last executing test programs: 12m56.534409033s ago: executing program 0 (id=9316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) 12m56.416765399s ago: executing program 0 (id=9320): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000310000/0x400000)=nil, &(0x7f00004bb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a27000/0x3000)=nil, &(0x7f000051c000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003f8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x39}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3d1d, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x20000003, 0x20002ff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, &(0x7f00000001c0)) 12m56.170701101s ago: executing program 0 (id=9328): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x204800, &(0x7f0000000000)=ANY=[@ANYBLOB='map=off,unhide\x00check=strict,block=0x0000000000000800,utf8,check=strictAgid=', @ANYRESHEX=0x0, @ANYRES16], 0x0, 0x6e8, &(0x7f00000009c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 12m55.40635794s ago: executing program 0 (id=9334): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 12m55.326748734s ago: executing program 0 (id=9338): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000310000/0x400000)=nil, &(0x7f00004bb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a27000/0x3000)=nil, &(0x7f000051c000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00003f8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x39}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x3d1d, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x20000003, 0x20002ff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40400c7}, 0x2400c800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, &(0x7f00000001c0)) 12m55.137335603s ago: executing program 0 (id=9342): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0xd4}], 0x2}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12m55.105477715s ago: executing program 32 (id=9342): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0xd4}], 0x2}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12m45.440065579s ago: executing program 1 (id=9608): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m45.326093775s ago: executing program 1 (id=9612): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x106, [{0x4, 0x4, 0x8}, {0x5, 0x1, 0x8000}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x1}, 0x28) 12m45.2181484s ago: executing program 1 (id=9613): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000009c0)=""/13, 0xd}], 0x2}, 0x200}], 0x1, 0x10094, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m44.285226177s ago: executing program 1 (id=9621): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 12m44.070831428s ago: executing program 1 (id=9624): timerfd_create(0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r0, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1020802, &(0x7f00000001c0)=ANY=[], 0x1, 0x24e, &(0x7f00000005c0)="$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") syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f00000003c0)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$eJzs3U1oHPfZAPBn9EqxooAJeUtqjOOM7RRs6iq7q0SpyCHdrEbyJNKu2F0Vm1KSEMvFWPkgJrTxoYkvST8pPfWY5hpy6a3QQ6GHtqdCc+ilh0Igp5JCA6WlFFRmdtdeyfpyLNlJ+vuJ6D8788x/npmdzLOz1swEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBJY7ZSqSYHI2L5bLq1xmy7tbjN9EF/v17XbLPciKT4L8bH41Bv1KEvXJ98f/HreBzpvToS4yODCfc+/v+jI4P5t0nokzq2y7gk4o0ioUvPra6uvLIPidxGP/jVTc/yr7Xi93zWzDutfLE+n6V5p5XOTE9XHj4z10nn8oWsc67TzRbTRjurd1vt9GTjVFqdmZlKs8lzreXm/Gx9IRuMfOwrtUplOn1qcimrtzut5sNPTXYaZ/KFhbw5X8bUKt+OIuaxYkd8Ou+m3ay+mKYXLq6uTO2UahFUXTfmwLod58hD93746gcfX1wpdsitOkn6+1+tWq3VqtOPzjz6WKUyWqvU1o+obBDXImIkoojYl52Wz5A9OnLDrRsp6v/HScRC5NGM5TgbaaQxUv6+/jMW4zEb7WjFYvH6T2Mbpt9Q/7/08N/+sN1yh+v/oMofuj75cJT1/2jv1dEYL5rxuHLPuvpfHJQ35rF/P833etkMj7scr8WVuBTPxWqsxkq8chvz+UQ/I3vb33xk0Yw8OtGKPBajXo5J+2PSmInpmI5KPBNnYi46kcZc5LEQWXTiXHR+ONp/vxvRjizq0Y1WtCONk9GIU5FGNWZiJqYijSwm41y0YjmaMR+zUS97uRAXy+0+tSGv+7/7bPLGHz98uxi+FlTdZkWS4sNcEfT3bYL6xfzB2FX9v7u/busj1P/Pm/H++7zb+L04bMOeWCvP/0fvdBoAAADAPkrKb9+TiBiLB8qhuXwh+8adTgsAAADYQ+XfNR8pmrFi6IFIivP/yiaR79/23AAAAIC9kZTX2CURMREP9oYGl0tt9iUAAAAA8BlU/vv/0aKZiHi9HOH8HwAAAD5nvjd0j/0YvsfuB3f179HbWTqQ/F8/eunsQ8kL9WKo/kJ/XL/5+rUeu3OHk4P9TspmevTKPUlEjDayI8ng7pf/OdBrPyp7OHz9BoQb87h2r992eyy5unUCsX0C5av4URzrxRw732vPD6b0ljIxly9kk43WwuPVpP/lSPfVFy9+J6JY+vebiweTuHBxdWXy+ZdWz5e5XC16ufpC//bwyU3kstbfAvHA5ms8Vl6I0V/uRG+5leH17z8SYWT7ZSbDy3wzjvdijk/02on16z9eLLM6+Xg16vWDI93sbPfVtaG172dRvcU1fzNO9GJOnDzRazbJorYuixdvzKI2nMXutsWus3j72Otn//HbVpJN7ZTF1C1mAXCnXCjv+nO9Ct1dVqF/r/UU9X9D3R3c1fymjnIXrn/KGMw/VOtGY2+q+5txshdzsvd5YvTwJnWlsskR/eWLL/+uf0R/5N2f/fybR3//i62r21qyfRbvxqleYL+J+35zQxZFF9Vyy/54Q1V9p5jjnS2ramehlsRYjPSmDCavfGvlxVptarrySKXyaC3Gyo8K/UbtAWATOz5jZxdP4Xlk87PqGFS8+679ScFkPB8vxWqcj9Pl1QYR8eDmvU4M/RnC6R3OWieGnvByeodzy+uxtY2xB04ksUXs1NAW++JPy+af+/eeAMB+O75DHd5N/T+9w3n3+lp+qvfg3MHZcWxdyzfz1f3eIADwPyBrf5RMdN9K2u186ZnqzEy13j2Tpe1W4+m0nc/OZ2ne7Gbtxpl6cz5Ll9qtbqsx+OJ4NuukneWlpVa7m8612ulSq5OfLZ/8nvYf/d7JFuvNbt7oLC1k9U6WNlrNbr3RTWfzTiNdWn5yIe+cydrlzJ2lrJHP5Y16N281005rud3IJtO0k2VDgfls1uzmc3kx2EyX2vlivX01IhaWF7N0Nus02vlSt9XrcLCsvDnXai+W3U7euPp/vd3bGwA+DS6/duXSc6urK6+sH1hLNo7ZfODPu4i5HLF2p1cTABgyXKUBAAAAAAAAAAAAAIBPpxsv1yvG7nhJ3/DAWNxE8IaBA/FJ5vr8Dnz5vd7bshcd3ko/d697T+/q7yx3fvvc9MCzTzxxaauYJ18/dOYvWcTO/Wz+f8rle27Ye+OtgxF3/fInvTFfu11r+n701iJGb2r2tWSbmDt2SAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf03AAD//2tvTu0=") r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='smaps\x00') 12m43.784100762s ago: executing program 1 (id=9626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcdd, r1}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) 12m43.721222825s ago: executing program 33 (id=9626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcdd, r1}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) 11m20.284515675s ago: executing program 6 (id=11425): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x400, @multicast2}, 0x10) 11m20.196058259s ago: executing program 6 (id=11426): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0xe, 0x4) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 11m19.062342176s ago: executing program 6 (id=11435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="ec0000002100010065bd7000fbdbdf25fc0200000000000000000000000000017f0000010000000000000000000000004e22000b4e2000000000e080ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000010000009c001100ff020000000000000000000000000001fc010000000000000000000000000001fe80000000000000000000000000001ffc010000000000000000000000000000330400000035000002000200fe8000000000000000000000000000aafe8000000000000000000000000000240000000000000000000000000000000000000000000000000000000000000000ff040000073500000a000a"], 0xec}, 0x1, 0x0, 0x0, 0x24008010}, 0x8000) 11m18.78752792s ago: executing program 6 (id=11437): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000002200)=""/155, 0x9b}], 0x2, 0x0, 0x0) 11m18.407027689s ago: executing program 6 (id=11440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000340)="b820c99a960c711594c900d1786d", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m16.7795121s ago: executing program 6 (id=11451): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000e04000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m16.748973042s ago: executing program 34 (id=11451): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000e04000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m12.181394001s ago: executing program 7 (id=11452): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000840)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c757466383d312c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c005a086502454ede48cd0c582ac337a877be0c36a8e60d572dbe625e0680a225abe4d4fc79e83de86dce78be26dba8f6ff0abfb9c2fba30a14b3b206ad905e994c27e6d4fc5d74f88b749758f85a07efcf3e17bd78aad46a325ec58b65332fe45ac5db6e722db0a32946415f0b3403d53ad233d1fe2593f1d4fe07041a0091b2f43c1e87fa638a217f4108c00d47c229ae1229250e", @ANYRESHEX=0x0], 0x1, 0x391, &(0x7f0000000340)="$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") syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0x40, 0xe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x9, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x6, 0x15}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x4, 0x76}}}}}}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) 11m11.468871777s ago: executing program 7 (id=11485): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000300, 0x0, 0x0) 11m11.20150496s ago: executing program 7 (id=11489): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") chdir(&(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0) 11m10.350786773s ago: executing program 7 (id=11494): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x10, 0x803, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 11m6.21423853s ago: executing program 7 (id=11531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) socket$netlink(0x10, 0x3, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4841) 11m6.187080841s ago: executing program 35 (id=11531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) socket$netlink(0x10, 0x3, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4841) 4m11.728834374s ago: executing program 2 (id=18200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m11.714606265s ago: executing program 2 (id=18201): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @empty, 0xff000000, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x0, 0xa, [0x15, 0x1d, 0x3, 0x3b, 0x5, 0x16, 0x26, 0xa, 0x2b, 0x20, 0x29, 0x3, 0x25, 0x15, 0x32, 0x24], 0x0, 0x100, 0x10001}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x16, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x0, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x5, 0x7, 0x2, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m11.672055187s ago: executing program 2 (id=18203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) syz_emit_ethernet(0x45, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\ty', 0xf, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "223427d5c9a46b"}}}}}, 0x0) 4m11.649106858s ago: executing program 2 (id=18204): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 4m11.623501609s ago: executing program 2 (id=18205): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m10.119168224s ago: executing program 2 (id=18234): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0xa6}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16", 0x96}], 0x6}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000c40)="b4207053c783840adc326e2741bc6c65e3919d5e55654dfcda9a29ac1b4471c4c4b3abb892014f7662790cb7849641ad1d3a01849be69193d20050a5b905e8bf5c47172b04121ccc6b1f2ecc12117cd31209dddadd0c15a72756942821ef59b4efd374d49fec7b535aa2265c2e0421dc257f8ac230fb1e9a3baf4c2a32711e8a3d4a6b1cfacbbc61e92e10e66dab7fb6e055417b507e5aacb638a486a4f15385f4b5471dd7afadb8d2", 0xa9}, {&(0x7f0000000d00)="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", 0xfb}, {&(0x7f00000027c0)="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", 0x38b}], 0x3) 4m10.118688414s ago: executing program 36 (id=18234): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0xa6}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16", 0x96}], 0x6}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000c40)="b4207053c783840adc326e2741bc6c65e3919d5e55654dfcda9a29ac1b4471c4c4b3abb892014f7662790cb7849641ad1d3a01849be69193d20050a5b905e8bf5c47172b04121ccc6b1f2ecc12117cd31209dddadd0c15a72756942821ef59b4efd374d49fec7b535aa2265c2e0421dc257f8ac230fb1e9a3baf4c2a32711e8a3d4a6b1cfacbbc61e92e10e66dab7fb6e055417b507e5aacb638a486a4f15385f4b5471dd7afadb8d2", 0xa9}, {&(0x7f0000000d00)="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", 0xfb}, {&(0x7f00000027c0)="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", 0x38b}], 0x3) 3.569410651s ago: executing program 3 (id=21864): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x4000000, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.19434088s ago: executing program 3 (id=21865): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f000091d000/0x3000)=nil, 0x3000, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1}}}], 0x20}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000000000008500000023000000850000002300000095"], &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1188e19b95d02ff4284860186dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', r4, 0x4000, r2}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x0, 0x5, 0xb}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x4008001}, 0x10004041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 2.538407603s ago: executing program 3 (id=21871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000780)="549208cb20b45c9e9edd2e7431e1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 1) 2.519010003s ago: executing program 3 (id=21872): socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eba, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x3, 0x8001}, 0x2000, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x4000, 0x5, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.358368321s ago: executing program 3 (id=21875): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x4a3a, 0x400, 0x0, 0x37b}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.014207529s ago: executing program 8 (id=21886): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000b3205b1fe00b23a3aecc93462ec30a64dcc047a91d7103b7e5be737c44e8f6461ae70b6506f266395d3a73ba5756e110dd3de5e04d9db1cfe1bd53e2361495e39d3c6b68dcaa714d25d2d8ed8b83739ac50d52407d5b141f76330da8ebcf8d11aafa21f2098c74e0bd470e20ad1606449d5bfa321774e9b00295f02529df9e5dea2a71f5f1fa003c0cd72ae7a359636ca51e26bd9d48faa2029d9eac", @ANYRES32=r2, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a002cb61e148173085929a620d050248f504bed22b3947cffa58e", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280), 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf1a1000000008000600060000000c000180060004004e2200000c000180070006006c630000"], 0x34}}, 0x4000000) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) (async) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0x2}, 0x18) bind$can_j1939(r6, &(0x7f00000001c0)={0x1d, r7, 0x0, {0x1, 0xff, 0x7}, 0x1}, 0x18) (async) bind$can_j1939(r6, &(0x7f00000001c0)={0x1d, r7, 0x0, {0x1, 0xff, 0x7}, 0x1}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r9, 0x2) (async) flock(r9, 0x2) flock(r8, 0x2) close_range(r8, 0xffffffffffffffff, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x289c2, 0x1) linkat(r10, &(0x7f0000000140)='./bus\x00', r10, 0x0, 0x1400) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x5, [0x0, 0xfffffffffffffffe, 0x615e5a53, 0x1, 0x5, 0x7]}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x5, [0x0, 0xfffffffffffffffe, 0x615e5a53, 0x1, 0x5, 0x7]}) socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 2.008370319s ago: executing program 4 (id=21887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x81, "7c7f9123d5aea3a8c5aecaec0c6148195b110fdefc95ce4a8c37472d06038ee162cd8f0b44daffb54115769353c165d3730598fe15422ff3a4019631f0830a504a524ac6688abeeb2270b28ccd18af8d5326004b3f06d661f13a0f5bf637b693b889aa09a378166313c28f8e644718a00087344573e48e11f090225f98de5008fe"}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x2c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) 1.965245391s ago: executing program 5 (id=21888): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x2d, 0x2, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, 0x0, 0x20000000) r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000040)=ANY=[], 0xfb, 0x1221, &(0x7f0000001280)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x1c0) r6 = socket$igmp(0x2, 0x3, 0x2) lremovexattr(&(0x7f00000003c0)='./file2\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYBLOB="010026bd7000fbdbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003499b8f276dc75584a8d87d907005858367d61f49e1639a48f", 0x20, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f0000000280)={r4, &(0x7f0000000100)='\x00', 