last executing test programs: 2m50.837845755s ago: executing program 32 (id=187): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$eJzs3c9rXNUeAPDvnfxq077XPHi8175Ns3qvUDp57ctrFQRTXIhioaBr2zCZhphJpmQmpYlZWEQQRNTiQtGNa3/UnVvRjRv/Bjci0lI1LVZcyMidH8mkSSZpfkzS5vOB255z77lzznfuvefczD3MBLBn9af/ZCKORMTbScSh+vokIrqqqc6IoVq5e/NzuXRJolJ5/uekWubu/FwumvZJHahnDkfEV69FHM8sr7c0Mzs+XCjkp+r5gfLE5YHSzOyJsYnh0fxofvL0ycHBU2f+f+b01sX667ezB2+98/R/Phv6/dV/3njz6ySG4mB9W3Mcm/LsN/FyPdkf/fX3pCt9C5d4aksq2z2SnW4AG5Jemh21qzyOxKHoqKYAgEdZOv5XAIA9JjH+A8Ae0/gc4O78XK6x7OwnEu11+2xEktTibzzfrG3prD+z21d9Dtp7N4nO+hPR2MLnXf0R8eEXL36SLrGVzyEB1vDKtYi42Ne/vP9PoneTr/3fdZTpvy+v/4P2+fJsRDy20v1fZuH+Jxbufxb1rHDtbkR/RHdzfvn1n7m54o5PbkHl9fu/J2pz29JAm+7/Fiat9XXUc39JM0cjYqyQT/u2v0bEsejquTRWyJ9sUcexO3/cWW1b8/3fL9df+jitP/1/sUTmZmfP0n1GhsvDm4m52e1rEf/qXJzbd6+p/28c/2TZ8f9HdWg43+qFjy4mn3n89Q9WK5bGn8bbWJbHv70qH0X8O1aOvyFpOT9xoHGi1E6KFXz+/XurDqXNxz9d0vobfwu0Q3r8e1vH35c0z9csbW39a8e/8vnfnbxQTTc6j6vD5fLUyYju5Lnl608t7tvIN8qn8dcivT/+TIvzvzY39uI6Y+y89dOnG49/wbZMsUzjH3mg4//giRv3xjs2Hn96/AerqWP1Nevp/wr57lhPAzfz3gEAAAAAAAAAAAAAAAAAAAAAAADAemUi4mAkmexCOpPJZmu/4f336M0UiqXy8UvF6cmRqP5Wdl90ZS7Vv/+08R2Lje8/7attT9L8qfvy/4uIv0XEuz37q/lsrlgY2eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDhwCq//5/6safFjklnu5oIAGyHfWuWuJNfkq1UKpVtbA8AsP3WHv+Xe/+tbWgIANA2Lcb//e1sBwDQPhv5+x8AeLgZ/wFg7zH+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsM3OnzuXLpXf5udyaX7kysz0ePHKiZF8aTw7MZ3L5opTl7OjxeJoIZ/NFSfWer1CsXh5MCanrw6U86XyQGlm9sJEcXqyfGFsYng0fyHf1ZaoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODBlGZmx4cLhfzUI5F4IyKWrqnsjoZtPpHErmjGFieSdRX+4cR3h1uVub7GaTy0CyJ96BI73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBz+DAAA//9LViSU") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f80)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x39, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0xfffffffd, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0x8}}, @TCA_POLICE_RATE64={0x0, 0x8, 0x1}], [@TCA_POLICE_PEAKRATE={0x0, 0x3, [0x7, 0xae, 0x7, 0x947, 0x3, 0x3, 0x3, 0x4, 0xfffffbc5, 0x2, 0x40000000, 0x101, 0x1, 0xe24, 0x7f, 0x8, 0xb, 0x5, 0x401, 0x7, 0x10, 0x10001, 0x7, 0x6, 0xc, 0x4, 0xfdc2, 0x9, 0x40, 0x2, 0x7, 0x0, 0x6, 0x9, 0xfffffff8, 0x8000, 0xb60, 0x2, 0x600000, 0x7, 0x7, 0x2, 0x7fff, 0xa4c, 0xfffffffd, 0x6, 0x1ff, 0x4, 0x4, 0xd3b, 0x635, 0x8001, 0x3, 0x4, 0x7228, 0xffffae59, 0xd, 0x4eee441f, 0x1000, 0x2, 0x81, 0x7, 0xa, 0x2, 0x3, 0x9, 0x7, 0x9, 0x3, 0x2, 0x9, 0x8, 0x66, 0x2, 0x5, 0x40, 0x6, 0x2, 0x8, 0x4e6800, 0x2c1, 0x8000, 0x9, 0x3, 0x2, 0x4, 0x7, 0x4d, 0x2, 0x6, 0x6, 0x101, 0x2, 0x6, 0x2, 0x0, 0xfffffff8, 0x7, 0x7, 0x80000001, 0xf, 0x7, 0xfffffffa, 0x3, 0x580f6d45, 0x9, 0x0, 0x7fff, 0x1, 0x80000001, 0x7, 0x9, 0x4, 0x8000, 0x6, 0x6, 0x3, 0x7fffffff, 0x3, 0x8, 0x8, 0x3ff, 0x0, 0x4, 0x6, 0x0, 0x7, 0x75de, 0x3, 0x0, 0x8, 0x0, 0xfffffffb, 0x6, 0x8601, 0x7f, 0xfffffffd, 0xffff, 0xe5d, 0x1, 0x4, 0x400, 0xfffffffb, 0x4, 0x0, 0x6, 0x9, 0x200, 0x9, 0x7, 0x0, 0x10, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x1a6, 0x6, 0xfffffffe, 0x8000, 0x6, 0x7, 0x7, 0x5, 0x8, 0xd, 0x7, 0x9, 0x6, 0x2, 0xd3, 0xea, 0x7fffffff, 0x0, 0xf, 0xd75, 0x40, 0xffff0001, 0x9da9, 0x5, 0x2, 0xfffffffb, 0x8, 0x6, 0x1, 0x2, 0x1, 0xadf0, 0x2, 0xf28, 0x5, 0x0, 0x3, 0x10001, 0x3, 0xfffffff9, 0x8001, 0x2, 0x6f4fb6cb, 0x3, 0x2, 0x3, 0xfffffffa, 0x1, 0x2, 0x2, 0x3bce41a3, 0x1, 0x5, 0x9, 0x6, 0x1, 0x8, 0x800, 0xfffffffc, 0xc0000000, 0x4, 0x23a5, 0x8, 0x0, 0x9, 0x8, 0x2, 0x6, 0x5, 0x1, 0x6, 0x55, 0x5, 0x8, 0x2, 0x8, 0xfff, 0x1, 0x800, 0x1000, 0x6, 0x10000, 0x7, 0x10, 0x5, 0x200, 0x0, 0x8, 0x0, 0x4, 0x8, 0x401, 0x2bc, 0x9, 0x1000, 0x5, 0x4, 0x7]}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x1, 0x1ff, 0x1, 0x80000001, 0x1, 0x1, 0x0, 0x3e, 0x746, 0x5, 0x9, 0xfffffff4, 0xfffc0000, 0x7, 0x1a, 0x3, 0x5, 0x5ab, 0x80000000, 0x9, 0xfff, 0x5, 0x3, 0xb6, 0x63, 0x79, 0x8, 0x6, 0xfffffffc, 0x0, 0x6, 0x6, 0x10, 0x6, 0x0, 0x1, 0x5, 0x4000000, 0x6, 0x8, 0x80, 0x10001, 0x9, 0x7fff, 0xb, 0x0, 0x2, 0x5, 0x5, 0xf8, 0x9, 0x5, 0x400, 0x6, 0x2, 0x4, 0xe9, 0x81, 0x2fd42dc3, 0x5, 0x0, 0xde, 0x0, 0x9, 0x3, 0x0, 0x6dc4, 0x0, 0x3ff, 0x7, 0x4, 0x0, 0x7, 0xb8, 0x800, 0x1, 0x7, 0xff, 0xb, 0x5, 0x1200000, 0x7, 0x401, 0x5, 0x2, 0xff, 0x2, 0x80, 0x7, 0x6, 0x100, 0x4, 0x2, 0x0, 0xfffffff8, 0x14, 0x3d847431, 0x2, 0x3, 0x400, 0xffff, 0x736, 0xa, 0x4, 0xfffffffe, 0x200, 0x7f, 0x8001, 0x7, 0x2, 0x22df, 0x4, 0x8001, 0x8000, 0x3, 0xdeb8, 0x3, 0x7, 0xfff, 0x0, 0x672, 0x2, 0x9, 0x2, 0x6, 0xfe, 0x9, 0x2, 0x1, 0x6, 0x6, 0x5, 0xffffffff, 0x2, 0x4, 0xffffffff, 0x2, 0x2, 0x13a00ace, 0xffffffff, 0x2e9, 0x3, 0x7, 0x5, 0xe8, 0x7, 0xc, 0x1, 0x0, 0x4, 0xb, 0x42, 0x3, 0x0, 0xfffffffd, 0xfff, 0xad, 0x401, 0x4, 0x1c, 0x22e, 0x5, 0x800, 0x8, 0x8, 0x7f, 0x80, 0x9, 0xffffff01, 0x2, 0x9, 0xfffffffd, 0x9, 0x1, 0x6, 0x3, 0x400, 0x1000, 0x7, 0x7, 0x1f, 0x8, 0x25, 0x53, 0x2, 0xe827, 0x7, 0x1, 0x5, 0x4, 0x5, 0x1ff, 0x4, 0x100, 0x4, 0x5, 0x3d8, 0x3, 0x6, 0x9, 0x9, 0x2f1c, 0x10, 0x1, 0x3, 0xfffffffd, 0xd, 0xffff, 0x1, 0x1, 0xf, 0x61c6, 0x1, 0x5, 0x36ec, 0x3, 0x9, 0xa, 0x3, 0x4, 0x8, 0x1, 0x2, 0x80000000, 0x401, 0x9, 0x9, 0x2b5f, 0x200, 0x5, 0xf3, 0x5, 0x93c, 0x3, 0x7, 0x0, 0xb, 0x0, 0x2, 0x6fdb, 0x8000, 0x4, 0x1, 0x0, 0xa, 0x3, 0xc4, 0xffff, 0x7fffffff, 0x6, 0x1, 0x2, 0x200, 0x5, 0x0, 0xfffffff9]}, @TCA_POLICE_TBF={0x0, 0x1, {0xb, 0xffffffffffffffff, 0xfffffc00, 0x19, 0x4, {0x8, 0x2, 0x0, 0x100, 0x9, 0x81}, {0x40, 0x2, 0x7, 0x9, 0x4f, 0x8}, 0x6, 0x4, 0x81}}, @TCA_POLICE_TBF={0x0, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x2, 0x9, {0x1, 0x2, 0xb0, 0x9, 0x7, 0x179}, {0x0, 0x2, 0xa4, 0x5, 0x8, 0xfffffffc}, 0x4, 0x8, 0x7}}, @TCA_POLICE_RESULT={0x0, 0x5, 0x40}, @TCA_POLICE_TBF={0x0, 0x1, {0x5, 0x1, 0x10001, 0x8, 0xf, {0x5, 0x1, 0x100, 0x8000, 0xc6, 0x6}, {0x0, 0x0, 0x96, 0x38b, 0x9}, 0x10000, 0x10001, 0x9}}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xffffffff}, @TCA_POLICE_RATE={0x0, 0x2, [0x7f, 0x9, 0x3b, 0x80000001, 0x4279, 0x100, 0x80000001, 0x7, 0xb1, 0x2, 0xd, 0x8, 0xb45, 0x3ff, 0x401, 0x5, 0x3, 0x1, 0x5, 0x101, 0x0, 0xf, 0x7fffffff, 0x5, 0x0, 0xfffffff9, 0x6, 0xd035, 0x2, 0xffff35fb, 0x7, 0x4, 0xfffffffe, 0xbdc, 0x81, 0xb066, 0xc4, 0x7, 0x3, 0xfffffff3, 0x81, 0x8, 0x4, 0x1, 0x8, 0x9, 0x1, 0x2, 0x1, 0x2, 0x8000000, 0x7f, 0x3, 0x2, 0x80000000, 0x52a0, 0x344, 0x80, 0x5, 0xc565, 0x3, 0x4, 0x2, 0x40, 0x1000, 0x4, 0x8, 0xc12, 0xfc13, 0x5, 0x40, 0x3, 0x73c, 0xd, 0x4, 0x800000, 0x3ba3, 0x40, 0xa54c, 0x23, 0x24, 0xb26, 0x2d, 0x3, 0x5, 0x55533e9f, 0xfffffff7, 0x5, 0x7, 0x7fff, 0x80, 0xfffffffa, 0x3ff, 0x5, 0x7609, 0x7, 0x5, 0x1, 0x7, 0x0, 0x10000, 0x6, 0x80000000, 0x10, 0x6, 0x0, 0x8001, 0x5, 0x8, 0x9, 0x0, 0x101, 0xffffffc0, 0x6000, 0xfd91, 0xd, 0x2, 0xf, 0x7fff, 0x5, 0x5, 0x7797, 0x7a, 0x5, 0x2, 0x5, 0xd82, 0x8, 0xbc7, 0x2, 0xffffff7f, 0xfff, 0x8, 0x8000, 0x7, 0x9, 0x5, 0x3, 0x0, 0x20000, 0x129, 0xd, 0xfffffff8, 0x3, 0x3, 0x9, 0x1, 0x9, 0x9, 0x8, 0xffffffff, 0x1, 0x2, 0x2, 0x2, 0x4, 0x8, 0x7, 0x5, 0x8, 0x0, 0x5757, 0x1000, 0x3, 0xff, 0xa, 0x1, 0xcf, 0x3215, 0x5, 0x8eb02164, 0x2, 0x8, 0xf0, 0x80, 0x47a, 0xff, 0x9, 0x8, 0x100, 0x80000, 0x9, 0x9, 0x5, 0x100, 0x7, 0x2, 0xfff, 0x10, 0x0, 0xa, 0x0, 0x8001, 0x6, 0x9, 0x3, 0x80000001, 0x7, 0x6, 0x4, 0xd2, 0x6, 0xb, 0x1c000, 0x3, 0x0, 0x3, 0x2, 0x8, 0x2, 0x2b, 0x6, 0x61f, 0x1, 0x1000, 0x9, 0x2, 0x8, 0x10, 0x5, 0xfffffffc, 0x4, 0x80000000, 0x40000, 0x4, 0x1, 0x0, 0x947, 0x101, 0xffff, 0xffffffff, 0xffff, 0x1, 0x831, 0x7, 0xede, 0x4, 0x7, 0x40, 0xb6, 0x7, 0xfffffff5, 0xc, 0xe, 0x100, 0x3, 0x4, 0xfff, 0x8, 0x8000, 0x7, 0x8, 0x3, 0x7, 0x7, 0xd41d]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[], 0xfb, 0x69f, &(0x7f0000000840)="$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") mprotect(&(0x7f0000996000/0x2000)=nil, 0x2000, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99800300000700003472657461700000002000028014000600fe80000000000000000000000000003308000500003000"/80], 0x68}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x19) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x7f) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r7, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') r8 