirty error [ 247.873737][T14196] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.3045: corrupted inode contents [ 247.886498][T14196] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 247.901168][T14196] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.3045: corrupted inode contents [ 247.914253][T14196] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.3045: mark_inode_dirty error [ 247.926459][T14196] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 247.936656][T14196] EXT4-fs (loop0): 1 truncate cleaned up [ 247.943179][T14196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.963797][ T5514] team0 (unregistering): Port device team_slave_1 removed [ 247.983423][ T5514] team0 (unregistering): Port device team_slave_0 removed [ 248.042341][T14071] chnl_net:caif_netlink_parms(): no params data found [ 248.074927][T13816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.094424][T12689] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.140763][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.147887][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.213237][T14071] bridge_slave_0: entered allmulticast mode [ 248.233678][T14071] bridge_slave_0: entered promiscuous mode [ 248.266234][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.273348][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.292693][T14071] bridge_slave_1: entered allmulticast mode [ 248.309058][T14241] loop2: detected capacity change from 0 to 512 [ 248.310274][T14071] bridge_slave_1: entered promiscuous mode [ 248.320303][T14241] EXT4-fs: Invalid want_extra_isize 0 [ 248.336165][ T29] audit: type=1400 audit(1770803067.347:9293): avc: denied { mounton } for pid=14240 comm="syz.2.3056" path="/44/file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 248.400045][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.439780][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.508262][T14258] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3059'. [ 248.530633][T14071] team0: Port device team_slave_0 added [ 248.544800][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'. [ 248.554907][T14071] team0: Port device team_slave_1 added [ 248.586671][T14271] loop2: detected capacity change from 0 to 7 [ 248.608396][T13816] veth0_vlan: entered promiscuous mode [ 248.635419][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.642451][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.656976][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3062'. [ 248.668658][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.708117][T13816] veth1_vlan: entered promiscuous mode [ 248.734318][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.741390][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.767321][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.815824][T13816] veth0_macvtap: entered promiscuous mode [ 248.823255][T13816] veth1_macvtap: entered promiscuous mode [ 248.843739][T14071] hsr_slave_0: entered promiscuous mode [ 248.850364][T14071] hsr_slave_1: entered promiscuous mode [ 248.856349][T14071] debugfs: 'hsr0' already exists in 'hsr' [ 248.862115][T14071] Cannot create hsr debugfs directory [ 248.882323][T13816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.891851][T13816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.944244][ T5506] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.955518][ T5506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.992411][T14300] loop0: detected capacity change from 0 to 1024 [ 249.019943][ T5506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.047760][T14300] EXT4-fs: Ignoring removed bh option [ 249.063639][T14300] EXT4-fs: inline encryption not supported [ 249.078178][T14300] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 249.118946][ T5507] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.178817][T14300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 249.206335][T14300] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.3067: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.238789][T14300] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 249.249069][T14300] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.3067: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.263591][T14321] netlink: 'syz.2.3072': attribute type 27 has an invalid length. [ 249.264704][T14300] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 249.280292][T14300] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3067: Failed to acquire dquot type 0 [ 249.297102][T14300] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 249.408169][T14300] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.3067: mark_inode_dirty error [ 249.467158][T14300] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 249.477769][T14300] EXT4-fs (loop0): 1 orphan inode deleted [ 249.480655][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.484606][T14300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.490675][T14321] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.565081][ T5514] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.579775][T14300] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 16: comm syz.0.3067: lblock 0 mapped to illegal pblock 16 (length 1) [ 249.585213][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.604185][T14335] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3077'. [ 249.613215][T14335] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.616094][T14300] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 16: comm syz.0.3067: lblock 0 mapped to illegal pblock 16 (length 1) [ 249.624740][T14321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.653022][T14321] xfrm0: left promiscuous mode [ 249.671972][ T5514] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 249.680645][ T5514] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:63: Failed to release dquot type 0 [ 249.723375][T14339] openvswitch: netlink: Missing key (keys=40, expected=100) [ 249.743500][T14296] can0: slcan on ptm0. [ 249.748998][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3067'. [ 249.758082][ T5507] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.767663][ T5506] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.803088][ T5506] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.837407][ T5506] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.847830][T14295] can0 (unregistered): slcan off ptm0. [ 249.943366][T14355] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 249.953206][T14300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.970005][T14071] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 249.978385][T14300] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.3067: Invalid inode table block 1 in block_group 0 [ 249.993588][T14071] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 250.013638][T14071] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 250.020575][T14300] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 250.032684][T14071] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 250.042388][T14300] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.3067: mark_inode_dirty error [ 250.111363][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 250.139030][T14380] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3083'. [ 250.181689][T14071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.188579][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3083'. [ 250.192289][T14387] loop2: detected capacity change from 0 to 512 [ 250.207137][T14071] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.214138][T14387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 250.243548][ T29] audit: type=1400 audit(1770803069.249:9294): avc: denied { map } for pid=14384 comm="syz.0.3084" path="socket:[45441]" dev="sockfs" ino=45441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 250.268529][ T5508] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.275597][ T5508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.299544][T14387] EXT4-fs error (device loop2): ext4_init_orphan_info:620: comm syz.2.3086: orphan file block 0: bad magic [ 250.326673][T14397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14397 comm=syz.7.3087 [ 250.330528][T14071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.349841][T14071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.364084][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.371243][ T5514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.389938][T14387] EXT4-fs (loop2): mount failed [ 250.391240][ T29] audit: type=1400 audit(1770803069.408:9295): avc: denied { read write } for pid=14402 comm="syz.7.3090" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 250.465822][T14414] loop2: detected capacity change from 0 to 7 [ 250.530095][T14071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.604827][T14426] syzkaller0: entered promiscuous mode [ 250.610332][T14426] syzkaller0: entered allmulticast mode [ 250.628530][T14435] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3097'. [ 250.693592][T14440] loop0: detected capacity change from 0 to 1024 [ 250.740373][T14440] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 250.851123][T14457] netlink: 'syz.0.3097': attribute type 1 has an invalid length. [ 251.085961][T14410] vlan2: entered promiscuous mode [ 251.091186][T14410] vlan2: entered allmulticast mode [ 251.096411][T14410] hsr_slave_1: entered allmulticast mode [ 251.124184][T14481] loop2: detected capacity change from 0 to 1024 [ 251.148056][T14481] EXT4-fs: Ignoring removed orlov option [ 251.186593][T14481] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 251.254289][T14481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.272857][T14071] veth0_vlan: entered promiscuous mode [ 251.295393][T14510] loop0: detected capacity change from 0 to 512 [ 251.309253][T14071] veth1_vlan: entered promiscuous mode [ 251.334869][T14514] loop7: detected capacity change from 0 to 512 [ 251.363161][T14071] veth0_macvtap: entered promiscuous mode [ 251.369553][ T3000] ================================================================== [ 251.377631][ T3000] BUG: KCSAN: data-race in set_nlink / set_nlink [ 251.383950][ T3000] [ 251.386257][ T3000] read to 0xffff88810796eeb8 of 4 bytes by task 9230 on cpu 1: [ 251.393784][ T3000] set_nlink+0x29/0xb0 [ 251.397841][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 251.403118][ T3000] inode_permission+0x2de/0x3c0 [ 251.407959][ T3000] link_path_walk+0x779/0xe30 [ 251.412637][ T3000] path_openat+0x1bf/0x23c0 [ 251.417153][ T3000] do_filp_open+0x15d/0x280 [ 251.421684][ T3000] do_sys_openat2+0xa6/0x150 [ 251.426274][ T3000] __x64_sys_openat+0xf2/0x120 [ 251.431033][ T3000] x64_sys_call+0x2b07/0x3000 [ 251.435707][ T3000] do_syscall_64+0xc0/0x2a0 [ 251.440204][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.446091][ T3000] [ 251.448400][ T3000] write to 0xffff88810796eeb8 of 4 bytes by task 3000 on cpu 0: [ 251.456012][ T3000] set_nlink+0x99/0xb0 [ 251.460068][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 251.465349][ T3000] inode_permission+0x2de/0x3c0 [ 251.470189][ T3000] link_path_walk+0x779/0xe30 [ 251.474857][ T3000] path_lookupat+0x8c/0x500 [ 251.479350][ T3000] filename_lookup+0x190/0x390 [ 251.484106][ T3000] vfs_statx+0x96/0x170 [ 251.488249][ T3000] vfs_fstatat+0x115/0x170 [ 251.492653][ T3000] __se_sys_newfstatat+0x55/0x3e0 [ 251.497668][ T3000] __x64_sys_newfstatat+0x55/0x70 [ 251.502682][ T3000] x64_sys_call+0x111f/0x3000 [ 251.507349][ T3000] do_syscall_64+0xc0/0x2a0 [ 251.511847][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.517730][ T3000] [ 251.520035][ T3000] value changed: 0x00000008 -> 0x00000009 [ 251.525730][ T3000] [ 251.528035][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 251.534171][ T3000] CPU: 0 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.545006][ T3000] Tainted: [W]=WARN [ 251.548796][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.558837][ T3000] ================================================================== [ 251.567618][T14514] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.579146][T14071] veth1_macvtap: entered promiscuous mode [ 251.596998][T14071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.606952][T14071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.705821][T14514] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 251.752272][T14514] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 251.752303][T14514] EXT4-fs: failed to create workqueue [ 251.767305][T14514] EXT4-fs (loop7): mount failed [ 251.788165][T14510] __quota_error: 2 callbacks suppressed [ 251.788183][T14510] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 251.816407][ T5510] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.825899][T14510] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 251.849704][ T5510] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.858445][ T5510] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.882339][T14510] EXT4-fs (loop0): mount failed [ 251.899386][ T5510] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.900148][T14480] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.391387][ T5514] bridge_slave_1: left allmulticast mode [ 252.397062][ T5514] bridge_slave_1: left promiscuous mode [ 252.402762][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.410523][ T5514] bridge_slave_0: left allmulticast mode [ 252.416335][ T5514] bridge_slave_0: left promiscuous mode [ 252.422347][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.463641][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.472855][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.481845][ T5514] bond0 (unregistering): Released all slaves [ 252.555850][ T5514] hsr_slave_0: left promiscuous mode [ 252.562186][ T5514] hsr_slave_1: left promiscuous mode [ 252.567815][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.576467][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.615219][ T5514] team0 (unregistering): Port device team_slave_1 removed [ 252.626346][ T5514] team0 (unregistering): Port device team_slave_0 removed [ 252.956722][ T5514] IPVS: stop unused estimator thread 0... [ 253.015734][ T5514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.026088][ T5514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.077461][ T5514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.087809][ T5514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.137296][ T5514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.147737][ T5514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.209870][ T5514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.220243][ T5514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.327318][ T5514] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.368326][ T5514] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.420704][ T5514] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.469576][ T5514] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.569288][ T5514] bridge_slave_1: left allmulticast mode [ 253.575082][ T5514] bridge_slave_1: left promiscuous mode [ 253.580828][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.591678][ T5514] bridge_slave_0: left allmulticast mode [ 253.597481][ T5514] bridge_slave_0: left promiscuous mode [ 253.603187][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.615668][ T5514] bridge_slave_1: left allmulticast mode [ 253.621358][ T5514] bridge_slave_1: left promiscuous mode [ 253.627165][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.635615][ T5514] bridge_slave_0: left allmulticast mode [ 253.641478][ T5514] bridge_slave_0: left promiscuous mode [ 253.647198][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.768806][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.778626][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.789547][ T5514] bond0 (unregistering): Released all slaves [ 253.839753][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.849595][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.858885][ T5514] bond0 (unregistering): Released all slaves [ 253.905217][ T5514] hsr_slave_0: left promiscuous mode [ 253.911195][ T5514] hsr_slave_1: left promiscuous mode [ 253.916874][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.924301][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.932178][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.939658][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.949421][ T5514] hsr_slave_0: left promiscuous mode [ 253.955141][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.962600][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.970298][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.977810][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.991758][ T5514] veth1_macvtap: left promiscuous mode [ 253.997222][ T5514] veth0_macvtap: left promiscuous mode [ 254.002858][ T5514] veth1_vlan: left promiscuous mode [ 254.008205][ T5514] veth0_vlan: left promiscuous mode [ 254.014128][ T5514] veth1_macvtap: left promiscuous mode [ 254.019610][ T5514] veth0_macvtap: left promiscuous mode [ 254.025079][ T5514] veth1_vlan: left promiscuous mode [ 254.030655][ T5514] veth0_vlan: left promiscuous mode [ 254.113484][ T5514] team0 (unregistering): Port device team_slave_1 removed [ 254.125143][ T5514] team0 (unregistering): Port device team_slave_0 removed [ 254.173418][ T5514] team0 (unregistering): Port device team_slave_1 removed [ 254.182550][ T5514] team0 (unregistering): Port device team_slave_0 removed [ 254.673456][ T5514] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.929478][ T5514] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.984495][ T5514] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.034610][ T5514] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.113599][ T5514] bridge_slave_1: left allmulticast mode [ 255.119348][ T5514] bridge_slave_1: left promiscuous mode [ 255.125077][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.132885][ T5514] bridge_slave_0: left allmulticast mode [ 255.138575][ T5514] bridge_slave_0: left promiscuous mode [ 255.144327][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.214085][ T5514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.223704][ T5514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.235413][ T5514] bond0 (unregistering): Released all slaves [ 255.287030][ T5514] hsr_slave_0: left promiscuous mode [ 255.293023][ T5514] hsr_slave_1: left promiscuous mode [ 255.298638][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.306080][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.313964][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.321365][ T5514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.332149][ T5514] veth1_macvtap: left promiscuous mode [ 255.337766][ T5514] veth0_macvtap: left promiscuous mode [ 255.344660][ T5514] veth1_vlan: left promiscuous mode [ 255.349891][ T5514] veth0_vlan: left promiscuous mode [ 255.407796][ T5514] team0 (unregistering): Port device team_slave_1 removed [ 255.417186][ T5514] team0 (unregistering): Port device team_slave_0 removed