0x100, &(0x7f0000000140)={@_ha_fsid={[0xfffffffc, 0x7]}, {0xa, 0xfffe, 0xb72, 0x6}}, 0x3ff, &(0x7f0000000180), &(0x7f00000001c0)=0x9}) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r2, 0x0, 0x0, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r1, 0x1, 0x87}, 0x14) 1.834383958s ago: executing program 4 (id=21889): pipe2(&(0x7f00000000c0), 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 1.79297389s ago: executing program 3 (id=21890): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70c000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket(0x2, 0x3, 0xff) r4 = socket(0x28, 0x5, 0x10) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000b4bffc)=0x7ff, 0x4) write(r6, &(0x7f0000000000)='\"', 0xfdef) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x1) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) 1.777892571s ago: executing program 4 (id=21891): unshare(0x20000000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x7000) (rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_read_part_table(0x1051, &(0x7f0000001080)="$eJzszzGqwlAQBdCb//OIdi5Ba1cRW2tbW1t3oCC4DWvdozzBBAsXICnOaQYuwww3TMZ1GLV+5V2aJLck/59s+zx2yXm5yqX/S2bzcXOfulmnDk4pTe59m2ZR0iaHJGU88H6ye/yoGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2isAAP//k04TRw==") ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xe, 0x8, 0x4, 0x1ff, 0x1a, "737b27e90e294780a25bada40a9fd8604000"}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000680)={0x3, {{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}, 0x90) (async, rerun: 32) r3 = socket(0x2, 0x80805, 0x0) (rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xa) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000740)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001b00)=[{{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24040895}}, {{&(0x7f0000001640)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000001}}], 0x2, 0x800) (async) writev(r0, &(0x7f0000000140), 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002300), r3) (rerun: 32) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x4c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2a}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffff0b3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r8, 0x541c, &(0x7f00000000c0)) (async) statx(0xffffffffffffffff, &(0x7f0000002100)='./file0\x00', 0x7000, 0x10, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, r9, &(0x7f0000002240)={0xe, 0x2, 0x7f, 0x9, 0x5, 0xb, 0x9, 0x2, 0x4}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f00000002c0)=@nullb, r10, &(0x7f0000000100)) (async) ioctl$PIO_FONTX(r8, 0x4b6c, &(0x7f0000000280)={0x188, 0x1d, &(0x7f0000000300)="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"}) 1.563080451s ago: executing program 5 (id=21895): socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.412687249s ago: executing program 9 (id=21896): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1000, 0x0, 0x2, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4d4, 0x6c}, 0x0, @in6=@local, 0x8034ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x203c}, {{@in=@broadcast, 0x2000, 0x3c}, 0x2, @in6=@dev}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 1.411839829s ago: executing program 5 (id=21897): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000014}) socket(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x10010, r2, 0x8000000) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mmap(&(0x7f0000113000/0x3000)=nil, 0x3000, 0x200000b, 0x2010, 0xffffffffffffffff, 0xec774000) r8 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r8, 0x21, &(0x7f00000001c0)={0x201, 0x5, 0xfff7ffff}) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000000000000100000d000000000900000003005c48000000000000000d0000000000000000010000130400000002000000010100000b000000000000120300000000612e00"], &(0x7f0000000900)=""/252, 0x5c, 0xfc, 0x1}, 0x28) setresuid(0xee00, 0xee00, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000005d9546"], 0x8, 0x8fa2496c381b7ad5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000340), 0x11000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.371299671s ago: executing program 9 (id=21898): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1000, 0x0, 0x2, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4d4, 0x6c}, 0x0, @in6=@local, 0x8034ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x203c}, {{@in=@broadcast, 0x2000, 0x3c}, 0x2, @in6=@dev}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (fail_nth: 1) 1.314467954s ago: executing program 9 (id=21899): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x3) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 1.314275374s ago: executing program 9 (id=21900): socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eba, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x3, 0x8001}, 0x2000, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.314060394s ago: executing program 4 (id=21901): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x401, 0x253237844f167991, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001500bb23000004001200050016000100"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001500bb23000004001200050016000100"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) (async) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) 1.144685642s ago: executing program 8 (id=21902): ioprio_set$uid(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r5}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c0000001100000425bd7000fedbdf25ac1414aa000000000000000000000000000004d40a00ff00772f117b08000c000900000014000e0000000000000000000000ffff7f0000014d000365666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000000e2b6a4672e000000050019000000"], 0x9c}}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 531.364843ms ago: executing program 4 (id=21903): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002200)={0x10c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 455.557537ms ago: executing program 4 (id=21904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) 431.931988ms ago: executing program 9 (id=21905): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 415.161439ms ago: executing program 9 (id=21906): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) syz_usb_connect$uac1(0x1, 0xdb, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x5, 0x20, 0xd2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x342b, 0x39}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0xc}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x0, 0x8], 0x60}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0xce}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xff}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x10, "a28972f5e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x7, 0x8, 'wO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x10, 0xf9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe6, 0x9, 0x2, "3341d8228df650"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7, 0xd, "dcc2d1b1331f036c"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xc5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x6, 0x3, 0xfa, 0xff, 0x80}, 0x103, &(0x7f0000000740)={0x5, 0xf, 0x103, 0x2, [@generic={0x6f, 0x10, 0xa, "83b726df289295e59e5ba65b943e86d9c0d9973c693364891ab566cd52d5aabe1d1705c7101b2f97cd7bb1a1b2673baa14cf9e6019199f8cee5491bbef4180bf124f0b460144d3380da4212726ab6d1160de9d8039f5b76124c8df6d30a95e02fad181abaf3454c9e913ef72"}, @generic={0x8f, 0x10, 0x2, "b6c0e23e01f3c07b7946805225d89bc2ed0431c2a1ea51152298fa4bce498abdff405fc3e382f702c94832c93c35a85dc6a527ad35f8b48620573e417479a71e71c55f2ecbe5b0829fd72d6d80179b907230c59f4a1b8bdd5c1b892c752ba01e260c713d5aa320a71543b6ff4aa4bcc8a495d674fe75339cfb1fd2b8dcb2cee132bbbee1788793304e79fe60"}]}, 0x1, [{0x72, &(0x7f0000000640)=@string={0x72, 0x3, "a9a5b18ac25a06718aeb3a61e1eb0afe391d8a1ac2be6f93dc26bac202e38f3752774804529df048efde183f9f2843957bf10d88c093c9026b0af4aaf73a4f0888186be93fe5abf77d747dc4dc842e3d7595abb576ca8c640eb3160ec034ea880fb91c53e5fcb98f2de23dd86284d419"}}]}) 242.068518ms ago: executing program 5 (id=21907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000e06010100000000000000000200000605000100070000000900020073797a30000000000900020073797a3200000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x24000080) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x7, 0x20000000, 0x6, 0x6}, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x2) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x7, 0x20000000, 0x6, 0x6}, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000700000095000000001200009500a50500000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x52, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 210.021979ms ago: executing program 8 (id=21908): socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 78.749375ms ago: executing program 5 (id=21909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000020201020000000002000003240002800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) 71.887156ms ago: executing program 8 (id=21910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000020201020000000002000003240002800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) (fail_nth: 1) 4.27874ms ago: executing program 8 (id=21911): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x3) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) 3.792939ms ago: executing program 8 (id=21912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = creat(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000020}, 0x24004000) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000700000008"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r6, @ANYBLOB="00cf041f3036d1136cb8bbac6a07000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r7, 0x0, 0x20000}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x0, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x80000000}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7f}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004880}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@delchain={0x40, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800"], 0x48) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r11) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', 0x0}) open(&(0x7f0000000180)='.\x00', 0x0, 0x4) 0s ago: executing program 5 (id=21913): capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x153, 0x0, &(0x7f0000000680)="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", 0x0, 0x20000000, 0x0, 0x0, 0xffffffffffffff5c, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) socket$inet_sctp(0x2, 0x5, 0x84) semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) kernel console output (not intermixed with test programs): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.311855][T14752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14752 comm=syz.5.21089 [ 1905.378490][T14744] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.433862][T14744] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.603017][T14807] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.633914][T14807] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.662897][T14812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14812 comm=syz.4.21109 [ 1905.689080][T14807] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.733724][T14807] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.364188][T29223] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.377889][ T906] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.391162][T14132] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.409285][T29223] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.014737][T14902] pim6reg: entered allmulticast mode [ 1907.026410][T14902] pim6reg: left allmulticast mode [ 1907.098298][T14917] tunl0: Caught tx_queue_len zero misconfig [ 1907.352029][T14933] __nla_validate_parse: 1 callbacks suppressed [ 1907.352044][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21151'. [ 1907.367491][T14933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21151'. [ 1907.453464][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21153'. [ 1907.483964][T14942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21154'. [ 1907.555520][ T906] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.573227][ T906] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.680797][T14949] sctp: [Deprecated]: syz.4.21155 (pid 14949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1907.680797][T14949] Use struct sctp_sack_info instead [ 1907.705970][ T906] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.739644][ T906] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.247842][ T3267] syz_tun (unregistering): left allmulticast mode [ 1908.349975][T14992] lo speed is unknown, defaulting to 1000 [ 1908.397824][T14992] lo speed is unknown, defaulting to 1000 [ 1908.411448][ T906] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.472110][ T906] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.522699][ T906] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.537845][T14992] chnl_net:caif_netlink_parms(): no params data found [ 1908.665626][ T906] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1908.685847][T14992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.694134][T14992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.701939][T14992] bridge_slave_0: entered allmulticast mode [ 1908.710581][T14992] bridge_slave_0: entered promiscuous mode [ 1908.719669][T14992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1908.727564][T14992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1908.735607][T14992] bridge_slave_1: entered allmulticast mode [ 1908.743912][T14992] bridge_slave_1: entered promiscuous mode [ 1909.509020][T14992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1909.538271][T14992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.622517][T14992] team0: Port device team_slave_0 added [ 1909.650287][T14992] team0: Port device team_slave_1 added [ 1909.741517][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.763812][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.802718][T14992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.821316][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.874540][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21191'. [ 1910.013860][T14992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1910.028504][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.037620][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.049796][T15218] vlan3: entered promiscuous mode [ 1910.056747][T15218] bond0: entered promiscuous mode [ 1910.069951][T14992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1910.077643][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1910.106506][T14992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1910.223627][T14992] hsr_slave_0: entered promiscuous mode [ 1910.238035][T14992] hsr_slave_1: entered promiscuous mode [ 1910.255344][T14992] debugfs: 'hsr0' already exists in 'hsr' [ 1910.270492][T14992] Cannot create hsr debugfs directory [ 1910.435811][ T906] bond0 (unregistering): Released all slaves [ 1910.450651][T15287] netlink: 'syz.4.21199': attribute type 19 has an invalid length. [ 1910.473834][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21199'. [ 1910.520212][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1910.531549][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1910.590828][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1910.610891][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1910.628926][ T906] hsr_slave_0: left promiscuous mode [ 1910.646679][ T906] hsr_slave_1: left promiscuous mode [ 1910.671362][ T906] veth1_macvtap: left promiscuous mode [ 1910.687588][ T906] veth0_macvtap: left promiscuous mode [ 1910.708494][ T906] veth1_vlan: left promiscuous mode [ 1910.731432][ T906] veth0_vlan: left promiscuous mode [ 1910.868667][ T906] macvlan1 (unregistering): left allmulticast mode [ 1910.908192][ T906] team0 (unregistering): Port device macvlan1 removed [ 1910.990091][T15381] netlink: 