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r8, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xcc, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x0, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6a040000) socket$igmp(0x2, 0x3, 0x2) 2m33.705681333s ago: executing program 0 (id=442): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 2m33.704538274s ago: executing program 0 (id=444): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 2m33.057299881s ago: executing program 0 (id=457): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)="014e074c15b369d439cd7e712e2173dcc1a6d68b89b49419f0692f24a9f3f0f108086f2b6b9afecbec0131321694185b83f47eb18352d13d397907d7406f4e664deb7037fa24deab0480474dc7d583479af27397782bc0398c85382ced8dc7f8ff4fcbceaf10382dc2fcf194b006579c23d34536e7ea9c719257a0a8ec00f79655faa8bb27fa553927fb95d4bcc978b01bedefbcd1d356292fb3bdc7682e42fd6a50e4be8d816a85dac8d5be2f5d6bd9ec0f47", &(0x7f0000000140)=""/34, 0x4}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 2m32.990740975s ago: executing program 0 (id=462): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$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") syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x800021, 0x0, 0x0) process_mrelease(r1, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) 2m32.90585339s ago: executing program 0 (id=464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0x180, 0x1a, 0x1, 0xfffffffe, 0xfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in=@multicast1, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in=@rand_addr=0x64010100, 0x4d0, 0x6c}, @in6=@local, {0x0, 0x8, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x2}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'lrw(tnepres)\x00'}}}]}, 0x180}}, 0x844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r4, r3}}, 0x18) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r2, 0x141601) mount$bpf(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x800, &(0x7f0000000780)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x3, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23f000, 0x3, 0x2}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20008004) unlinkat(0xffffffffffffffff, 0x0, 0x200) write(r5, &(0x7f0000000000)="d5", 0xb840c58f) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m32.550657261s ago: executing program 0 (id=476): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x700, 0x7800, 0x227f, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @multicast2, @private=0xa010101}}}}) 2m32.540220411s ago: executing program 33 (id=476): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x700, 0x7800, 0x227f, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @multicast2, @private=0xa010101}}}}) 2m7.657584971s ago: executing program 1 (id=961): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m7.636576512s ago: executing program 1 (id=963): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32=r0], 0x24}}, 0x0) 2m7.592742675s ago: executing program 1 (id=964): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0), 0x1, 0x42a, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ncm(0x3, 0xb2, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x2, 0x1, 0x1, 0x50, 0x22, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '-\x00'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10000000, 0x4, 0xa5, 0xf1}, {0x6, 0x24, 0x1a, 0x944, 0x12}, [@country_functional={0xa, 0x24, 0x7, 0x6b, 0xf, [0x3, 0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xfd}, @obex={0x5}, @mdlm_detail={0x2e, 0x24, 0x13, 0xff, "62cea0a325f12f3bf9f64b30e9417b68d4d8459be331b6a3cea39269b8a9a439c02a523f7551a0cae8f7"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0xf, 0xba}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xb, 0x5, 0x5}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0xfa, 0xf1, 0x10, 0xf1}, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="050f0f00010a10030004000303c0ff987be4027e80fa8c0d4a9a742141f64f9e28c1482da56053a29f616ed0676e18e31ab394e30949083692624343377db83d66bba99bca479bb341559720f7dc421b5c79b48b46ddfc1121b359126d39fd95d790bcdcc405af67c416758ea16663d75077e9e315"], 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x40c}}]}) 2m6.715467916s ago: executing program 1 (id=980): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$eJzs3MtvG8UfAPDvrpP8+vwllPLoAwiUR8UjadICPXABgcQBJCQ4lGNI0qo0bVATJFpVEBAqR1SJO+KIxF/AiV4QcELiCgduqFKFemnhZLT2buMY202MnYX685HWmdkda+ab3bFndrIJYGCNZy9JxI6I+DkiRuvZtQXG6z9uXLsw+8e1C7NJVKuv/57Uyl2/dmG2KFq8b3ueOZhGpB8nsa9FvUvnzp+aWViYP5vnJ5dPvzO5dO78UydPz5yYPzF/Zvro0SOHp559ZvrpnsSZxXV97/uL+/e8/OalV2ePXXrr+6+SIv6mOHpkvNPBR6rVHldXrp0N6WSoxIawIZWIyE7XcK3/j0YlVk/eaLz0UamNA/qqmmtzeKUK3MaSKLsFQDmKL/ps/ltsmzf6KN/V5+sToCzuG/lWPzIUaV5muGl+20vjEXFs5c/Psy36cx8CAGCNb7Lxz5Otxn9p3N1Q7v9pfQ1lLCLuiIhdEXFnROyOiLsiamXviYh7N1h/8yLJ38c/6ZWuAlunbPz3XL62tXb8V4z+YqyS53bW4h9Ojp9cmD9UP7aSvWT5qQ51XH7xp0/bHWsc/2VbVn8xFszbcWXof2vfMzezPNNtvM2ufhixd6hV/MnNlYAkIvZExN4u6zj5+Jf72x27dfwd9GCdqfpFxGP1878STfEXks7rk5NbYmH+0GTDVdHkhx8vvtau/n8Ufw9k539by+v/ZvxjSeN67dLG67j4yydt5zTdXv8jyRu19Ei+772Z5eWzUxEjySv1Rjfun159b5EvymfxHzzQuv/vitXfxL6IyC7i+yLi/oh4IG/7gxHxUEQc6BD/dy88/Hb38fdXFv/chs7/amIkmve0TlROffv1mkrHNhJ/dv6P1FIH8z21z7+kc1zraVd3VzMAAAD896QRsSOSdOJmOk0nJup/w787tqULi0vLTxxffPfMXP0ZgbEYTos7XaMN90On8ml9kZ9uyh/O7xt/Vtlay0/MLi7MlR08DLjtbfp/5rdK2a0D+s7zWjC42vb/LZvbDmDz+f6HwaX/w+Bq0f+3ltEOYPO1+v7/ICIuP1pCY4BN1dT/LfvBADH/h8Gl/8PgWkf///X2+nfVQEQsbY1bPyTf30QlyqxdostEpP+KZkj0KVH2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBv/BUAAP//m5Hs/w==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000180)='net/ptype\x00') wait4(r4, 0x0, 0x2, 0x0) syz_pidfd_open(r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents(r0, 0x0, 0x54) 2m6.357655547s ago: executing program 1 (id=990): sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0xd4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, 0x0) 2m5.921121512s ago: executing program 1 (id=992): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$cont(0x7, r0, 0x5, 0xffb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000f2683e9d04000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async, rerun: 64) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x42882) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async, rerun: 64) ptrace$pokeuser(0x6, r2, 0xeae9, 0x80000000) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, &(0x7f0000000100), 0x12) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}}, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, &(0x7f0000000440)={[{@errors_continue}, {}, {@journal_async_commit}, {@nouid32}, {@resuid={'resuid', 0x3d, r6}}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@grpid}, {@nobarrier}, {@noauto_da_alloc}, {@quota}]}, 0x1, 0x569, &(0x7f0000000940)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006900010029bd7000fedbdf2500004000000000000800"], 0x20}}, 0x48010) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m5.900594774s ago: executing program 34 (id=992): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$cont(0x7, r0, 0x5, 0xffb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000f2683e9d04000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async, rerun: 64) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x42882) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async, rerun: 64) ptrace$pokeuser(0x6, r2, 0xeae9, 0x80000000) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, &(0x7f0000000100), 0x12) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}}, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, &(0x7f0000000440)={[{@errors_continue}, {}, {@journal_async_commit}, {@nouid32}, {@resuid={'resuid', 0x3d, r6}}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@grpid}, {@nobarrier}, {@noauto_da_alloc}, {@quota}]}, 0x1, 