'syz.5.21205': attribute type 2 has an invalid length. [ 1911.009703][T15381] netlink: 100 bytes leftover after parsing attributes in process `syz.5.21205'. [ 1911.338638][T15426] ip6tnl0: Caught tx_queue_len zero misconfig [ 1911.359442][T15426] netlink: 'syz.8.21215': attribute type 5 has an invalid length. [ 1911.432130][T14992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1911.468101][T14992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1911.481697][T14992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1911.490626][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 1911.490644][ T28] audit: type=1326 audit(1774535901.911:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.525666][ T28] audit: type=1326 audit(1774535901.911:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.528014][T15452] netlink: 56 bytes leftover after parsing attributes in process `syz.8.21215'. [ 1911.556263][ T28] audit: type=1326 audit(1774535901.921:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.574300][T15427] lo speed is unknown, defaulting to 1000 [ 1911.595572][T14992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1911.612084][ T28] audit: type=1326 audit(1774535901.921:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.637779][ T28] audit: type=1326 audit(1774535901.951:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.663710][ T28] audit: type=1326 audit(1774535901.951:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.689658][ T28] audit: type=1326 audit(1774535901.951:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.715378][ T28] audit: type=1326 audit(1774535901.951:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.741479][ T28] audit: type=1326 audit(1774535901.951:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.770767][ T28] audit: type=1326 audit(1774535901.951:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.8.21215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1911.774850][T15427] lo speed is unknown, defaulting to 1000 [ 1911.801361][T15426] lo speed is unknown, defaulting to 1000 [ 1911.906912][T14992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1911.919804][T15442] lo speed is unknown, defaulting to 1000 [ 1911.926345][T14992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1911.959935][T15426] lo speed is unknown, defaulting to 1000 [ 1911.997214][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.004920][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.020702][T15442] lo speed is unknown, defaulting to 1000 [ 1912.031853][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.039294][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.342082][T14992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1912.600875][T15606] vxcan3: entered allmulticast mode [ 1912.615211][T15606] team0: Device vxcan3 is of different type [ 1912.652042][T15617] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.662899][T15617] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.675685][T14992] veth0_vlan: entered promiscuous mode [ 1912.688016][T14992] veth1_vlan: entered promiscuous mode [ 1912.699101][T15626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15626 comm=syz.4.21235 [ 1912.712067][T14992] veth0_macvtap: entered promiscuous mode [ 1912.724887][T14992] veth1_macvtap: entered promiscuous mode [ 1912.743161][T14992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1912.775579][T15617] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.801179][T15617] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.825136][T14992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1912.842688][T15636] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.856019][T15617] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.868467][T15617] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.884684][ T906] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.896007][T15641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15641 comm=syz.5.21238 [ 1912.910510][T15636] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.931299][ T906] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.940880][ T906] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.955916][T15617] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1912.970433][T15617] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.990218][ T906] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.023360][T15636] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.077240][T14132] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1913.087507][T14132] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.126147][T15636] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1913.154441][T14132] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1913.170556][T14132] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.180121][T14132] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1913.200384][T14132] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.214331][T14132] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1913.232617][T14132] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.278596][ T7950] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.287760][ T7950] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.310675][ T7950] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.319515][ T7950] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.361470][T15690] loop9: detected capacity change from 0 to 128 [ 1913.542777][T15699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21248'. [ 1913.766662][ T3192] syz_tun (unregistering): left allmulticast mode [ 1913.903815][T15720] lo speed is unknown, defaulting to 1000 [ 1913.954462][T15720] lo speed is unknown, defaulting to 1000 [ 1914.089446][T15720] chnl_net:caif_netlink_parms(): no params data found [ 1914.134363][T15690] loop9: detected capacity change from 0 to 1024 [ 1914.189878][T15690] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1914.236490][T15720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.236714][T15722] lo speed is unknown, defaulting to 1000 [ 1914.244889][T15720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.245144][T15720] bridge_slave_0: entered allmulticast mode [ 1914.245759][T15720] bridge_slave_0: entered promiscuous mode [ 1914.251622][T15720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.284944][T15720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.292700][T15720] bridge_slave_1: entered allmulticast mode [ 1914.299382][T15720] bridge_slave_1: entered promiscuous mode [ 1914.321202][T15720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1914.333322][T15720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1914.356583][T15720] team0: Port device team_slave_0 added [ 1914.366355][T15720] team0: Port device team_slave_1 added [ 1914.390778][T15895] loop9: detected capacity change from 0 to 128 [ 1914.396780][T15720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1914.407935][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1914.436949][T15720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1914.437406][T15895] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1914.449155][T15720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1914.468743][T15895] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1914.504674][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1914.598771][T15720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1914.685956][T15720] hsr_slave_0: entered promiscuous mode [ 1914.703739][T15720] hsr_slave_1: entered promiscuous mode [ 1914.710159][T15720] debugfs: 'hsr0' already exists in 'hsr' [ 1914.742307][T15720] Cannot create hsr debugfs directory [ 1914.865123][T15720] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1914.878402][T15720] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.930514][T15720] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1914.941880][T15720] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.957951][T14992] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1915.005951][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21262'. [ 1915.027188][T15720] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1915.040035][T15720] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.095847][T15720] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1915.106371][T15720] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.212887][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.223513][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.237359][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.247070][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.340103][T15722] lo speed is unknown, defaulting to 1000 [ 1915.838489][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21272'. [ 1915.978803][T16092] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.025130][T16096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=16096 comm=syz.9.21276 [ 1916.060985][T16092] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.088453][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.104625][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.122365][T16096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.133783][T16096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.144144][T16092] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.201553][T16092] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.288578][ T108] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.306309][ T7950] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.327968][ T7950] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.346709][ T7950] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.494482][T16124] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.544164][T16127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=16127 comm=syz.3.21279 [ 1916.564540][T16124] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.623272][T16124] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.683544][T16124] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1916.740015][ T7950] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.758857][ T7950] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.774185][ T7950] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.788195][ T7950] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.073743][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21284'. [ 1917.211160][T16130] syz.8.21280 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1917.222879][T16130] CPU: 1 UID: 0 PID: 16130 Comm: syz.8.21280 Tainted: G W syzkaller #0 PREEMPT(full) [ 1917.222922][T16130] Tainted: [W]=WARN [ 1917.222931][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1917.222948][T16130] Call Trace: [ 1917.222956][T16130] [ 1917.222966][T16130] __dump_stack+0x1d/0x30 [ 1917.222995][T16130] dump_stack_lvl+0x95/0xd0 [ 1917.223033][T16130] dump_stack+0x15/0x1b [ 1917.223151][T16130] dump_header+0x80/0x240 [ 1917.223180][T16130] oom_kill_process+0x295/0x350 [ 1917.223210][T16130] out_of_memory+0x97d/0xb80 [ 1917.223238][T16130] try_charge_memcg+0x62e/0xa10 [ 1917.223344][T16130] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1917.223386][T16130] __swap_cache_prepare_and_add+0x386/0x530 [ 1917.223464][T16130] swap_cache_alloc_folio+0xa2/0x120 [ 1917.223498][T16130] swap_cluster_readahead+0x26e/0x3d0 [ 1917.223559][T16130] swapin_readahead+0xde/0x840 [ 1917.223588][T16130] ? _raw_spin_unlock+0x9/0x30 [ 1917.223626][T16130] ? swap_put_entries_cluster+0x385/0x3a0 [ 1917.223657][T16130] ? swap_put_entries_cluster+0xd1/0x3a0 [ 1917.223687][T16130] ? __rcu_read_unlock+0x4e/0x70 [ 1917.223772][T16130] ? swap_cache_get_folio+0x26f/0x280 [ 1917.223800][T16130] do_swap_page+0x30d/0x2220 [ 1917.223829][T16130] ? css_rstat_updated+0xbb/0x280 [ 1917.223849][T16130] ? __rcu_read_lock+0x36/0x50 [ 1917.223914][T16130] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1917.223941][T16130] handle_mm_fault+0xb46/0x3020 [ 1917.224033][T16130] ? vma_start_read+0x1c7/0x2c0 [ 1917.224059][T16130] do_user_addr_fault+0x62f/0x1050 [ 1917.224105][T16130] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 1917.224132][T16130] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 1917.224157][T16130] ? trace_page_fault_user+0x1f/0xe0 [ 1917.224256][T16130] exc_page_fault+0x62/0xa0 [ 1917.224346][T16130] asm_exc_page_fault+0x26/0x30 [ 1917.224367][T16130] RIP: 0033:0x7f47abc0cfa0 [ 1917.224384][T16130] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 1917.224452][T16130] RSP: 002b:00007ffc01a77aa8 EFLAGS: 00010246 [ 1917.224541][T16130] RAX: 0000000000000000 RBX: 0000555587a65500 RCX: 0000000000000000 [ 1917.224557][T16130] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 0000555587a65808 [ 1917.224571][T16130] RBP: 00007f47abec7da0 R08: 00007ffc01a77b00 R09: 0000000000000000 [ 1917.224587][T16130] R10: 0000000000000000 R11: 0000555587a65808 R12: 00000000001d41e1 [ 1917.224602][T16130] R13: 00007f47abec5fac R14: 00000000001d3ed3 R15: 00007ffc01a77c30 [ 1917.224628][T16130] [ 1917.224639][T16130] memory: usage 307200kB, limit 307200kB, failcnt 286 [ 1917.300618][T16158] hsr0: entered promiscuous mode [ 1917.306632][T16130] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 1917.401535][ T28] kauditd_printk_skb: 214 callbacks suppressed [ 1917.401553][ T28] audit: type=1326 audit(1774535907.811:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1917.406212][T16130] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1917.410775][ T28] audit: type=1326 audit(1774535907.811:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1917.416176][T16130] Memory cgroup stats for /syz8 [ 1917.441197][ T28] audit: type=1326 audit(1774535907.811:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1917.456130][T16130] : [ 1917.491003][ T28] audit: type=1326 audit(1774535907.811:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1917.497556][T16130] cache 0 [ 1917.505440][T16158] hsr0: left promiscuous mode [ 1917.507322][T16130] rss 0 [ 1917.507335][T16130] shmem 0 [ 1917.507344][T16130] mapped_file 0 [ 1917.507353][T16130] dirty 0 [ 1917.507360][T16130] writeback 4096 [ 1917.507370][T16130] workingset_refault_anon 12 [ 1917.507393][T16130] workingset_refault_file 0 [ 1917.507403][T16130] swap 176128 [ 1917.507410][T16130] swapcached 204800 [ 1917.507426][T16130] pgpgin 491045 [ 1917.507435][T16130] pgpgout 491042 [ 1917.507444][T16130] pgfault 702346 [ 1917.507453][T16130] pgmajfault 5 [ 1917.507513][T16130] inactive_anon 12288 [ 1917.507522][T16130] active_anon 0 [ 1917.507531][T16130] inactive_file 0 [ 1917.507540][T16130] active_file 0 [ 1917.507548][T16130] unevictable 0 [ 1917.507557][T16130] hierarchical_memory_limit 314572800 [ 1917.507568][T16130] hierarchical_memsw_limit 9223372036854771712 [ 1917.507636][T16130] total_cache 0 [ 1917.507645][T16130] total_rss 0 [ 1917.507654][T16130] total_shmem 0 [ 1917.507663][T16130] total_mapped_file 0 [ 1917.507671][T16130] total_dirty 0 [ 1917.507679][T16130] total_writeback 4096 [ 1917.507688][T16130] total_workingset_refault_anon 12 [ 1917.507698][T16130] total_workingset_refault_file 0 [ 1917.507708][T16130] total_swap 176128 [ 1917.507716][T16130] total_swapcached 204800 [ 1917.507773][T16130] total_pgpgin 491045 [ 1917.507782][T16130] total_pgpgout 491042 [ 1917.507791][T16130] total_pgfault 702346 [ 1917.507806][T16130] total_pgmajfault 5 [ 1917.507815][T16130] total_inactive_anon 12288 [ 1917.507825][T16130] total_active_anon 0 [ 1917.507833][T16130] total_inactive_file 0 [ 1917.507886][T16130] total_active_file 0 [ 1917.507896][T16130] total_unevictable 0 [ 1917.507906][T16130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.21280,pid=16130,uid=0 [ 1917.518994][ T28] audit: type=1326 audit(1774535907.811:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1917.523283][T16130] Memory cgroup out of memory: Killed process 16130 (syz.8.21280) total-vm:94032kB, anon-rss:1232kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 1917.590450][ T28] audit: type=1326 audit(1774535907.811:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1918.015684][ T28] audit: type=1326 audit(1774535907.811:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1918.040345][ T28] audit: type=1326 audit(1774535907.811:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1918.065763][ T28] audit: type=1326 audit(1774535907.811:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1918.092277][ T28] audit: type=1326 audit(1774535907.811:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16166 comm="syz.3.21289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1918.127514][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21289'. [ 1918.238410][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21295'. [ 1918.544822][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21305'. [ 1918.627440][T15720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1918.666827][T15720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1918.701648][T15720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1918.712842][T15720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1918.793002][T16262] lo speed is unknown, defaulting to 1000 [ 1918.902543][T16281] FAULT_INJECTION: forcing a failure. [ 1918.902543][T16281] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1918.932044][T16281] CPU: 1 UID: 0 PID: 16281 Comm: syz.9.21318 Tainted: G W syzkaller #0 PREEMPT(full) [ 1918.932083][T16281] Tainted: [W]=WARN [ 1918.932091][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1918.932106][T16281] Call Trace: [ 1918.932115][T16281] [ 1918.932160][T16281] __dump_stack+0x1d/0x30 [ 1918.932193][T16281] dump_stack_lvl+0x95/0xd0 [ 1918.932219][T16281] dump_stack+0x15/0x1b [ 1918.932245][T16281] should_fail_ex+0x263/0x280 [ 1918.932353][T16281] should_fail+0xb/0x20 [ 1918.932381][T16281] should_fail_usercopy+0x1a/0x20 [ 1918.932414][T16281] _copy_from_user+0x1c/0xb0 [ 1918.932465][T16281] rds_setsockopt+0x49f/0xa30 [ 1918.932496][T16281] ? __pfx_rds_setsockopt+0x10/0x10 [ 1918.932525][T16281] __sys_setsockopt+0x184/0x200 [ 1918.932587][T16281] __x64_sys_setsockopt+0x64/0x80 [ 1918.932617][T16281] x64_sys_call+0x2327/0x3020 [ 1918.932729][T16281] do_syscall_64+0x12c/0x370 [ 1918.932764][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.932847][T16281] RIP: 0033:0x7f77f974c799 [ 1918.932864][T16281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.932885][T16281] RSP: 002b:00007f77f81a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1918.932945][T16281] RAX: ffffffffffffffda RBX: 00007f77f99c5fa0 RCX: 00007f77f974c799 [ 1918.932960][T16281] RDX: 000000000000000a RSI: 0000000000000114 RDI: 0000000000000003 [ 1918.932974][T16281] RBP: 00007f77f81a7090 R08: 0000000000000004 R09: 0000000000000000 [ 1918.932988][T16281] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1918.933041][T16281] R13: 00007f77f99c6038 R14: 00007f77f99c5fa0 R15: 00007fff366dee38 [ 1918.933062][T16281] [ 1919.194134][T27367] bond0 (unregistering): Released all slaves [ 1919.218388][T16262] lo speed is unknown, defaulting to 1000 [ 1919.261863][T15720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.290601][T27367] hsr_slave_0: left promiscuous mode [ 1919.296697][T27367] hsr_slave_1: left promiscuous mode [ 1919.320865][T27367] veth1_macvtap: left promiscuous mode [ 1919.326897][T27367] veth0_macvtap: left promiscuous mode [ 1919.332563][T27367] veth1_vlan: left promiscuous mode [ 1919.338479][T27367] veth0_vlan: left promiscuous mode [ 1919.439808][T27367] team0 (unregistering): Port device macvlan1 removed [ 1919.506710][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.535823][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.543764][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.558662][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.566406][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.647902][T16317] lo speed is unknown, defaulting to 1000 [ 1919.719092][T15720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.874149][T16361] tipc: Started in network mode [ 1919.879588][T16361] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 1919.889773][T16361] tipc: Enabled bearer , priority 10 [ 1919.958643][T15720] veth0_vlan: entered promiscuous mode [ 1919.967628][T15720] veth1_vlan: entered promiscuous mode [ 1919.996470][T15720] veth0_macvtap: entered promiscuous mode [ 1920.009940][T15720] veth1_macvtap: entered promiscuous mode [ 1920.033529][T15720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1920.054815][T15720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.067391][T27367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.084273][T27367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.115768][T27367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.125907][T27367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.219515][T16379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16379 comm=syz.4.21254 [ 1920.369600][T16391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.380847][T16395] FAULT_INJECTION: forcing a failure. [ 1920.380847][T16395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1920.395557][T16395] CPU: 1 UID: 0 PID: 16395 Comm: syz.9.21340 Tainted: G W syzkaller #0 PREEMPT(full) [ 1920.395675][T16395] Tainted: [W]=WARN [ 1920.395684][T16395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1920.395700][T16395] Call Trace: [ 1920.395708][T16395] [ 1920.395715][T16395] __dump_stack+0x1d/0x30 [ 1920.395743][T16395] dump_stack_lvl+0x95/0xd0 [ 1920.395829][T16395] dump_stack+0x15/0x1b [ 1920.395858][T16395] should_fail_ex+0x263/0x280 [ 1920.395887][T16395] should_fail+0xb/0x20 [ 1920.395946][T16395] should_fail_usercopy+0x1a/0x20 [ 1920.396014][T16395] _copy_from_user+0x1c/0xb0 [ 1920.396045][T16395] ___sys_sendmsg+0xc1/0x1e0 [ 1920.396150][T16395] ? path_openat+0x1b01/0x2050 [ 1920.396213][T16395] __sys_sendmmsg+0x185/0x320 [ 1920.396258][T16395] __x64_sys_sendmmsg+0x57/0x70 [ 1920.396295][T16395] x64_sys_call+0x27aa/0x3020 [ 1920.396332][T16395] do_syscall_64+0x12c/0x370 [ 1920.396418][T16395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.396444][T16395] RIP: 0033:0x7f77f974c799 [ 1920.396465][T16395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1920.396488][T16395] RSP: 002b:00007f77f81a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1920.396518][T16395] RAX: ffffffffffffffda RBX: 00007f77f99c5fa0 RCX: 00007f77f974c799 [ 1920.396536][T16395] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1920.396554][T16395] RBP: 00007f77f81a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1920.396570][T16395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1920.396631][T16395] R13: 00007f77f99c6038 R14: 00007f77f99c5fa0 R15: 00007fff366dee38 [ 1920.396650][T16395] [ 1920.628662][ T4160] syz_tun (unregistering): left allmulticast mode [ 1920.645565][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.655300][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.674456][T16403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.723667][T16403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.986911][T16428] hsr0: entered promiscuous mode [ 1921.110549][T16428] hsr0: left promiscuous mode [ 1921.258094][ T23] tipc: Node number set to 4269801504 [ 1921.268775][ T906] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1921.358388][ T906] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1921.389188][T16404] lo speed is unknown, defaulting to 1000 [ 1921.400019][ T906] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1921.419529][T16317] lo speed is unknown, defaulting to 1000 [ 1921.463353][T16404] lo speed is unknown, defaulting to 1000 [ 1921.531526][ T906] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1921.656370][T16391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1921.752766][T16404] chnl_net:caif_netlink_parms(): no params data found [ 1921.928290][T16570] FAULT_INJECTION: forcing a failure. [ 1921.928290][T16570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1921.951635][T16570] CPU: 0 UID: 0 PID: 16570 Comm: syz.9.21354 Tainted: G W syzkaller #0 PREEMPT(full) [ 1921.951676][T16570] Tainted: [W]=WARN [ 1921.951685][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1921.951710][T16570] Call Trace: [ 1921.951717][T16570] [ 1921.951725][T16570] __dump_stack+0x1d/0x30 [ 1921.951753][T16570] dump_stack_lvl+0x95/0xd0 [ 1921.951779][T16570] dump_stack+0x15/0x1b [ 1921.951806][T16570] should_fail_ex+0x263/0x280 [ 1921.951904][T16570] should_fail+0xb/0x20 [ 1921.951970][T16570] should_fail_usercopy+0x1a/0x20 [ 1921.952001][T16570] _copy_from_user+0x1c/0xb0 [ 1921.952097][T16570] ___sys_sendmsg+0xc1/0x1e0 [ 1921.952130][T16570] ? path_openat+0x1b01/0x2050 [ 1921.952176][T16570] __sys_sendmmsg+0x185/0x320 [ 1921.952260][T16570] __x64_sys_sendmmsg+0x57/0x70 [ 1921.952353][T16570] x64_sys_call+0x27aa/0x3020 [ 1921.952379][T16570] do_syscall_64+0x12c/0x370 [ 1921.952456][T16570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.952478][T16570] RIP: 0033:0x7f77f974c799 [ 1921.952498][T16570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1921.952594][T16570] RSP: 002b:00007f77f81a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1921.952618][T16570] RAX: ffffffffffffffda RBX: 00007f77f99c5fa0 RCX: 00007f77f974c799 [ 1921.952639][T16570] RDX: 0000000000000001 RSI: 0000200000010840 RDI: 0000000000000004 [ 1921.952653][T16570] RBP: 00007f77f81a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.952669][T16570] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.952686][T16570] R13: 00007f77f99c6038 R14: 00007f77f99c5fa0 R15: 00007fff366dee38 [ 1921.952770][T16570] [ 1921.954470][ T906] bond0 (unregistering): Released all slaves [ 1922.191982][T16591] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1922.334321][T16404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.358884][T16404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.372552][T16404] bridge_slave_0: entered allmulticast mode [ 1922.388820][T16404] bridge_slave_0: entered promiscuous mode [ 1922.397716][T16404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.406714][T16404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.414175][T16404] bridge_slave_1: entered allmulticast mode [ 1922.421411][T16404] bridge_slave_1: entered promiscuous mode [ 1922.451447][ T906] hsr_slave_0: left promiscuous mode [ 1922.465637][ T906] hsr_slave_1: left promiscuous mode [ 1922.491235][ T906] veth1_macvtap: left promiscuous mode [ 1922.498342][ T906] veth0_macvtap: left promiscuous mode [ 1922.506970][ T9813] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1922.535183][ T9813] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1922.543466][ T9813] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1922.552046][ T906] veth1_vlan: left promiscuous mode [ 1922.557748][ T906] veth0_vlan: left promiscuous mode [ 1922.574027][ T9813] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1922.591661][ T9813] rtc rtc0: __rtc_set_alarm: err=-22 [ 1922.669937][ T906] macvlan1 (unregistering): left allmulticast mode [ 1922.677994][ T906] team0 (unregistering): Port device macvlan1 removed [ 1922.795601][T16391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.812276][T16404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1922.823538][T16404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1922.862007][T16404] team0: Port device team_slave_0 added [ 1922.873354][T16404] team0: Port device team_slave_1 added [ 1922.908891][T16404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.917206][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.947393][T16404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.962614][T16404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.970895][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.998994][T16404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1923.061188][T16404] hsr_slave_0: entered promiscuous mode [ 1923.069589][T16404] hsr_slave_1: entered promiscuous mode [ 1923.089272][T16404] debugfs: 'hsr0' already exists in 'hsr' [ 1923.096510][T16404] Cannot create hsr debugfs directory [ 1923.545046][T16391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.643970][ T906] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.761166][ T906] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.769986][ T906] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.796087][ T108] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.889461][T16404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1923.903616][T16404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1923.933299][T16404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1924.022881][T16404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1924.184786][T16404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1924.342586][T16944] netlink: 144 bytes leftover after parsing attributes in process `syz.4.21379'. [ 1924.362628][T16905] lo speed is unknown, defaulting to 1000 [ 1924.378881][T16404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1924.416107][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.423836][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1924.468656][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.476234][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1924.490963][T16965] FAULT_INJECTION: forcing a failure. [ 1924.490963][T16965] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1924.597944][T16965] CPU: 1 UID: 0 PID: 16965 Comm: syz.9.21384 Tainted: G W syzkaller #0 PREEMPT(full) [ 1924.597986][T16965] Tainted: [W]=WARN [ 1924.597995][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1924.598010][T16965] Call Trace: [ 1924.598055][T16965] [ 1924.598065][T16965] __dump_stack+0x1d/0x30 [ 1924.598098][T16965] dump_stack_lvl+0x95/0xd0 [ 1924.598121][T16965] dump_stack+0x15/0x1b [ 1924.598143][T16965] should_fail_ex+0x263/0x280 [ 1924.598202][T16965] should_fail_alloc_page+0xf2/0x100 [ 1924.598231][T16965] __alloc_frozen_pages_noprof+0x108/0x360 [ 1924.598287][T16965] alloc_pages_mpol+0xb3/0x260 [ 1924.598319][T16965] vma_alloc_folio_noprof+0x1a9/0x300 [ 1924.598417][T16965] handle_mm_fault+0x1129/0x3020 [ 1924.598453][T16965] ? vma_start_read+0x1c7/0x2c0 [ 1924.598509][T16965] do_user_addr_fault+0x62f/0x1050 [ 1924.598545][T16965] ? trace_page_fault_user+0x1f/0xe0 [ 1924.598576][T16965] exc_page_fault+0x62/0xa0 [ 1924.598659][T16965] asm_exc_page_fault+0x26/0x30 [ 1924.598683][T16965] RIP: 0033:0x7f77f960df4b [ 1924.598702][T16965] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1924.598721][T16965] RSP: 002b:00007f77f81a5fa0 EFLAGS: 00010206 [ 1924.598783][T16965] RAX: 0000000000000000 RBX: 00007f77f99c5fa0 RCX: 0000000000000000 [ 1924.598799][T16965] RDX: 0000000000000000 RSI: 000000000000000b RDI: 00002000000002c0 [ 1924.598860][T16965] RBP: 00007f77f81a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.598873][T16965] R10: 00002000000002c0 R11: 0000000000000000 R12: 0000000000000001 [ 1924.598886][T16965] R13: 00007f77f99c6038 R14: 00007f77f99c5fa0 R15: 00007fff366dee38 [ 1924.598906][T16965] [ 1924.598940][T16965] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1924.847702][T16969] hub 8-0:1.0: USB hub found [ 1924.854403][T16969] hub 8-0:1.0: 8 ports detected [ 1924.978656][T16965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16965 comm=syz.9.21384 [ 1925.009284][T16404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1925.041579][T16976] netlink: 40 bytes leftover after parsing attributes in process `syz.8.21386'. [ 1925.061410][T16404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1925.137515][T16905] lo speed is unknown, defaulting to 1000 [ 1925.233624][T16404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1925.293227][T17025] FAULT_INJECTION: forcing a failure. [ 1925.293227][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1925.313897][T17025] CPU: 0 UID: 0 PID: 17025 Comm: syz.9.21391 Tainted: G W syzkaller #0 PREEMPT(full) [ 1925.313939][T17025] Tainted: [W]=WARN [ 1925.313948][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1925.313962][T17025] Call Trace: [ 1925.313971][T17025] [ 1925.314002][T17025] __dump_stack+0x1d/0x30 [ 