0x569, &(0x7f0000000940)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WKndNIkvFTzUo2ixoAdvdUmmoWTTDdlNaWLB9mAvXqQIIhbEu949Fv8BL/4LBS0UKUEPXiKzmU3SZHezTbdJ2v18YMLz7MzuM9995vvsMzu72QB61nD2pxDxYkR8nUQciYgkX9cf+crhle2WHl6fyJYklpc//iupb5fVG4/VuN+hvPJCRPz6ZcSpwuZ2qwuL06VyOZ3L6yO1mdmR6sLi6cszpal0Kr0yNj5+9s3xsXfefqtrsb524Z/vPrr7/tmvTix9+/P9o7eTOBeH83Xr43gCN9ZXhmM4f04G4tyGDUe70Nhekuz2DrAtfXmeD0Q2BhyJvjzrgeffFxGxDPSoRP5Dj2rMAxrn9l06D35mPHhv5QRoc/z9K++NxP76udHBpeSRM6PsfHeoC+1nbfzy553b2RLdex8CYEs3bkbEmf7+zeNfko9/23emg202tmH8g51zN5v/vN5s/lNYnf9Ek/nPoSa5ux1b53/hfheaaSmb/73bdP67etFqqC+v/a8+5xtILl0up9nY9v+IOBkD+7J6u+s5Z5fuLbdat37+ly1Z+425YL4f9/v3PXqfyVKt9CQxr/fgZsRLTee/yWr/J036P3s+LrR74E/XisfTO6+02mzr+J+u5R8jXm3a/2tXtJL21ydH6sfDSOOo2OzvW8d/a9X+bsef9f/B9vEPJeuv11Yfv40f9v+btlr3SPzR+fE/mHxSLw/mt10r1WpzoxGDyYebbx9bu2+j3tg+i//kifbjX7Pj/0BEfLZW7WsX/61jP73cUfy71P+T7fr/9439//iFex98/v3248/6/4166WR+SyfjX6c7+GTPHgAAAAAAAOwthYg4HEmhuFouFIrFlc93HIuDhXKlWjt1qTJ/ZTLq35UdioFC40r3kXWfhxjNPw/bqI9tqI9HxNGI+KbvQL1enKiUJ3c7eAAAAAAAAAAAAAAAAAAAANgjDrX4/n/mj7b/1Rx4LvjJb+hdW+Z/N37pCdiTvP5D7+os/2cHn/qOADvO6z/0LvkPvUv+Q++S/9C75D/0LvkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXh/PlsWV56eH0iq09eXZifrlw9PZlWp4sz8xPFicrcbHGqUpkqp8WJysxWj1euVGZHx2L+2kgtrdZGqguLF2cq81dqFy/PlKbSi+nAjkQFAAAAAAAAAAAAAAAAAAAAz5bqwuJ0qVxO5xQUtlXo3xu7odDlwm6PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw5r8AAAD//7+AOVY=") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006900010029bd7000fedbdf2500004000000000000800"], 0x20}}, 0x48010) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1m47.479910057s ago: executing program 2 (id=1417): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) listen(0xffffffffffffffff, 0xd3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed", 0x3}], 0x1}}], 0x1, 0x0) 1m47.140412707s ago: executing program 2 (id=1418): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) syz_read_part_table(0x5bf, &(0x7f0000000280)="$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") r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000000}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x30) write$binfmt_elf32(r3, 0x0, 0x69) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) 1m47.037562973s ago: executing program 7 (id=1419): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={0x0, 0x8}, 0x1bf138af0b3b9689, 0x5, 0x2, 0x2, 0x46, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0xd6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) listxattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) listen(r5, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x1, 0x700, 0xf, 0x2, {{0x22, 0x4, 0x0, 0x36, 0x88, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x95, 0x1, 0xc, [{@remote, 0x4}, {@remote, 0x3}]}, @lsrr={0x83, 0x13, 0x50, [@multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @remote, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0x5, [{@remote, 0x8}, {@loopback, 0x8}, {@loopback, 0x401}]}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}, @timestamp={0x44, 0x8, 0xb, 0x0, 0x8, [0x6d]}, @ssrr={0x89, 0x1f, 0xb4, [@empty, @rand_addr=0x64010102, @broadcast, @loopback, @private=0xa010100, @empty, @rand_addr=0x64010102]}]}}}}}) mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81) 1m46.92476974s ago: executing program 7 (id=1422): socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newneigh={0x44, 0x1c, 0x10, 0x70bd28, 0x25dfdbfd, {0x1b, 0x0, 0x0, r1, 0x4, 0x44, 0x9}, [@NDA_MASTER={0x8}, @NDA_VNI={0x8, 0x7, 0x3}, @NDA_PROBES={0x8, 0x4, 0x9}, @NDA_PROBES={0x8, 0x4, 0x6}, @NDA_VLAN={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000040040000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) (fail_nth: 7) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80042, 0x100) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket(0x26, 0x5, 0x7e) getsockopt(r6, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) 1m46.23051859s ago: executing program 2 (id=1430): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9f) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='\\+/\x00') (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") (async) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) creat(&(0x7f0000006500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) symlink(&(0x7f0000005b00)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) 1m46.173998753s ago: executing program 2 (id=1431): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000340)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf1675000000000000e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02", @ANYRES64, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$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") bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0000023f3201"], 0x138) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setreuid(0x0, 0xee00) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fgetxattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', 0x0, 0xdeff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25180000000c009900030000003b0000000a001a0008021100000000000a001a00ffffffffffff00000a021a00ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a001a0008021100000100000a021a000802110000010000e4cfcfef35ec2e70352b9885826b6d0fb037b30436f47c888d3a10e3aac3e6fba3a5c3baaadf29e7557569b58c4c54610c198e5b2f78a919b196812e"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4004800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000370000162a400a4ac6086b3e2ede773745aff9c26d504e232e1a8890470984d8573bb3ac729517fcf803af44d97931f2ce17a1", @ANYRES32=0x0, @ANYBLOB="03fc0300121e0700400012800e0001006970366772657461700000002c00028014000700fefffffffffffffffffffffffffffffe1400060000000000000000000000ffffac1414bb"], 0x60}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e21, 0x1000000, @loopback, 0x6600}, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r7, 0x1}}, 0x10) 1m46.040773771s ago: executing program 2 (id=1433): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x2, 0x7, 0xa, 0xfffffffffffffffc}, @call, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @generic={0xf6, 0x2, 0x1, 0x7, 0x10000}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x7, 0x7fff, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x0, 0x4, 0x0, 0x2}, {0x5, 0x2, 0xc, 0x1}], 0x10, 0x7}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r2, 0x25, 0x0, @void}, 0x10) 1m46.009650883s ago: executing program 7 (id=1434): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000680)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000740)="2705021a1a0014000600a5cbcc19a9905c8647002fb96dbcf706013c9aa1f82fa00956725faf", 0x26}], 0x1}, 0x48081) 1m45.991659034s ago: executing program 7 (id=1435): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0), 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x71d73e48) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x5, &(0x7f00000000c0)={0x4, 0xb, 0x6}) 1m45.913618228s ago: executing program 2 (id=1436): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m45.88615328s ago: executing program 35 (id=1436): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m45.812895484s ago: executing program 7 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 7) 1m45.727835929s ago: executing program 7 (id=1442): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c, 0xfffffffe}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) 1m45.682110712s ago: executing program 36 (id=1442): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c, 0xfffffffe}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) 1m37.81678957s ago: executing program 8 (id=1576): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m37.750351904s ago: executing program 8 (id=1580): r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x644, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x10042, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x3, 0x0, 0x80000000b4c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000006}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0x401}, {0x6}]}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x13) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r5, 0x34, &(0x7f0000000240)={0xd, 0x4, 0x349}) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000c004) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000680)=""/4096, 0x1000}) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000002c0), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000040)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r1, r0, 0x0, 0xd39a) 1m37.30348783s ago: executing program 8 (id=1587): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x12ee, &(0x7f0000000280)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x12b8, 0x2c, 0x0, @dev, @mcast2, {[@routing={0x2b, 0x10, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}, @hopopts={0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x200}]}, @srh={0x2f, 0x6, 0x4, 0x3, 0x3, 0x28, 0x1bc, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}]}, @dstopts={0x21, 0x4, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x18, {0x0, 0x4, 0x4, 0xbc5, [0x4, 0xf]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x0, 0x9, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x6, [0xf95e, 0x6, 0x7, 0x3, 0x9, 0xfffffffffffffffc]}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0x18}}]}, @dstopts={0x2, 0x229, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x8, 0x6, [0x0, 0x73a, 0x10, 0x10000]}}, @generic={0xf, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8053}, @enc_lim={0x4, 0x1, 0x40}, @generic={0x1, 0x19, "c65c4db8edba2d46a69e8ad7dd5fd3543522d116c28b542177"}, @generic={0x5, 0xfd, "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"}]}, @hopopts], @echo_reply}}}}}, 0x0) r0 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) dup3(r0, r0, 0x80000) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000000006, 0xa2a}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10110, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 1m37.156346569s ago: executing program 8 (id=1591): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x4, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 1m36.769976881s ago: executing program 8 (id=1600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0), &(0x7f00000005c0)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0xe2c, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500010000000000100000ffffffff8500000005c24b850c0000000000001c9500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r5, 0x0, 0x14, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000000)) socket(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r7, 0x0) setresuid(0x0, r7, 0xee00) r8 = memfd_secret(0x0) fstat(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r7, r9, r9) getresuid(&(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)) geteuid() 1m36.313177178s ago: executing program 8 (id=1609): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) syz_emit_ethernet(0xae, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000783afffe8000eb001024000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000180100ffffffffff220aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d00001392000100"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000002ffffffff00000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m36.312873578s ago: executing program 37 (id=1609): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) syz_emit_ethernet(0xae, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000021000783afffe8000eb001024000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000180100ffffffffff220aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001005ff9297d00001392000100"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000002ffffffff00000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 3.7712102s ago: executing program 4 (id=3439): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a100000000008510000002000000850000007d00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06f238e7ff7fc6e5539b0d650e8b089b3f3b316c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e80400000c5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f912ff01000021ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7bd50978b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefdc01000094d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af5617ea94c9493260fad0000f96f06817fb903729a7db6ff957697c9ede7885d94ffb00600e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r6, 0x5452, 0xfffffffffffffffe) 2.375155782s ago: executing program 4 (id=3452): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000003bbbbbbbbbbbb0806000608100604"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_socket_connect_nvme_tcp() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x2c}}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(r3, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r7, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 1.622616006s ago: executing program 5 (id=3464): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x24000, 0x0) 1.598909027s ago: executing program 5 (id=3465): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.522681412s ago: executing program 5 (id=3467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031611d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.503977533s ago: executing program 4 (id=3468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 8) 1.459662525s ago: executing program 4 (id=3470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @fwd={0xe}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x0, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/92, 0x59, 0x5c, 0x0, 0x1, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0xffffffdf, 0xfffffffffffffe8a, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8840}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x710}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x102}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x550}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0xb, 0x0, 0x61b9, 0x3, 0x3]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20884}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x8) syz_clone3(&(0x7f0000000180)={0x20000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.356747111s ago: executing program 5 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffef00000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xf, 0x0, &(0x7f0000000140)="6277f152823cbadc43594b51ed7d6a", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000200)={0x403, 0xa88, 0x9, 0x2007, 0x1b, "d206000000000000000100"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.290306875s ago: executing program 5 (id=3480): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x6, 0x32, 0xffffffffffffffff, 0x55f52000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x9000, 0x3, &(0x7f0000307000/0x2000)=nil) 1.20545327s ago: executing program 5 (id=3482): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=@random={'user.', 'ext4\x00'}) (fail_nth: 6) 1.20100045s ago: executing program 4 (id=3484): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017400006803c00040067636d28616573290000000000000000000000000000000000000000000007001c000000e3de7de774fc7987cca4198900"/78], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x1, &(0x7f0000000080)) 1.108468616s ago: executing program 9 (id=3485): r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfb73}}, 0x0, 0x7, 0x1, 0x2, 0x2}, &(0x7f0000000000)=0x98) 1.025445501s ago: executing program 9 (id=3486): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', r2}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6}, 0xfffffffffffffdd9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r7, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) r8 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c9374525174ae867806e58adcd922e70fa89f0e436ab60903ade8f578c74ba99b07a004bd18353b", 0x48}, {0x0}], 0x2}, 0x48b4) 987.726483ms ago: executing program 4 (id=3487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x58, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96557917d5d82cebae9347436de1ace2fe62c079"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}}, 