1925.314033][T17025] dump_stack_lvl+0x95/0xd0 [ 1925.314138][T17025] dump_stack+0x15/0x1b [ 1925.314163][T17025] should_fail_ex+0x263/0x280 [ 1925.314194][T17025] should_fail+0xb/0x20 [ 1925.314293][T17025] should_fail_usercopy+0x1a/0x20 [ 1925.314354][T17025] _copy_to_user+0x20/0xa0 [ 1925.314389][T17025] simple_read_from_buffer+0xb5/0x130 [ 1925.314416][T17025] proc_fail_nth_read+0x10e/0x150 [ 1925.314502][T17025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1925.314536][T17025] vfs_read+0x1ab/0x7f0 [ 1925.314572][T17025] ? __rcu_read_unlock+0x4e/0x70 [ 1925.314606][T17025] ? __fget_files+0x184/0x1c0 [ 1925.314643][T17025] ? mutex_lock+0x57/0x90 [ 1925.314710][T17025] ksys_read+0xdc/0x1a0 [ 1925.314732][T17025] __x64_sys_read+0x40/0x50 [ 1925.314754][T17025] x64_sys_call+0x2886/0x3020 [ 1925.314822][T17025] do_syscall_64+0x12c/0x370 [ 1925.314851][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.314921][T17025] RIP: 0033:0x7f77f970cfce [ 1925.314990][T17025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1925.315013][T17025] RSP: 002b:00007f77f81a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1925.315040][T17025] RAX: ffffffffffffffda RBX: 00007f77f81a76c0 RCX: 00007f77f970cfce [ 1925.315059][T17025] RDX: 000000000000000f RSI: 00007f77f81a70a0 RDI: 0000000000000004 [ 1925.315076][T17025] RBP: 00007f77f81a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1925.315131][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.315177][T17025] R13: 00007f77f99c6038 R14: 00007f77f99c5fa0 R15: 00007fff366dee38 [ 1925.315199][T17025] [ 1925.781006][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 1925.781023][ T28] audit: type=1326 audit(1774535916.201:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1925.846403][ T28] audit: type=1326 audit(1774535916.201:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1925.862729][T16404] veth0_vlan: entered promiscuous mode [ 1925.875872][ T28] audit: type=1326 audit(1774535916.201:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1925.905015][ T28] audit: type=1326 audit(1774535916.201:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1925.936661][T16404] veth1_vlan: entered promiscuous mode [ 1925.964628][T16404] veth0_macvtap: entered promiscuous mode [ 1925.971490][ T28] audit: type=1326 audit(1774535916.221:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1925.998158][ T28] audit: type=1326 audit(1774535916.221:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1925.999228][T17076] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.027579][ T28] audit: type=1326 audit(1774535916.221:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1926.065370][T16404] veth1_macvtap: entered promiscuous mode [ 1926.075979][T17080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17080 comm=syz.3.21403 [ 1926.097823][T16404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1926.112037][T17078] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.132302][ T28] audit: type=1326 audit(1774535916.261:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1926.161409][ T28] audit: type=1326 audit(1774535916.261:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1926.192816][T17084] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.204634][T17089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17089 comm=syz.8.21402 [ 1926.205600][ T28] audit: type=1326 audit(1774535916.261:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.3.21398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1926.250480][T17076] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.266162][T17093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17093 comm=syz.4.21404 [ 1926.284915][T16404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1926.294866][T17093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.320498][T17093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.321771][T17078] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.331880][T17090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.349337][T17090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.360696][T17084] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.373108][ T7950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.383813][ T7950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.396851][T17076] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.415745][T17078] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.428497][ T7950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.438492][ T7950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.455174][T17084] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.485837][T17078] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.513067][T17084] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.529230][T17076] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.565279][ T906] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.602660][T27367] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.620068][T27367] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.642174][T17123] netlink: 'syz.9.21406': attribute type 10 has an invalid length. [ 1926.652989][T17123] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21406'. [ 1926.676946][T27367] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.708945][T27367] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.727945][T27367] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.752631][T27367] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.769000][T27367] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.938118][T17161] loop5: detected capacity change from 0 to 512 [ 1926.986361][T17161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1927.022868][T17161] EXT4-fs (loop5): orphan file too big: 4294967295 [ 1927.044437][T17161] EXT4-fs (loop5): mount failed [ 1927.350286][T17203] FAULT_INJECTION: forcing a failure. [ 1927.350286][T17203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1927.383731][T17203] CPU: 1 UID: 0 PID: 17203 Comm: syz.5.21425 Tainted: G W syzkaller #0 PREEMPT(full) [ 1927.383769][T17203] Tainted: [W]=WARN [ 1927.383777][T17203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1927.383791][T17203] Call Trace: [ 1927.383799][T17203] [ 1927.383809][T17203] __dump_stack+0x1d/0x30 [ 1927.383845][T17203] dump_stack_lvl+0x95/0xd0 [ 1927.383899][T17203] dump_stack+0x15/0x1b [ 1927.383985][T17203] should_fail_ex+0x263/0x280 [ 1927.384018][T17203] should_fail+0xb/0x20 [ 1927.384044][T17203] should_fail_usercopy+0x1a/0x20 [ 1927.384130][T17203] _copy_from_user+0x1c/0xb0 [ 1927.384169][T17203] ___sys_sendmsg+0xc1/0x1e0 [ 1927.384217][T17203] __x64_sys_sendmsg+0xd4/0x160 [ 1927.384277][T17203] x64_sys_call+0x194c/0x3020 [ 1927.384305][T17203] do_syscall_64+0x12c/0x370 [ 1927.384329][T17203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.384356][T17203] RIP: 0033:0x7f8c4b65c799 [ 1927.384396][T17203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1927.384419][T17203] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1927.384510][T17203] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1927.384608][T17203] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1927.384624][T17203] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1927.384640][T17203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1927.384657][T17203] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1927.384679][T17203] [ 1927.589292][T17207] netlink: 'syz.9.21426': attribute type 1 has an invalid length. [ 1927.643787][T17207] bond1: entered promiscuous mode [ 1927.652526][T17207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1927.749081][T17247] bond1: (slave bridge1): making interface the new active one [ 1927.776891][T17247] bridge1: entered promiscuous mode [ 1927.785301][T17247] bridge1: left promiscuous mode [ 1928.342991][ T108] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.359978][T27367] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.390647][T27367] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.416575][T27367] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.682276][T17312] FAULT_INJECTION: forcing a failure. [ 1928.682276][T17312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1928.696786][T17312] CPU: 1 UID: 0 PID: 17312 Comm: syz.5.21446 Tainted: G W syzkaller #0 PREEMPT(full) [ 1928.696859][T17312] Tainted: [W]=WARN [ 1928.696868][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1928.696882][T17312] Call Trace: [ 1928.696888][T17312] [ 1928.696896][T17312] __dump_stack+0x1d/0x30 [ 1928.696926][T17312] dump_stack_lvl+0x95/0xd0 [ 1928.697007][T17312] dump_stack+0x15/0x1b [ 1928.697032][T17312] should_fail_ex+0x263/0x280 [ 1928.697063][T17312] should_fail_alloc_page+0xf2/0x100 [ 1928.697090][T17312] __alloc_frozen_pages_noprof+0x108/0x360 [ 1928.697152][T17312] alloc_pages_mpol+0xb3/0x260 [ 1928.697179][T17312] ? css_rstat_updated+0xbb/0x280 [ 1928.697238][T17312] vma_alloc_folio_noprof+0x1a9/0x300 [ 1928.697272][T17312] handle_mm_fault+0x1129/0x3020 [ 1928.697392][T17312] ? vma_start_read+0x1c7/0x2c0 [ 1928.697420][T17312] do_user_addr_fault+0x62f/0x1050 [ 1928.697504][T17312] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 1928.697532][T17312] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 1928.697657][T17312] ? trace_page_fault_user+0x1f/0xe0 [ 1928.697734][T17312] exc_page_fault+0x62/0xa0 [ 1928.697826][T17312] asm_exc_page_fault+0x26/0x30 [ 1928.697849][T17312] RIP: 0033:0x7f8c4b51df4b [ 1928.697866][T17312] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1928.697968][T17312] RSP: 002b:00007f8c4a0adfa0 EFLAGS: 00010206 [ 1928.697991][T17312] RAX: 0000000000000000 RBX: 00007f8c4b8d5fa0 RCX: 0000000000000000 [ 1928.698008][T17312] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 1928.698043][T17312] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1928.698059][T17312] R10: 0000200000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1928.698076][T17312] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1928.698099][T17312] [ 1928.698131][T17312] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1929.001471][T17329] loop4: detected capacity change from 0 to 256 [ 1929.282321][T17354] siw: device registration error -23 [ 1929.293421][T17354] FAULT_INJECTION: forcing a failure. [ 1929.293421][T17354] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.306668][T17354] CPU: 1 UID: 0 PID: 17354 Comm: syz.9.21452 Tainted: G W syzkaller #0 PREEMPT(full) [ 1929.306763][T17354] Tainted: [W]=WARN [ 1929.306772][T17354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1929.306788][T17354] Call Trace: [ 1929.306796][T17354] [ 1929.306880][T17354] __dump_stack+0x1d/0x30 [ 1929.306911][T17354] dump_stack_lvl+0x95/0xd0 [ 1929.306939][T17354] dump_stack+0x15/0x1b [ 1929.306983][T17354] should_fail_ex+0x263/0x280 [ 1929.307010][T17354] should_failslab+0x8c/0xb0 [ 1929.307032][T17354] kmem_cache_alloc_noprof+0x66/0x400 [ 1929.307056][T17354] ? create_new_namespaces+0x3c/0x440 [ 1929.307153][T17354] create_new_namespaces+0x3c/0x440 [ 1929.307269][T17354] unshare_nsproxy_namespaces+0xe6/0x120 [ 1929.307304][T17354] ksys_unshare+0x3f2/0x6f0 [ 1929.307330][T17354] ? ksys_write+0x194/0x1a0 [ 1929.307363][T17354] __x64_sys_unshare+0x1f/0x30 [ 1929.307390][T17354] x64_sys_call+0x1cef/0x3020 [ 1929.307416][T17354] do_syscall_64+0x12c/0x370 [ 1929.307443][T17354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.307542][T17354] RIP: 0033:0x7f77f974c799 [ 1929.307561][T17354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.307637][T17354] RSP: 002b:00007f77f8165028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1929.307663][T17354] RAX: ffffffffffffffda RBX: 00007f77f99c6180 RCX: 00007f77f974c799 [ 1929.307681][T17354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c040000 [ 1929.307770][T17354] RBP: 00007f77f8165090 R08: 0000000000000000 R09: 0000000000000000 [ 1929.307783][T17354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1929.307796][T17354] R13: 00007f77f99c6218 R14: 00007f77f99c6180 R15: 00007fff366dee38 [ 1929.307818][T17354] [ 1929.740523][T17367] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.790015][T17372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17372 comm=syz.4.21461 [ 1929.832155][T17372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.844980][T17367] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.857409][T17372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.871715][T17372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.884233][T17372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.906221][T17367] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.016142][T17367] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.066529][T17384] loop5: detected capacity change from 0 to 256 [ 1930.380136][T17390] 9p: Bad value for 'rfdno' [ 1930.567842][T17404] loop5: detected capacity change from 0 to 256 [ 1930.625107][T17410] geneve2: entered allmulticast mode [ 1930.692024][T17418] FAULT_INJECTION: forcing a failure. [ 1930.692024][T17418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1930.754796][T17418] CPU: 0 UID: 0 PID: 17418 Comm: syz.5.21470 Tainted: G W syzkaller #0 PREEMPT(full) [ 1930.754833][T17418] Tainted: [W]=WARN [ 1930.754841][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1930.754884][T17418] Call Trace: [ 1930.754892][T17418] [ 1930.754901][T17418] __dump_stack+0x1d/0x30 [ 1930.754933][T17418] dump_stack_lvl+0x95/0xd0 [ 1930.754962][T17418] dump_stack+0x15/0x1b [ 1930.755027][T17418] should_fail_ex+0x263/0x280 [ 1930.755115][T17418] should_fail+0xb/0x20 [ 1930.755141][T17418] should_fail_usercopy+0x1a/0x20 [ 1930.755248][T17418] _copy_to_user+0x20/0xa0 [ 1930.755302][T17418] simple_read_from_buffer+0xb5/0x130 [ 1930.755330][T17418] proc_fail_nth_read+0x10e/0x150 [ 1930.755415][T17418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1930.755472][T17418] vfs_read+0x1ab/0x7f0 [ 1930.755508][T17418] ? __rcu_read_unlock+0x4e/0x70 [ 1930.755533][T17418] ? __fget_files+0x184/0x1c0 [ 1930.755650][T17418] ? mutex_lock+0x57/0x90 [ 1930.755686][T17418] ksys_read+0xdc/0x1a0 [ 1930.755709][T17418] __x64_sys_read+0x40/0x50 [ 1930.755739][T17418] x64_sys_call+0x2886/0x3020 [ 1930.755825][T17418] do_syscall_64+0x12c/0x370 [ 1930.755853][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.755879][T17418] RIP: 0033:0x7f8c4b61cfce [ 1930.755898][T17418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1930.755954][T17418] RSP: 002b:00007f8c4a0aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1930.755980][T17418] RAX: ffffffffffffffda RBX: 00007f8c4a0af6c0 RCX: 00007f8c4b61cfce [ 1930.755997][T17418] RDX: 000000000000000f RSI: 00007f8c4a0af0a0 RDI: 0000000000000004 [ 1930.756079][T17418] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1930.756095][T17418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1930.756110][T17418] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1930.756198][T17418] [ 1931.793407][T17442] xt_hashlimit: size too large, truncated to 1048576 [ 1932.676246][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21485'. [ 1932.686969][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21485'. [ 1932.698005][T17477] macvlan0: entered promiscuous mode [ 1932.708041][T17477] netlink: 'syz.8.21485': attribute type 2 has an invalid length. [ 1932.720458][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21485'. [ 1932.904141][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21493'. [ 1933.144926][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21495'. [ 1933.865373][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21502'. [ 1934.834711][T17561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1934.892903][T17562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1935.124506][ T28] kauditd_printk_skb: 342 callbacks suppressed [ 1935.124535][ T28] audit: type=1326 audit(1774535925.551:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.166989][ T28] audit: type=1326 audit(1774535925.591:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.205627][ T28] audit: type=1326 