0x4004) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x606f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66c7ec49}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r3 = socket(0x1d, 0xa, 0xfff) syz_genetlink_get_family_id$team(&(0x7f0000001600), r3) 949.633005ms ago: executing program 3 (id=3490): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0)=0xa00, &(0x7f0000000200)}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @remote, @val={@val={0x88a8, 0x4}, {0x8100, 0x4, 0x1}}, {@generic={0x8906, "d987be33cdb75df2"}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x0, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x421, @mcast1, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000440), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x27, 0xe, 0x0, &(0x7f0000000140)="e90204000000000000007f5388a8", 0x0, 0x400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 809.176653ms ago: executing program 6 (id=3491): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x8100) 808.861173ms ago: executing program 9 (id=3492): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 808.237503ms ago: executing program 6 (id=3493): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup2(r0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r4, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r4, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) shmget(0x3, 0x4000, 0x800, &(0x7f0000d06000/0x4000)=nil) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x4, &(0x7f0000002400)) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x103e707638c8b603}]}, 0x30}}, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xc}}, './file0\x00'}) 682.051811ms ago: executing program 3 (id=3494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x1a8, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xdba, @empty, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @empty, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private1, 0x36af}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa19b}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 678.648031ms ago: executing program 9 (id=3495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x40000000) 576.574507ms ago: executing program 9 (id=3496): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket(0x2, 0x80805, 0x0) fcntl$setflags(r2, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = io_uring_setup(0x5dda, &(0x7f0000000180)={0x0, 0x9c9b, 0x400, 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r8, 0x0, 0xd, &(0x7f0000000040)=0x10001, 0x2) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000000)=""/19, &(0x7f0000000080)=0x13) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000300)={'veth1_to_team\x00', @local}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r5, 0x8080583a, &(0x7f0000000200)={0x2, 0x281, 0x4, 0x0, 0x3, 0x0, 0x3}) ioctl$sock_SIOCETHTOOL(r3, 0x8993, &(0x7f0000000080)={'bond0\x00', 0x0}) 501.179032ms ago: executing program 6 (id=3497): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) 500.784202ms ago: executing program 3 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 490.361762ms ago: executing program 6 (id=3499): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x24000, 0x0) 486.639402ms ago: executing program 3 (id=3500): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 442.558044ms ago: executing program 3 (id=3501): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000100)=@l2={0x1f, 0x81, @any, 0x9}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="95", 0x1}], 0x1, &(0x7f00000001c0)=[{0x98, 0x1, 0xffffffff, "5f53204f1857c7afec3ce4e2b9288750030d7d21e6e71b459bea1eaa36a4b8f9f06a54bb6780d5c3f2cace664289a13bc8f510370642f1fadc041813e009f4a98d16def75af11aadff843c1ef7670d9cbe112e0b23e8ad55a5ba5096bfb8409cdfff3defc76029f27d8b0a07d35dc0ac5e5596e15445ed43af8e4f56a34f908c704ed101204e"}, {0xc8, 0x116, 0x5, "6152b3b6199fb2ba7e00fc99d7be47e221e01fa927941fadbcded4b86dd79967d1a838b58df3a0849851bd9df74995ddb27a11f9070b6e107d3cbcef04473960e19e61b7ae64ccc14a2224b69a5e7a076319a9f5e263e57fedd70056f91213694aeedd6e8a9db8db7c17ef1766839b20cdf7677de6e7cb04ecc342a76e95d056a44fad7e59928389fab4a494b6038a856365316a2878e9d12f390955f8d38f60f4f852d91d3feeb89f81517df6d63e7546a47af6b08259cb"}], 0x160}, 0x24000040) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) recvmmsg(r1, &(0x7f0000005080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002103, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x1410, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40020) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getflags(r4, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x0) listen(r0, 0x7) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 441.603815ms ago: executing program 6 (id=3502): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x6, 0x32, 0xffffffffffffffff, 0x55f52000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x7f, 0x2100) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f00000001c0)=""/237, 0x46, 0xed, 0x8}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x46}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000001c0)='E\x00', 0x0, 0xffffffffffffffff) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/227, 0xe3, 0x6, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00', @ANYBLOB="010800040000000000000b002000", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000010000ffdbdf250a0000000800030019a435659ab694f3603101e1949ae77e82b7b57265ecf681fa2385f1946990a786a5dfb1fd285d507b30fd140663c9681d7d9d81aba191cf11ed2471ab74c530da038db1b94db65b225db7f16c", @ANYRESDEC=r4, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x400c049}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r8}, 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "d278b884dab91f0881b079b0fb2f714ab19dd546ff9aad16274923f7ffebce3d7707a91c7e344e14eec7a930363664be29dd2b3fa820c59ad987d377f9a5f9c8"}, 0x48}, 0x2}, 0x810) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) move_pages(r9, 0x1, &(0x7f0000000340)=[&(0x7f00000e0000/0x3000)=nil], &(0x7f0000000380)=[0x1, 0x0, 0xffffad7c, 0x5, 0x5, 0x2, 0x2, 0x3], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000440)=""/94) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000307000/0x2000)=nil) 150.225092ms ago: executing program 6 (id=3503): socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r2, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r5, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 149.836442ms ago: executing program 3 (id=3504): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 9 (id=3505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): pid=10050 comm="syz.3.1992" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 140.755678][T10042] FAT-fs (loop6): Directory bread(block 70) failed [ 140.762554][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.771799][T10042] FAT-fs (loop6): Directory bread(block 71) failed [ 140.778839][T10042] FAT-fs (loop6): Directory bread(block 72) failed [ 140.799057][ T1884] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.810066][T10042] FAT-fs (loop6): Directory bread(block 73) failed [ 140.817918][T10060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1994'. [ 140.837567][ T1884] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.875056][ T1884] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.985708][ T1884] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.036090][ T1884] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.067996][ T1884] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.091422][T10060] loop3: detected capacity change from 0 to 1024 [ 141.113301][ T1884] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.154860][T10060] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 141.165876][T10060] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.179728][T10060] EXT4-fs error (device loop3): ext4_get_journal_inode:5865: comm syz.3.1994: inode #4294967295: comm syz.3.1994: iget: illegal inode # [ 141.196404][T10060] loop3: lost filesystem error report for type 5 error -117 [ 141.196496][T10060] EXT4-fs (loop3): no journal found [ 141.203910][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 141.203930][ C1] EXT4-fs (loop3): initial error at time 1771011963: ext4_get_journal_inode:5865 [ 141.203955][ C1] EXT4-fs (loop3): last error at time 1771011963: ext4_get_journal_inode:5865 [ 141.245030][T10040] loop5: detected capacity change from 0 to 256 [ 141.252165][T10040] vfat: Unknown parameter '0x0000000000000003 ' [ 141.259430][T10060] EXT4-fs (loop3): can't get journal size [ 141.308709][T10039] syz.6.1990 (10039) used greatest stack depth: 6384 bytes left [ 141.319759][ T1884] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.328219][T10060] EXT4-fs (loop3): failed to initialize system zone (-22) [ 141.367484][T10060] EXT4-fs (loop3): mount failed [ 141.464072][T10070] netlink: 'syz.5.1997': attribute type 21 has an invalid length. [ 141.479735][T10069] netlink: 'syz.5.1997': attribute type 21 has an invalid length. [ 141.632159][ T28] audit: type=1400 audit(1771011964.303:1953): avc: denied { watch_reads } for pid=10083 comm="syz.5.2003" path="/312" dev="tmpfs" ino=1650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 141.721051][T10090] loop9: detected capacity change from 0 to 512 [ 141.797550][T10090] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.821777][T10090] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.907080][T10090] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #18: comm syz.9.2006: corrupted inode contents [ 141.944185][T10090] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #18: comm syz.9.2006: mark_inode_dirty error [ 141.966573][T10090] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #18: comm syz.9.2006: corrupted inode contents [ 141.994270][T10090] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #18: comm syz.9.2006: mark_inode_dirty error [ 142.035936][T10102] vlan2: entered promiscuous mode [ 142.041392][T10090] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #18: comm syz.9.2006: mark inode dirty (error -117) [ 142.051993][T10102] macvlan1: entered promiscuous mode [ 142.060050][ T28] audit: type=1400 audit(1771011964.703:1954): avc: denied { setopt } for pid=10098 comm="syz.3.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.069185][T10090] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 142.153494][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.158884][ T8078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.172812][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.231739][ T28] audit: type=1400 audit(1771011964.903:1955): avc: denied { bind } for pid=10107 comm="syz.3.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.284445][T10112] netlink: 'syz.3.2012': attribute type 10 has an invalid length. [ 142.324766][ T1690] tipc: Subscription rejected, illegal request [ 142.366291][T10109] loop9: detected capacity change from 0 to 8192 [ 142.423929][ T3304] loop9: p1 < > p2 p3 < p5 p6 > p4 [ 142.429207][ T3304] loop9: partition table partially beyond EOD, truncated [ 142.436396][ T3304] loop9: p1 start 100663296 is beyond EOD, truncated [ 142.443217][ T3304] loop9: p2 size 134217732 extends beyond EOD, truncated [ 142.451593][ T3304] loop9: p4 size 14876672 extends beyond EOD, truncated [ 142.460610][ T3304] loop9: p5 size 134217732 extends beyond EOD, truncated [ 142.468411][ T3304] loop9: p6 size 14876672 extends beyond EOD, truncated [ 142.478620][T10109] loop9: p1 < > p2 p3 < p5 p6 > p4 [ 142.484277][T10109] loop9: partition table partially beyond EOD, truncated [ 142.491554][T10109] loop9: p1 start 100663296 is beyond EOD, truncated [ 142.498278][T10109] loop9: p2 size 134217732 extends beyond EOD, truncated [ 142.506900][T10109] loop9: p4 size 14876672 extends beyond EOD, truncated [ 142.515302][T10109] loop9: p5 size 134217732 extends beyond EOD, truncated [ 142.522975][T10109] loop9: p6 size 14876672 extends beyond EOD, truncated [ 142.568056][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 142.579762][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 142.591029][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 142.602373][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 142.619133][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 142.619311][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 142.630286][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p6, 10) failed: No such file or directory [ 142.639915][ T4951] udevd[4951]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 142.650537][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 142.758527][T10127] netlink: 15 bytes leftover after parsing attributes in process `syz.9.2019'. [ 142.853367][ T28] audit: type=1400 audit(1771011965.533:1956): avc: denied { mount } for pid=10133 comm="syz.9.2023" name="/" dev="rpc_pipefs" ino=28657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 142.987536][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2026'. [ 142.996837][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2027'. [ 143.023815][ T28] audit: type=1400 audit(1771011965.703:1957): avc: denied { remount } for pid=10147 comm="syz.4.2029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.042800][T10142] lo speed is unknown, defaulting to 1000 [ 143.050338][ T28] audit: type=1400 audit(1771011965.723:1958): avc: denied { mounton } for pid=10147 comm="syz.4.2029" path="/446/file0" dev="tmpfs" ino=2353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.274883][T10172] FAULT_INJECTION: forcing a failure. [ 143.274883][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 143.316006][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.5.2036 Not tainted syzkaller #0 PREEMPT(full) [ 143.316029][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 143.316040][T10172] Call Trace: [ 143.316068][T10172] [ 143.316077][T10172] __dump_stack+0x1d/0x30 [ 143.316101][T10172] dump_stack_lvl+0x95/0xd0 [ 143.316122][T10172] dump_stack+0x15/0x1b [ 143.316142][T10172] should_fail_ex+0x263/0x280 [ 143.316175][T10172] should_failslab+0x8c/0xb0 [ 143.316204][T10172] __kvmalloc_node_noprof+0x144/0x620 [ 143.316222][T10172] ? ip_set_alloc+0x24/0x30 [ 143.316237][T10172] ? __kmalloc_cache_noprof+0x18a/0x400 [ 143.316281][T10172] ip_set_alloc+0x24/0x30 [ 143.316298][T10172] hash_ip_create+0x56d/0xa50 [ 143.316322][T10172] ? __pfx_hash_ip_create+0x10/0x10 [ 143.316376][T10172] ip_set_create+0x3cf/0x970 [ 143.316400][T10172] ? __nla_parse+0x40/0x60 [ 143.316421][T10172] nfnetlink_rcv_msg+0x509/0x5d0 [ 143.316460][T10172] netlink_rcv_skb+0x123/0x220 [ 143.316488][T10172] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.316525][T10172] nfnetlink_rcv+0x167/0x1720 [ 143.316561][T10172] ? xas_load+0x413/0x430 [ 143.316583][T10172] ? xas_load+0x413/0x430 [ 143.316610][T10172] ? __rcu_read_unlock+0x4e/0x70 [ 143.316626][T10172] ? xa_load+0xb1/0xe0 [ 143.316713][T10172] ? __account_obj_stock+0x211/0x350 [ 143.316736][T10172] ? obj_cgroup_charge_account+0x122/0x1a0 [ 143.316757][T10172] ? should_fail_ex+0x30/0x280 [ 143.316804][T10172] ? __rcu_read_unlock+0x4e/0x70 [ 143.316821][T10172] ? avc_has_perm_noaudit+0xab/0x130 [ 143.316837][T10172] ? _raw_spin_lock_bh+0x56/0xb0 [ 143.316861][T10172] ? _raw_spin_unlock_bh+0x18/0x20 [ 143.317005][T10172] ? selinux_nlmsg_lookup+0x99/0x890 [ 143.317024][T10172] ? __rcu_read_unlock+0x33/0x70 [ 143.317039][T10172] ? __netlink_lookup+0x276/0x2b0 [ 143.317071][T10172] netlink_unicast+0x5c0/0x690 [ 143.317099][T10172] netlink_sendmsg+0x5c8/0x6f0 [ 143.317117][T10172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.317133][T10172] ____sys_sendmsg+0x5af/0x600 [ 143.317208][T10172] ___sys_sendmsg+0x195/0x1e0 [ 143.317295][T10172] __x64_sys_sendmsg+0xd4/0x160 [ 143.317315][T10172] x64_sys_call+0x194c/0x3020 [ 143.317334][T10172] do_syscall_64+0x12c/0x370 [ 143.317468][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.317583][T10172] RIP: 0033:0x7f83ddb9bf79 [ 143.317611][T10172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.317693][T10172] RSP: 