audit(1774535925.631:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.254883][T17577] FAULT_INJECTION: forcing a failure. [ 1935.254883][T17577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1935.269360][ T28] audit: type=1326 audit(1774535925.631:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.275427][T17577] CPU: 1 UID: 0 PID: 17577 Comm: syz.5.21516 Tainted: G W syzkaller #0 PREEMPT(full) [ 1935.275514][T17577] Tainted: [W]=WARN [ 1935.275522][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1935.275536][T17577] Call Trace: [ 1935.275542][T17577] [ 1935.275549][T17577] __dump_stack+0x1d/0x30 [ 1935.275579][T17577] dump_stack_lvl+0x95/0xd0 [ 1935.275668][T17577] dump_stack+0x15/0x1b [ 1935.275691][T17577] should_fail_ex+0x263/0x280 [ 1935.275720][T17577] should_fail+0xb/0x20 [ 1935.275745][T17577] should_fail_usercopy+0x1a/0x20 [ 1935.275780][T17577] _copy_to_user+0x20/0xa0 [ 1935.275887][T17577] simple_read_from_buffer+0xb5/0x130 [ 1935.275913][T17577] proc_fail_nth_read+0x10e/0x150 [ 1935.275944][T17577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1935.276024][T17577] vfs_read+0x1ab/0x7f0 [ 1935.276057][T17577] ? __rcu_read_unlock+0x4e/0x70 [ 1935.276080][T17577] ? __fget_files+0x184/0x1c0 [ 1935.276129][T17577] ? fput+0x8f/0xc0 [ 1935.276155][T17577] ? mutex_lock+0x57/0x90 [ 1935.276188][T17577] ksys_read+0xdc/0x1a0 [ 1935.276208][T17577] __x64_sys_read+0x40/0x50 [ 1935.276308][T17577] x64_sys_call+0x2886/0x3020 [ 1935.276394][T17577] do_syscall_64+0x12c/0x370 [ 1935.276419][T17577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.276443][T17577] RIP: 0033:0x7f8c4b61cfce [ 1935.276461][T17577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1935.276505][T17577] RSP: 002b:00007f8c4a0aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1935.276529][T17577] RAX: ffffffffffffffda RBX: 00007f8c4a0af6c0 RCX: 00007f8c4b61cfce [ 1935.276551][T17577] RDX: 000000000000000f RSI: 00007f8c4a0af0a0 RDI: 0000000000000004 [ 1935.276565][T17577] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1935.276607][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1935.276670][T17577] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1935.276689][T17577] [ 1935.402947][T17586] loop5: detected capacity change from 0 to 2048 [ 1935.406223][ T28] audit: type=1326 audit(1774535925.631:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.563389][ T28] audit: type=1326 audit(1774535925.631:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.606242][T16546] loop5: p1 < > p3 [ 1935.613948][T16546] loop5: p3 size 134217728 extends beyond EOD, truncated [ 1935.622762][ T108] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.636237][ T108] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.646526][ T28] audit: type=1326 audit(1774535925.631:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.677641][T17586] loop5: p1 < > p3 [ 1935.683377][T17586] loop5: p3 size 134217728 extends beyond EOD, truncated [ 1935.707507][T22906] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.720246][T22906] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.736695][ T28] audit: type=1326 audit(1774535925.631:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.771011][ T28] audit: type=1326 audit(1774535925.631:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.798620][ T28] audit: type=1326 audit(1774535925.631:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17571 comm="syz.3.21514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d37d2c799 code=0x7ffc0000 [ 1935.838369][T15008] udevd[15008]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1935.852670][T17621] FAULT_INJECTION: forcing a failure. [ 1935.852670][T17621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1935.856521][T16546] udevd[16546]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1935.892785][T15008] udevd[15008]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1935.898064][T17621] CPU: 0 UID: 0 PID: 17621 Comm: syz.5.21524 Tainted: G W syzkaller #0 PREEMPT(full) [ 1935.898102][T17621] Tainted: [W]=WARN [ 1935.898110][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1935.898295][T17621] Call Trace: [ 1935.898303][T17621] [ 1935.898390][T17621] __dump_stack+0x1d/0x30 [ 1935.898419][T17621] dump_stack_lvl+0x95/0xd0 [ 1935.898445][T17621] dump_stack+0x15/0x1b [ 1935.898530][T17621] should_fail_ex+0x263/0x280 [ 1935.898558][T17621] should_fail+0xb/0x20 [ 1935.898583][T17621] should_fail_usercopy+0x1a/0x20 [ 1935.898613][T17621] _copy_from_user+0x1c/0xb0 [ 1935.898711][T17621] ___sys_sendmsg+0xc1/0x1e0 [ 1935.898754][T17621] __x64_sys_sendmsg+0xd4/0x160 [ 1935.898814][T17621] x64_sys_call+0x194c/0x3020 [ 1935.898843][T17621] do_syscall_64+0x12c/0x370 [ 1935.898869][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.898899][T17621] RIP: 0033:0x7f8c4b65c799 [ 1935.898917][T17621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1935.898938][T17621] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1935.899015][T17621] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1935.899030][T17621] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 1935.899064][T17621] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1935.899079][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1935.899093][T17621] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1935.899123][T17621] [ 1936.116765][T16546] udevd[16546]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1936.289484][T17657] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.340691][T17671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17671 comm=syz.4.21533 [ 1936.355971][T17671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.360891][T17657] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.371624][T17671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.386750][T17671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.403684][T17671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.435178][T17657] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.486631][T17657] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.607516][T17709] FAULT_INJECTION: forcing a failure. [ 1936.607516][T17709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.621647][T17709] CPU: 0 UID: 0 PID: 17709 Comm: syz.5.21545 Tainted: G W syzkaller #0 PREEMPT(full) [ 1936.621751][T17709] Tainted: [W]=WARN [ 1936.621761][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1936.621776][T17709] Call Trace: [ 1936.621784][T17709] [ 1936.621793][T17709] __dump_stack+0x1d/0x30 [ 1936.621825][T17709] dump_stack_lvl+0x95/0xd0 [ 1936.621852][T17709] dump_stack+0x15/0x1b [ 1936.621889][T17709] should_fail_ex+0x263/0x280 [ 1936.621921][T17709] should_fail+0xb/0x20 [ 1936.621949][T17709] should_fail_usercopy+0x1a/0x20 [ 1936.621979][T17709] _copy_from_user+0x1c/0xb0 [ 1936.622047][T17709] ___sys_sendmsg+0xc1/0x1e0 [ 1936.622084][T17709] ? path_openat+0x1b01/0x2050 [ 1936.622208][T17709] __sys_sendmmsg+0x185/0x320 [ 1936.622254][T17709] __x64_sys_sendmmsg+0x57/0x70 [ 1936.622292][T17709] x64_sys_call+0x27aa/0x3020 [ 1936.622323][T17709] do_syscall_64+0x12c/0x370 [ 1936.622353][T17709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.622452][T17709] RIP: 0033:0x7f8c4b65c799 [ 1936.622472][T17709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.622557][T17709] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1936.622581][T17709] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1936.622599][T17709] RDX: 0000000000000001 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 1936.622650][T17709] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1936.622666][T17709] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000001 [ 1936.622681][T17709] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1936.622763][T17709] [ 1937.150714][T17741] FAULT_INJECTION: forcing a failure. [ 1937.150714][T17741] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.180444][T17741] CPU: 1 UID: 0 PID: 17741 Comm: syz.5.21556 Tainted: G W syzkaller #0 PREEMPT(full) [ 1937.180488][T17741] Tainted: [W]=WARN [ 1937.180495][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1937.180510][T17741] Call Trace: [ 1937.180519][T17741] [ 1937.180529][T17741] __dump_stack+0x1d/0x30 [ 1937.180608][T17741] dump_stack_lvl+0x95/0xd0 [ 1937.180700][T17741] dump_stack+0x15/0x1b [ 1937.180722][T17741] should_fail_ex+0x263/0x280 [ 1937.180750][T17741] ? sctp_datamsg_from_user+0x57/0x950 [ 1937.180786][T17741] should_failslab+0x8c/0xb0 [ 1937.180819][T17741] __kmalloc_cache_noprof+0x5f/0x410 [ 1937.180843][T17741] ? __rcu_read_unlock+0x4e/0x70 [ 1937.180866][T17741] sctp_datamsg_from_user+0x57/0x950 [ 1937.180940][T17741] ? __sk_mem_raise_allocated+0x578/0x9a0 [ 1937.180968][T17741] ? __sk_mem_schedule+0x80/0xc0 [ 1937.181031][T17741] sctp_sendmsg_to_asoc+0xa7a/0xf50 [ 1937.181139][T17741] ? lockref_put_return+0xf7/0x130 [ 1937.181175][T17741] ? _raw_spin_lock_bh+0x56/0xb0 [ 1937.181213][T17741] ? _raw_spin_unlock_bh+0x18/0x20 [ 1937.181315][T17741] ? __rcu_read_unlock+0x4e/0x70 [ 1937.181411][T17741] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 1937.181440][T17741] sctp_sendmsg+0x13b9/0x1d60 [ 1937.181469][T17741] ? selinux_socket_sendmsg+0x192/0x1c0 [ 1937.181595][T17741] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1937.181615][T17741] ? __pfx_inet_sendmsg+0x10/0x10 [ 1937.181650][T17741] inet_sendmsg+0xc5/0xd0 [ 1937.181686][T17741] sock_write_iter+0x2c7/0x320 [ 1937.181736][T17741] ? __pfx_sock_write_iter+0x10/0x10 [ 1937.181756][T17741] vfs_write+0x5a6/0x9f0 [ 1937.181779][T17741] ksys_write+0xdc/0x1a0 [ 1937.181800][T17741] __x64_sys_write+0x40/0x50 [ 1937.181902][T17741] x64_sys_call+0x27e1/0x3020 [ 1937.181932][T17741] do_syscall_64+0x12c/0x370 [ 1937.181957][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.181979][T17741] RIP: 0033:0x7f8c4b65c799 [ 1937.182000][T17741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.182020][T17741] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1937.182044][T17741] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1937.182087][T17741] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1937.182104][T17741] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1937.182120][T17741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1937.182135][T17741] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1937.182156][T17741] [ 1937.574283][T17769] netlink: 'syz.5.21568': attribute type 1 has an invalid length. [ 1937.657151][T17769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1937.784608][T17769] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1937.797402][T17769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21568'. [ 1939.706258][T17769] bond1 (unregistering): (slave veth3): Releasing active interface [ 1939.828565][T17769] bond1 (unregistering): Released all slaves [ 1940.153826][T17891] program syz.5.21583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1940.909816][T17893] syz_tun: entered allmulticast mode [ 1940.937028][T17893] dvmrp8: entered allmulticast mode [ 1940.965907][T17892] syz_tun: left allmulticast mode [ 1941.317110][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 1941.317129][ T28] audit: type=1326 audit(1774535931.741:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1941.380931][ T28] audit: type=1326 audit(1774535931.781:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1941.413673][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21599'. [ 1941.679520][ T28] audit: type=1326 audit(1774535931.781:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1941.904513][ T28] audit: type=1326 audit(1774535931.781:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1941.960513][ T28] audit: type=1326 audit(1774535931.781:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1942.007812][ T28] audit: type=1326 audit(1774535931.781:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1942.058421][ T28] audit: type=1326 audit(1774535931.781:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1942.083757][ T28] audit: type=1326 audit(1774535931.781:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1942.108907][ T28] audit: type=1326 audit(1774535931.781:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1942.134625][ T28] audit: type=1326 audit(1774535931.781:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17942 comm="syz.5.21600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4b65c799 code=0x7ffc0000 [ 1942.166351][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21603'. [ 1942.185184][T17954] bond0: Caught tx_queue_len zero misconfig [ 1942.259239][ T108] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.269435][ T108] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.294376][ T108] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.306335][ T108] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1942.590609][T17984] batadv_slave_0: entered promiscuous mode [ 1942.704956][T17994] 9p: Bad value for 'rfdno' [ 1942.784239][T17992] loop5: detected capacity change from 0 to 8192 [ 1942.816715][T17984] batman_adv: batadv0: Adding interface: macsec1 [ 1942.825518][T17984] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1942.859275][T17984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1942.897029][T17984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1942.909795][T17984] batman_adv: batadv0: Interface activated: macsec1 [ 1942.927552][T17989] syz_tun: entered allmulticast mode [ 1942.939133][T17992] FAULT_INJECTION: forcing a failure. [ 1942.939133][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.940527][T18007] dvmrp8: entered allmulticast mode [ 1942.952967][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.5.21614 Tainted: G W syzkaller #0 PREEMPT(full) [ 1942.953003][T17992] Tainted: [W]=WARN [ 1942.953011][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.953025][T17992] Call Trace: [ 1942.953032][T17992] [ 1942.953042][T17992] __dump_stack+0x1d/0x30 [ 1942.953082][T17992] dump_stack_lvl+0x95/0xd0 [ 1942.953108][T17992] dump_stack+0x15/0x1b [ 1942.953149][T17992] should_fail_ex+0x263/0x280 [ 1942.953251][T17992] should_failslab+0x8c/0xb0 [ 1942.953275][T17992] kmem_cache_alloc_noprof+0x66/0x400 [ 1942.953299][T17992] ? do_getname+0x2e/0x1c0 [ 1942.953339][T17992] do_getname+0x2e/0x1c0 [ 1942.953364][T17992] __se_sys_mkdirat+0x21/0xf0 [ 1942.953481][T17992] __x64_sys_mkdirat+0x43/0x50 [ 1942.953503][T17992] x64_sys_call+0x2c4e/0x3020 [ 1942.953532][T17992] do_syscall_64+0x12c/0x370 [ 1942.953559][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1942.953615][T17992] RIP: 0033:0x7f8c4b65c799 [ 1942.953633][T17992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.953659][T17992] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1942.953683][T17992] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1942.953759][T17992] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1942.953818][T17992] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.953833][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1942.953846][T17992] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1942.953867][T17992] [ 1943.487082][T18017] lo speed is unknown, defaulting to 1000 [ 1943.611144][T18016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18016 comm=syz.4.21620 [ 1943.682648][T18031] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.709420][T18016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.21620'. [ 1943.722955][T18034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18034 comm=syz.8.21621 [ 1943.746709][T17959] syz_tun: left allmulticast mode [ 1943.762779][T18017] lo speed is unknown, defaulting to 1000 [ 1943.867159][T18031] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.973646][T18031] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.107348][T18031] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.196557][T22906] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.271932][T22906] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.284057][T22906] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.302313][T22906] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.371350][T18096] 