002b:00007f83dc5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.317712][T10172] RAX: ffffffffffffffda RBX: 00007f83dde15fa0 RCX: 00007f83ddb9bf79 [ 143.317724][T10172] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 143.317735][T10172] RBP: 00007f83dc5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.317745][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.317755][T10172] R13: 00007f83dde16038 R14: 00007f83dde15fa0 R15: 00007ffe252c7508 [ 143.317828][T10172] [ 143.369320][T10153] syzkaller0: entered promiscuous mode [ 143.629637][T10153] syzkaller0: entered allmulticast mode [ 143.680042][T10191] loop5: detected capacity change from 0 to 512 [ 143.710721][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.720797][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.742762][T10191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.755875][T10191] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.775656][T10191] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #18: comm syz.5.2040: corrupted inode contents [ 143.790327][T10191] fserror_report: 6 callbacks suppressed [ 143.790347][T10191] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 143.796652][T10191] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #18: comm syz.5.2040: mark_inode_dirty error [ 143.818015][T10191] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 143.818193][T10191] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #18: comm syz.5.2040: corrupted inode contents [ 143.839479][T10191] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 143.839687][T10191] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.2040: mark_inode_dirty error [ 143.861236][T10191] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 143.861421][T10191] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.2040: mark inode dirty (error -117) [ 143.883515][T10191] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 143.883841][T10191] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 143.899149][T10199] FAULT_INJECTION: forcing a failure. [ 143.899149][T10199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.927950][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.928967][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.9.2042 Not tainted syzkaller #0 PREEMPT(full) [ 143.928992][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 143.929047][T10199] Call Trace: [ 143.929055][T10199] [ 143.929063][T10199] __dump_stack+0x1d/0x30 [ 143.929103][T10199] dump_stack_lvl+0x95/0xd0 [ 143.929123][T10199] dump_stack+0x15/0x1b [ 143.929142][T10199] should_fail_ex+0x263/0x280 [ 143.929203][T10199] should_fail+0xb/0x20 [ 143.929220][T10199] should_fail_usercopy+0x1a/0x20 [ 143.929241][T10199] _copy_from_user+0x1c/0xb0 [ 143.929324][T10199] get_user_ifreq+0x52/0x110 [ 143.929345][T10199] sock_ioctl+0x54e/0x610 [ 143.929367][T10199] ? __pfx_sock_ioctl+0x10/0x10 [ 143.929454][T10199] __se_sys_ioctl+0xce/0x140 [ 143.929478][T10199] __x64_sys_ioctl+0x43/0x50 [ 143.929526][T10199] x64_sys_call+0x1563/0x3020 [ 143.929628][T10199] do_syscall_64+0x12c/0x370 [ 143.929649][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.929689][T10199] RIP: 0033:0x7f0762f5bf79 [ 143.929704][T10199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.929721][T10199] RSP: 002b:00007f07619b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.929767][T10199] RAX: ffffffffffffffda RBX: 00007f07631d5fa0 RCX: 00007f0762f5bf79 [ 143.929780][T10199] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 143.929792][T10199] RBP: 00007f07619b7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.929804][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.929816][T10199] R13: 00007f07631d6038 R14: 00007f07631d5fa0 R15: 00007fff931f9938 [ 143.929833][T10199] [ 144.004404][T10201] netlink: 'syz.9.2045': attribute type 13 has an invalid length. [ 144.122085][T10201] netlink: 'syz.9.2045': attribute type 12 has an invalid length. [ 144.199067][T10215] loop9: detected capacity change from 0 to 164 [ 144.215879][T10215] ISOFS: unable to read i-node block [ 144.222331][T10215] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 144.235026][ T28] audit: type=1400 audit(1771011966.913:1959): avc: denied { mount } for pid=10212 comm="syz.9.2046" name="/" dev="loop9" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 144.244028][T10218] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2049'. [ 144.260228][ T28] audit: type=1400 audit(1771011966.913:1960): avc: denied { setcurrent } for pid=10217 comm="syz.5.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 144.301916][ T28] audit: type=1400 audit(1771011966.973:1961): avc: denied { unmount } for pid=8078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 144.348118][T10221] netlink: 'syz.9.2050': attribute type 10 has an invalid length. [ 144.358500][T10221] bond0: (slave dummy0): Releasing backup interface [ 144.378014][T10221] team0: Port device dummy0 added [ 144.390566][T10221] netlink: 'syz.9.2050': attribute type 10 has an invalid length. [ 144.396818][T10222] netlink: 'syz.5.2051': attribute type 10 has an invalid length. [ 144.403030][T10228] loop6: detected capacity change from 0 to 512 [ 144.413505][T10222] dummy0: left allmulticast mode [ 144.418649][T10222] dummy0: left promiscuous mode [ 144.424818][T10222] bridge0: port 4(dummy0) entered disabled state [ 144.457607][T10222] team0: Port device dummy0 added [ 144.464880][T10228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.470638][T10222] netlink: 'syz.5.2051': attribute type 10 has an invalid length. [ 144.484638][T10228] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.497066][T10221] team0: Port device dummy0 removed [ 144.504837][T10221] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.519080][T10222] team0: Port device dummy0 removed [ 144.526203][T10228] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #18: comm syz.6.2054: corrupted inode contents [ 144.527762][T10222] dummy0: entered promiscuous mode [ 144.540481][T10228] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 144.543612][T10222] dummy0: entered allmulticast mode [ 144.543719][T10228] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #18: comm syz.6.2054: mark_inode_dirty error [ 144.553224][T10222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.558805][T10228] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 144.581554][T10228] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #18: comm syz.6.2054: corrupted inode contents [ 144.603482][T10228] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 144.604095][T10228] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #18: comm syz.6.2054: mark_inode_dirty error [ 144.625682][T10228] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 144.625888][T10228] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #18: comm syz.6.2054: mark inode dirty (error -117) [ 144.648329][T10228] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 144.648525][T10228] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 144.704853][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.714594][T10237] loop9: detected capacity change from 0 to 1024 [ 144.733570][T10237] EXT4-fs: Ignoring removed nobh option [ 144.739482][T10237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.746865][T10239] loop5: detected capacity change from 0 to 136 [ 144.757452][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2056'. [ 144.766411][T10239] iso9660: Unknown parameter 'overridLroerm' [ 144.788178][T10237] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.796057][T10242] team2: entered promiscuous mode [ 144.807017][T10242] team2: entered allmulticast mode [ 144.812487][T10242] 8021q: adding VLAN 0 to HW filter on device team2 [ 144.848085][ T8078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.952685][T10256] EXT4-fs: dax option not supported [ 144.971343][T10257] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2061'. [ 145.074533][T10257] FAT-fs (loop9): Directory bread(block 