9p: Bad value for 'rfdno' [ 1944.451838][T18101] loop4: detected capacity change from 0 to 1024 [ 1944.475312][T18101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1944.513143][T18101] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.21629: inode #8192: comm syz.4.21629: iget: illegal inode # [ 1944.540289][T18101] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.21629: error while reading EA inode 8192 err=-117 [ 1944.642031][T18112] loop5: detected capacity change from 0 to 1024 [ 1944.644408][T15720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1944.653653][T18112] EXT4-fs: inline encryption not supported [ 1944.667962][T18112] EXT4-fs: Ignoring removed nobh option [ 1944.681370][T18112] EXT4-fs: Ignoring removed bh option [ 1944.702071][T18112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1944.930397][T18130] x_tables: duplicate underflow at hook 1 [ 1945.356238][T18140] raw_sendmsg: syz.4.21632 forgot to set AF_INET. Fix it! [ 1945.968679][T18150] lo speed is unknown, defaulting to 1000 [ 1946.143770][T18150] lo speed is unknown, defaulting to 1000 [ 1946.143851][T18154] lo speed is unknown, defaulting to 1000 [ 1946.354284][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 1946.354302][ T28] audit: type=1326 audit(1774535936.781:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.21639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47abc0cfce code=0x7ffc0000 [ 1946.781820][T16404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1946.906495][T18154] lo speed is unknown, defaulting to 1000 [ 1947.022733][ T28] audit: type=1326 audit(1774535937.181:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.050030][ T28] audit: type=1326 audit(1774535937.181:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.077216][ T28] audit: type=1326 audit(1774535937.181:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.107192][ T28] audit: type=1326 audit(1774535937.181:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.133595][ T28] audit: type=1326 audit(1774535937.181:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.138711][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21650'. [ 1947.158849][ T28] audit: type=1326 audit(1774535937.181:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.195028][ T28] audit: type=1326 audit(1774535937.181:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.220729][ T28] audit: type=1326 audit(1774535937.181:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18187 comm="syz.9.21646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1947.245849][ T28] audit: type=1326 audit(1774535937.251:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.21639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1947.282974][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21650'. [ 1947.314431][T18211] vlan2: entered promiscuous mode [ 1947.369032][T18211] batadv0: entered promiscuous mode [ 1947.377986][T18235] loop5: detected capacity change from 0 to 512 [ 1947.390530][T18235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1947.434770][T18235] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.21654: corrupted in-inode xattr: invalid size in ea xattr [ 1947.453098][T18235] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1947.453372][T18235] EXT4-fs (loop5): get orphan inode failed [ 1947.464023][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1947.464063][ C0] EXT4-fs (loop5): initial error at time 1774535937: ext4_iget_extra_inode:5025: inode 15 [ 1947.464102][ C0] EXT4-fs (loop5): last error at time 1774535937: ext4_iget_extra_inode:5025: inode 15 [ 1947.503412][T18235] EXT4-fs (loop5): mount failed [ 1947.668850][T18264] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1947.757106][T18230] loop4: detected capacity change from 0 to 8192 [ 1947.770649][T18272] loop5: detected capacity change from 0 to 256 [ 1947.796825][T18230] syz_tun: entered allmulticast mode [ 1947.824527][T18230] dvmrp8: entered allmulticast mode [ 1947.912776][T18228] syz_tun: left allmulticast mode [ 1947.951476][T18199] syz_tun: entered allmulticast mode [ 1948.016139][T18199] dvmrp8: entered allmulticast mode [ 1948.190381][T18198] syz_tun: left allmulticast mode [ 1948.228050][T18297] loop5: detected capacity change from 0 to 512 [ 1948.331856][T18297] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1948.435662][T18297] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #11: block 1: comm syz.5.21668: lblock 0 mapped to illegal pblock 1 (length 1) [ 1948.514744][T18297] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1948.514988][T18297] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1948.526439][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1948.526470][ C0] EXT4-fs (loop5): initial error at time 1774535938: ext4_map_blocks:776: inode 11: block 1 [ 1948.526522][ C0] EXT4-fs (loop5): last error at time 1774535938: ext4_map_blocks:776: inode 11: block 1 [ 1948.584692][T18297] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.21668: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1948.608465][T18297] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1948.611855][T18297] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.21668: ea_inode dec ref err=-117 [ 1948.637245][T18297] EXT4-fs (loop5): 1 orphan inode deleted [ 1948.644422][T18297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1948.729365][T16404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1948.816984][T18323] FAULT_INJECTION: forcing a failure. [ 1948.816984][T18323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1948.841483][T18323] CPU: 0 UID: 0 PID: 18323 Comm: syz.4.21676 Tainted: G W syzkaller #0 PREEMPT(full) [ 1948.841672][T18323] Tainted: [W]=WARN [ 1948.841681][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1948.841695][T18323] Call Trace: [ 1948.841704][T18323] [ 1948.841714][T18323] __dump_stack+0x1d/0x30 [ 1948.841810][T18323] dump_stack_lvl+0x95/0xd0 [ 1948.841833][T18323] dump_stack+0x15/0x1b [ 1948.841896][T18323] should_fail_ex+0x263/0x280 [ 1948.841922][T18323] should_fail+0xb/0x20 [ 1948.841977][T18323] should_fail_usercopy+0x1a/0x20 [ 1948.842009][T18323] _copy_from_user+0x1c/0xb0 [ 1948.842038][T18323] __sys_bpf+0x183/0x7e0 [ 1948.842064][T18323] __x64_sys_bpf+0x41/0x50 [ 1948.842171][T18323] x64_sys_call+0x10cb/0x3020 [ 1948.842270][T18323] do_syscall_64+0x12c/0x370 [ 1948.842294][T18323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.842328][T18323] RIP: 0033:0x7f55967fc799 [ 1948.842345][T18323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1948.842364][T18323] RSP: 002b:00007f559524f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1948.842386][T18323] RAX: ffffffffffffffda RBX: 00007f5596a75fa0 RCX: 00007f55967fc799 [ 1948.842400][T18323] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 1948.842449][T18323] RBP: 00007f559524f090 R08: 0000000000000000 R09: 0000000000000000 [ 1948.842461][T18323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1948.842474][T18323] R13: 00007f5596a76038 R14: 00007f5596a75fa0 R15: 00007ffc8690f2e8 [ 1948.842565][T18323] [ 1949.033583][T18320] loop5: detected capacity change from 0 to 512 [ 1949.046859][T18327] tipc: Started in network mode [ 1949.052093][T18327] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1949.071434][T18327] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1949.080335][T18327] tipc: Enabled bearer , priority 10 [ 1949.098444][T18327] veth0_virt_wifi: entered allmulticast mode [ 1949.243629][T18342] loop5: detected capacity change from 0 to 256 [ 1949.302115][T18352] FAULT_INJECTION: forcing a failure. [ 1949.302115][T18352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1949.326029][T18352] CPU: 0 UID: 0 PID: 18352 Comm: syz.5.21685 Tainted: G W syzkaller #0 PREEMPT(full) [ 1949.326132][T18352] Tainted: [W]=WARN [ 1949.326139][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1949.326152][T18352] Call Trace: [ 1949.326160][T18352] [ 1949.326169][T18352] __dump_stack+0x1d/0x30 [ 1949.326196][T18352] dump_stack_lvl+0x95/0xd0 [ 1949.326239][T18352] dump_stack+0x15/0x1b [ 1949.326266][T18352] should_fail_ex+0x263/0x280 [ 1949.326296][T18352] should_fail+0xb/0x20 [ 1949.326319][T18352] should_fail_usercopy+0x1a/0x20 [ 1949.326397][T18352] _copy_from_user+0x1c/0xb0 [ 1949.326434][T18352] ___sys_sendmsg+0xc1/0x1e0 [ 1949.326474][T18352] __x64_sys_sendmsg+0xd4/0x160 [ 1949.326541][T18352] x64_sys_call+0x194c/0x3020 [ 1949.326570][T18352] do_syscall_64+0x12c/0x370 [ 1949.326595][T18352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.326660][T18352] RIP: 0033:0x7f8c4b65c799 [ 1949.326677][T18352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1949.326769][T18352] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.326850][T18352] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1949.326868][T18352] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 1949.326885][T18352] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1949.326901][T18352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1949.326917][T18352] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1949.326972][T18352] [ 1949.514553][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.543054][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1949.582055][T18327] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.653343][T18327] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.703387][T18327] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.718243][T18380] /dev/loop3: Can't lookup blockdev [ 1949.753565][T18327] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1949.809549][ T7950] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.823424][ T906] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.841093][ T906] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.853894][ T906] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.957623][T18400] macvtap1: entered promiscuous mode [ 1949.965549][T18400] team0: entered promiscuous mode [ 1949.973418][T18400] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1949.981538][T18400] team0: Device macvtap1 is already an upper device of the team interface [ 1949.992675][T18400] team0: left promiscuous mode [ 1950.071266][ T9] tipc: Node number set to 1 [ 1950.653262][T18420] FAULT_INJECTION: forcing a failure. [ 1950.653262][T18420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1950.818380][T18420] CPU: 0 UID: 0 PID: 18420 Comm: syz.4.21701 Tainted: G W syzkaller #0 PREEMPT(full) [ 1950.818421][T18420] Tainted: [W]=WARN [ 1950.818429][T18420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1950.818442][T18420] Call Trace: [ 1950.818450][T18420] [ 1950.818459][T18420] __dump_stack+0x1d/0x30 [ 1950.818496][T18420] dump_stack_lvl+0x95/0xd0 [ 1950.818525][T18420] dump_stack+0x15/0x1b [ 1950.818549][T18420] should_fail_ex+0x263/0x280 [ 1950.818578][T18420] should_fail+0xb/0x20 [ 1950.818631][T18420] should_fail_usercopy+0x1a/0x20 [ 1950.818665][T18420] _copy_from_user+0x1c/0xb0 [ 1950.818777][T18420] ___sys_sendmsg+0xc1/0x1e0 [ 1950.818821][T18420] __x64_sys_sendmsg+0xd4/0x160 [ 1950.818917][T18420] x64_sys_call+0x194c/0x3020 [ 1950.818949][T18420] do_syscall_64+0x12c/0x370 [ 1950.819006][T18420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.819029][T18420] RIP: 0033:0x7f55967fc799 [ 1950.819049][T18420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.819073][T18420] RSP: 002b:00007f559524f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1950.819097][T18420] RAX: ffffffffffffffda RBX: 00007f5596a75fa0 RCX: 00007f55967fc799 [ 1950.819147][T18420] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1950.819218][T18420] RBP: 00007f559524f090 R08: 0000000000000000 R09: 0000000000000000 [ 1950.819235][T18420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.819251][T18420] R13: 00007f5596a76038 R14: 00007f5596a75fa0 R15: 00007ffc8690f2e8 [ 1950.819274][T18420] [ 1951.173144][T18439] bridge_slave_0: left allmulticast mode [ 1951.179376][T18439] bridge_slave_0: left promiscuous mode [ 1951.187372][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.200553][T18439] bridge_slave_1: left allmulticast mode [ 1951.210908][T18439] bridge_slave_1: left promiscuous mode [ 1951.217966][T18443] netlink: 'syz.4.21706': attribute type 1 has an invalid length. [ 1951.229304][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.243242][T18439] bond0: (slave bond_slave_0): Releasing backup interface [ 1951.257526][T18439] bond0: (slave bond_slave_1): Releasing backup interface [ 1951.275195][T18439] team0: Port device team_slave_0 removed [ 1951.287023][T18439] team0: Port device team_slave_1 removed [ 1951.296901][T18439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1951.307558][T18439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1951.318215][T18439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1951.326285][T18439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1951.337392][T18439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1951.515339][ T28] kauditd_printk_skb: 283 callbacks suppressed [ 1951.515358][ T28] audit: type=1326 audit(1774535941.941:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.563851][ T28] audit: type=1326 audit(1774535941.981:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.619461][ T28] audit: type=1326 audit(1774535941.981:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.673090][ T28] audit: type=1326 audit(1774535941.981:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.725289][ T28] audit: type=1326 audit(1774535941.981:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.781710][ T28] audit: type=1326 audit(1774535941.981:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.833385][ T28] audit: type=1326 audit(1774535941.981:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.891896][ T28] audit: type=1326 audit(1774535941.981:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.919294][ T28] audit: type=1326 audit(1774535941.981:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1951.965311][ T28] audit: type=1326 audit(1774535942.031:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18451 comm="syz.8.21712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1952.604236][T18527] loop4: detected capacity change from 0 to 8192 [ 1952.753457][T18493] syz_tun: entered allmulticast mode [ 1952.768470][T18492] syz_tun: left allmulticast mode [ 1952.877427][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21747'. [ 1952.950042][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21747'. [ 1953.755420][T18598] FAULT_INJECTION: forcing a failure. [ 1953.755420][T18598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1953.783396][T18598] CPU: 0 UID: 0 PID: 18598 Comm: syz.5.21760 Tainted: G W syzkaller #0 PREEMPT(full) [ 1953.783505][T18598] Tainted: [W]=WARN [ 1953.783513][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1953.783525][T18598] Call Trace: [ 1953.783533][T18598] [ 1953.783543][T18598] __dump_stack+0x1d/0x30 [ 1953.783572][T18598] dump_stack_lvl+0x95/0xd0 [ 1953.783597][T18598] dump_stack+0x15/0x1b [ 1953.783652][T18598] should_fail_ex+0x263/0x280 [ 1953.783682][T18598] should_fail+0xb/0x20 [ 1953.783706][T18598] should_fail_usercopy+0x1a/0x20 [ 1953.783782][T18598] _copy_from_user+0x1c/0xb0 [ 1953.783822][T18598] ___sys_sendmsg+0xc1/0x1e0 [ 1953.783863][T18598] __x64_sys_sendmsg+0xd4/0x160 [ 1953.783915][T18598] x64_sys_call+0x194c/0x3020 [ 1953.783943][T18598] do_syscall_64+0x12c/0x370 [ 1953.784114][T18598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.784137][T18598] RIP: 0033:0x7f8c4b65c799 [ 1953.784154][T18598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.784186][T18598] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1953.784210][T18598] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1953.784225][T18598] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000008 [ 1953.784265][T18598] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1953.784277][T18598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1953.784335][T18598] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1953.784369][T18598] [ 1954.780188][T18659] netlink: 'syz.9.21780': attribute type 3 has an invalid length. [ 1954.883922][T18643] syz_tun: entered allmulticast mode [ 1954.904005][T18639] syz_tun: left allmulticast mode [ 1955.554592][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21784'. [ 1956.574145][ T28] kauditd_printk_skb: 414 callbacks suppressed [ 1956.574163][ T28] audit: type=1326 audit(1774535947.001:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18707 comm="syz.9.21793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1956.660146][ T28] audit: type=1326 audit(1774535947.001:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18707 comm="syz.9.21793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77f974c799 code=0x7ffc0000 [ 1956.729253][T18737] tipc: Failed to remove unknown binding: 66,0,0/0:1965208883/1965208885 [ 1956.739258][T18737] tipc: Failed to remove unknown binding: 66,0,0/0:1965208883/1965208885 [ 1957.388470][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21816'. [ 1957.420645][T18771] loop5: detected capacity change from 0 to 1024 [ 1957.478722][T18771] EXT4-fs (loop5): unsupported descriptor size 832 [ 1957.506421][ T28] audit: type=1400 audit(1774535947.931:2828): avc: denied { ioctl } for pid=18778 comm="syz.4.21819" path="socket:[247506]" dev="sockfs" ino=247506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1957.507078][T18766] syz_tun: entered allmulticast mode [ 1957.692810][T18771] loop5: detected capacity change from 0 to 128 [ 1957.704056][T18765] syz_tun: left allmulticast mode [ 1957.774330][T18801] FAULT_INJECTION: forcing a failure. [ 1957.774330][T18801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1957.797159][T18771] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1957.880228][T18801] CPU: 1 UID: 0 PID: 18801 Comm: syz.4.21823 Tainted: G W syzkaller #0 PREEMPT(full) [ 1957.880396][T18801] Tainted: [W]=WARN [ 1957.880403][T18801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1957.880415][T18801] Call Trace: [ 1957.880423][T18801] [ 1957.880432][T18801] __dump_stack+0x1d/0x30 [ 1957.880464][T18801] dump_stack_lvl+0x95/0xd0 [ 1957.880546][T18801] dump_stack+0x15/0x1b [ 1957.880570][T18801] should_fail_ex+0x263/0x280 [ 1957.880640][T18801] should_fail+0xb/0x20 [ 1957.880811][T18801] should_fail_usercopy+0x1a/0x20 [ 1957.880915][T18801] _copy_from_user+0x1c/0xb0 [ 1957.880946][T18801] ___sys_recvmsg+0xaa/0x3b0 [ 1957.881037][T18801] do_recvmmsg+0x1ef/0x560 [ 1957.881081][T18801] ? fput+0x8f/0xc0 [ 1957.881110][T18801] __x64_sys_recvmmsg+0xe5/0x170 [ 1957.881169][T18801] x64_sys_call+0x80f/0x3020 [ 1957.881261][T18801] do_syscall_64+0x12c/0x370 [ 1957.881357][T18801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1957.881379][T18801] RIP: 0033:0x7f55967fc799 [ 1957.881396][T18801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1957.881478][T18801] RSP: 002b:00007f559522e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1957.881500][T18801] RAX: ffffffffffffffda RBX: 00007f5596a76090 RCX: 00007f55967fc799 [ 1957.881515][T18801] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000004 [ 1957.881529][T18801] RBP: 00007f559522e090 R08: 0000000000000000 R09: 0000000000000000 [ 1957.881544][T18801] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1957.881683][T18801] R13: 00007f5596a76128 R14: 00007f5596a76090 R15: 00007ffc8690f2e8 [ 1957.881752][T18801] [ 1958.094020][T18771] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1958.711834][T18821] FAULT_INJECTION: forcing a failure. [ 1958.711834][T18821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1958.746992][T18821] CPU: 1 UID: 0 PID: 18821 Comm: syz.4.21830 Tainted: G W syzkaller #0 PREEMPT(full) [ 1958.747027][T18821] Tainted: [W]=WARN [ 1958.747034][T18821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1958.747047][T18821] Call Trace: [ 1958.747055][T18821] [ 1958.747144][T18821] __dump_stack+0x1d/0x30 [ 1958.747202][T18821] dump_stack_lvl+0x95/0xd0 [ 1958.747230][T18821] dump_stack+0x15/0x1b [ 1958.747258][T18821] should_fail_ex+0x263/0x280 [ 1958.747289][T18821] should_fail+0xb/0x20 [ 1958.747314][T18821] should_fail_usercopy+0x1a/0x20 [ 1958.747437][T18821] _copy_from_user+0x1c/0xb0 [ 1958.747473][T18821] ___sys_sendmsg+0xc1/0x1e0 [ 1958.747587][T18821] __x64_sys_sendmsg+0xd4/0x160 [ 1958.747651][T18821] x64_sys_call+0x194c/0x3020 [ 1958.747679][T18821] do_syscall_64+0x12c/0x370 [ 1958.747704][T18821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.747728][T18821] RIP: 0033:0x7f55967fc799 [ 1958.747748][T18821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1958.747779][T18821] RSP: 002b:00007f559524f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1958.747806][T18821] RAX: ffffffffffffffda RBX: 00007f5596a75fa0 RCX: 00007f55967fc799 [ 1958.747824][T18821] RDX: 0000000020000888 RSI: 0000200000000640 RDI: 0000000000000003 [ 1958.747842][T18821] RBP: 00007f559524f090 R08: 0000000000000000 R09: 0000000000000000 [ 1958.747858][T18821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.747874][T18821] R13: 00007f5596a76038 R14: 00007f5596a75fa0 R15: 00007ffc8690f2e8 [ 1958.747948][T18821] [ 1958.986475][T18824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.017965][T18824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.018698][T18771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21813'. [ 1959.072792][T18832] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.123453][T18832] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.139748][T18839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18839 comm=syz.8.21835 [ 1959.193280][T18832] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.247601][T18832] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.392563][ T108] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.464176][ T7950] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.490439][ T108] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.514540][T27363] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.551307][T18830] syz_tun: entered allmulticast mode [ 1959.578155][T18829] syz_tun: left allmulticast mode [ 1959.727181][T18838] syz_tun: entered allmulticast mode [ 1959.754456][T18837] syz_tun: left allmulticast mode [ 1959.848494][T18879] loop5: detected capacity change from 0 to 1024 [ 1959.883384][T18879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1959.897835][T18879] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1959.913423][T18879] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.21843: lblock 3 mapped to illegal pblock 3 (length 3) [ 1959.941281][T18879] EXT4-fs (loop5): Remounting filesystem read-only [ 1960.036973][T16404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1960.063299][ T28] audit: type=1326 audit(1774535950.491:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.8.21847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1960.122903][T18898] FAULT_INJECTION: forcing a failure. [ 1960.122903][T18898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1960.127185][ T28] audit: type=1326 audit(1774535950.491:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.8.21847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1960.187937][T18898] CPU: 1 UID: 0 PID: 18898 Comm: syz.5.21846 Tainted: G W syzkaller #0 PREEMPT(full) [ 1960.187977][T18898] Tainted: [W]=WARN [ 1960.187986][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1960.188002][T18898] Call Trace: [ 1960.188015][T18898] [ 1960.188086][T18898] __dump_stack+0x1d/0x30 [ 1960.188115][T18898] dump_stack_lvl+0x95/0xd0 [ 1960.188144][T18898] dump_stack+0x15/0x1b [ 1960.188293][T18898] should_fail_ex+0x263/0x280 [ 1960.188325][T18898] should_fail+0xb/0x20 [ 1960.188431][T18898] should_fail_usercopy+0x1a/0x20 [ 1960.188466][T18898] _copy_from_user+0x1c/0xb0 [ 1960.188504][T18898] ___sys_sendmsg+0xc1/0x1e0 [ 1960.188550][T18898] __x64_sys_sendmsg+0xd4/0x160 [ 1960.188665][T18898] x64_sys_call+0x194c/0x3020 [ 1960.188724][T18898] do_syscall_64+0x12c/0x370 [ 1960.188754][T18898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.188780][T18898] RIP: 0033:0x7f8c4b65c799 [ 1960.188801][T18898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1960.188895][T18898] RSP: 002b:00007f8c4a0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1960.188920][T18898] RAX: ffffffffffffffda RBX: 00007f8c4b8d5fa0 RCX: 00007f8c4b65c799 [ 1960.188980][T18898] RDX: 0000000000000854 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1960.188998][T18898] RBP: 00007f8c4a0af090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.189014][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.189030][T18898] R13: 00007f8c4b8d6038 R14: 00007f8c4b8d5fa0 R15: 00007ffe7456a338 [ 1960.189058][T18898] [ 1960.240183][ T28] audit: type=1326 audit(1774535950.491:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.8.21847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1960.461540][ T28] audit: type=1326 audit(1774535950.491:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.8.21847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1960.511299][ T28] audit: type=1326 audit(1774535950.521:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.8.21847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1960.588270][ T28] audit: type=1326 audit(1774535950.521:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.8.21847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1960.622798][ T28] audit: type=1326 audit(1774535950.521:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18890 comm="syz.8.21847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47abc4c799 code=0x7ffc0000 [ 1960.958433][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.022702][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.068264][T18911] bond1: left promiscuous mode [ 1961.078412][T18900] syz_tun: entered allmulticast mode [ 1961.092513][T18899] syz_tun: left allmulticast mode [ 1961.175491][T18927] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.225964][T18930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18930 comm=syz.3.21858 [ 1961.242123][T18927] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.285088][T18927] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.342644][T18927] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.461472][T18604] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.470611][T18604] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.479530][T18604] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.488583][T18604] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.123489][T18960] netlink: 'syz.8.21863': attribute type 29 has an invalid length. [ 1962.169710][T18963] bridge_slave_0: default FDB implementation only supports local addresses [ 1962.395206][T18959] netlink: 'syz.8.21863': attribute type 29 has an invalid length. [ 1962.423932][T18960] netlink: 596 bytes leftover after parsing attributes in process `syz.8.21863'. [ 1962.455355][T18959] netlink: 596 bytes leftover after parsing attributes in process `syz.8.21863'. [ 1962.859988][T18973] netlink: 16222 bytes leftover after parsing attributes in process `syz.8.21868'. [ 1962.970132][T18966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21865'. [ 1963.136831][T18968] syz_tun: entered allmulticast mode [ 1963.165790][T18967] syz_tun: left allmulticast mode [ 1963.275432][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.8.21874'. [ 1963.380323][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 1963.380344][ T28] audit: type=1400 audit(1774535953.801:2902): avc: denied { ioctl } for pid=19001 comm="syz.5.21878" path="socket:[249348]" dev="sockfs" ino=249348 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1963.454186][ T28] audit: type=1400 audit(1774535953.881:2903): avc: denied { unmount } for pid=15720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1963.641902][T19023] netlink: 'syz.8.21886': attribute type 1 has an invalid length. [ 1963.950127][T19063] loop5: detected capacity change from 0 to 8192 [ 1963.979762][T19063] syz_tun: entered allmulticast mode [ 1964.007107][T19063] dvmrp8: entered allmulticast mode [ 1964.015851][T19048] syz_tun: left allmulticast mode [ 1964.372360][T19120] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1964.395800][T19120] netlink: 'syz.4.21901': attribute type 1 has an invalid length. [ 1964.395876][T19121] netlink: 'syz.4.21901': attribute type 1 has an invalid length. [ 1964.459672][T19120] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1964.467617][T19108] loop5: detected capacity change from 0 to 512 [ 1964.507296][T19120] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1964.550747][T19158] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1964.571918][T19158] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1964.646470][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.8.21902'. [ 1964.669515][T19108] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1964.934755][T19108] EXT4-fs (loop5): 1 truncate cleaned up [ 1965.030619][T19108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1965.272450][T19197] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.317659][T19197] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.399395][T19205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19205 comm=syz.9.21906 [ 1965.421433][T16404] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1965.473504][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21907'. [ 1965.499821][T19197] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.533624][T19197] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1965.600105][T19228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21909'. [ 1965.614599][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21909'. [ 1965.665169][ T114] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.676363][T19236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.21912'. [ 1965.696753][T20419] ================================================================== [ 1965.706629][T20419] BUG: KCSAN: data-race in alloc_pid / copy_process [ 1965.714117][T20419] [ 1965.717264][T20419] read-write to 0xffffffff86c5ffa8 of 4 bytes by task 114 on cpu 0: [ 1965.726615][T20419] alloc_pid+0x651/0x940 [ 1965.731343][T20419] copy_process+0xf37/0x20b0 [ 1965.736484][T20419] kernel_clone+0x16b/0x5d0 [ 1965.741759][T20419] user_mode_thread+0x9c/0xd0 [ 1965.747738][T20419] call_usermodehelper_exec_work+0x41/0x160 [ 1965.755238][T20419] process_scheduled_works+0x513/0xa10 [ 1965.762766][T20419] worker_thread+0x58a/0x780 [ 1965.767782][T20419] kthread+0x22a/0x280 [ 1965.773089][T20419] ret_from_fork+0x150/0x360 [ 1965.779021][T20419] ret_from_fork_asm+0x1a/0x30 [ 1965.784784][T20419] [ 1965.787819][T20419] read to 0xffffffff86c5ffa8 of 4 bytes by task 20419 on cpu 1: [ 1965.797299][T20419] copy_process+0x187f/0x20b0 [ 1965.802019][T20419] kernel_clone+0x16b/0x5d0 [ 1965.807165][T20419] user_mode_thread+0x9c/0xd0 [ 1965.812037][T20419] call_usermodehelper_exec_work+0x41/0x160 [ 1965.818316][T20419] process_scheduled_works+0x513/0xa10 [ 1965.824007][T20419] worker_thread+0x58a/0x780 [ 1965.829067][T20419] kthread+0x22a/0x280 [ 1965.833681][T20419] ret_from_fork+0x150/0x360 [ 1965.840345][T20419] ret_from_fork_asm+0x1a/0x30 [ 1965.845512][T20419] [ 1965.847961][T20419] value changed: 0x800001c1 -> 0x800001c2 [ 1965.854716][T20419] [ 1965.857320][T20419] Reported by Kernel Concurrency Sanitizer on: [ 1965.863848][T20419] CPU: 1 UID: 0 PID: 20419 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(full) [ 1965.876581][T20419] Tainted: [W]=WARN [ 1965.881383][T20419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1965.892102][T20419] Workqueue: events_unbound call_usermodehelper_exec_work [ 1965.900925][T20419] ================================================================== [ 1965.932074][T18604] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.936357][T19236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19236 comm=syz.8.21912 [ 1965.944853][ T7950] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.979416][ T7950] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0