64) failed [ 145.103431][T10257] FAT-fs (loop9): Directory bread(block 65) failed [ 145.126082][T10257] FAT-fs (loop9): Directory bread(block 66) failed [ 145.148689][T10257] FAT-fs (loop9): Directory bread(block 67) failed [ 145.185982][T10257] FAT-fs (loop9): Directory bread(block 68) failed [ 145.230366][T10257] FAT-fs (loop9): Directory bread(block 69) failed [ 145.234041][T10259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.287892][T10259] ext4 filesystem being mounted at /320/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.320771][T10257] FAT-fs (loop9): Directory bread(block 70) failed [ 145.423188][T10257] FAT-fs (loop9): Directory bread(block 71) failed [ 145.431580][T10257] FAT-fs (loop9): Directory bread(block 72) failed [ 145.451661][T10257] FAT-fs (loop9): Directory bread(block 73) failed [ 145.596971][T10271] set_capacity_and_notify: 3 callbacks suppressed [ 145.596983][T10271] loop5: detected capacity change from 0 to 512 [ 145.648844][T10271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.662382][T10271] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.743766][T10271] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #18: comm syz.5.2067: corrupted inode contents [ 145.819235][T10271] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #18: comm syz.5.2067: mark_inode_dirty error [ 145.885672][T10271] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #18: comm syz.5.2067: corrupted inode contents [ 145.963162][T10271] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #18: comm syz.5.2067: mark_inode_dirty error [ 146.008457][T10271] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #18: comm syz.5.2067: mark inode dirty (error -117) [ 146.063440][T10271] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 146.100072][ T4036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.103678][T10254] syz.9.2061 (10254) used greatest stack depth: 6088 bytes left [ 146.164809][T10281] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2069'. [ 146.182374][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.202657][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 146.359635][T10296] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2071'. [ 146.394824][T10296] batadv_slave_1: entered promiscuous mode [ 146.401349][T10296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.404441][T10298] loop9: detected capacity change from 0 to 128 [ 146.424215][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2071'. [ 146.447663][T10298] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.462398][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.471764][T10298] FAT-fs (loop9): bogus number of directory entries (6) [ 146.483022][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.489965][T10298] FAT-fs (loop9): Can't find a valid FAT filesystem [ 146.491848][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 146.491861][ T28] audit: type=1400 audit(1771011969.173:1968): avc: denied { bind } for pid=10299 comm="syz.5.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.603728][T10296] syzkaller0: entered promiscuous mode [ 146.609232][T10296] syzkaller0: entered allmulticast mode [ 146.626585][ T28] audit: type=1400 audit(1771011969.303:1969): avc: denied { read } for pid=10299 comm="syz.5.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.647633][T10296] syzkaller0: create flow: hash 2513716028 index 1 [ 146.711078][ T28] audit: type=1400 audit(1771011969.303:1970): avc: denied { relabelfrom } for pid=10294 comm="syz.6.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.904065][ T28] audit: type=1400 audit(1771011969.303:1971): avc: denied { relabelto } for pid=10294 comm="syz.6.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.231446][T10294] syzkaller0: delete flow: hash 2513716028 index 1 [ 147.408654][T10322] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 147.423483][T10322] dummy0: entered promiscuous mode [ 147.442155][T10322] team0: Port device dummy0 added [ 147.458215][T10322] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 147.485679][T10322] team0: Port device dummy0 removed [ 147.501277][T10322] dummy0: left promiscuous mode [ 147.511941][T10322] dummy0: entered promiscuous mode [ 147.523977][T10322] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.547273][ T28] audit: type=1400 audit(1771011970.223:1972): avc: denied { bind } for pid=10328 comm="syz.9.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.681311][T10335] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.2088'. [ 147.690720][ T28] audit: type=1400 audit(1771011970.353:1973): avc: denied { getopt } for pid=10331 comm="syz.9.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.723131][T10335] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.2088'. [ 148.593299][ T28] audit: type=1400 audit(1771011971.263:1974): avc: denied { setopt } for pid=10358 comm="syz.4.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.593906][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2099'. [ 148.691577][T10362] netlink: 'syz.9.2100': attribute type 10 has an invalid length. [ 148.697892][ T4911] kernel write not supported for file bpf-prog (pid: 4911 comm: kworker/0:9) [ 148.708753][T10362] bond0: (slave dummy0): Releasing backup interface [ 148.742822][T10374] netlink: 'syz.9.2100': attribute type 10 has an invalid length. [ 148.754890][ T28] audit: type=1400 audit(2000000000.000:1975): avc: denied { read } for pid=10373 comm="syz.6.2104" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.780459][T10362] team0: Port device dummy0 added [ 148.800035][ T28] audit: type=1400 audit(2000000000.000:1976): avc: denied { audit_write } for pid=10371 comm="syz.4.2103" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 148.825511][ T28] audit: type=1107 audit(2000000000.000:1977): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='˜‚µhw<'Ï÷È»Ÿe©¬ôšöD [ 148.825511][ T28] Ϧͬ0…" ÃÈ' [ 148.825918][T10374] team0: Port device dummy0 removed [ 148.852601][T10374] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.868353][T10377] loop6: detected capacity change from 0 to 512 [ 148.883472][T10379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2103'. [ 148.925469][T10377] ------------[ cut here ]------------ [ 148.931134][T10377] EA inode 11 i_nlink=0 [ 148.931166][T10377] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.6.2104/10377 [ 148.946987][T10377] Modules linked in: [ 148.950934][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.6.2104 Not tainted syzkaller #0 PREEMPT(full) [ 148.960603][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 148.971648][T10377] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 148.978657][T10377] Code: b4 2c 9a ff 4c 8d 2d cd 0a 5f 05 49 8d 7e 40 e8 a4 97 b6 ff 49 8b 6e 40 4c 89 e7 e8 d8 92 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f d1 d8 03 66 66 66 66 66 66 2e [ 148.999590][T10377] RSP: 0018:ffffc90001c4f5a8 EFLAGS: 00010246 [ 149.005689][T10377] RAX: ffff888101d36d78 RBX: ffff88811b215328 RCX: ffffffff81becc08 [ 149.013891][T10377] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871dd6c0 [ 149.022201][T10377] RBP: 000000000000000b R08: 000188811b2152db R09: 0000000000000000 [ 149.030887][T10377] R10: ffffc90001c4f4d8 R11: 0001c90001c4f4d8 R12: ffff88811b2152d8 [ 149.039251][T10377] R13: ffffffff871dd6c0 R14: ffff88811b215290 R15: 0000000000000001 [ 149.047280][T10377] FS: 00007f8fc535e6c0(0000) GS:ffff8882ae8fa000(0000) knlGS:0000000000000000 [ 149.057221][T10377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.063890][T10377] CR2: 00007f0763d056b8 CR3: 00000001281ee000 CR4: 00000000003506f0 [ 149.072300][T10377] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 149.080536][T10377] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 149.089271][T10377] Call Trace: [ 149.092550][T10377] [ 149.095493][T10377] ext4_xattr_set_entry+0x77c/0x1010 [ 149.100880][T10377] ext4_xattr_ibody_set+0x184/0x3c0 [ 149.106160][T10377] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 149.112043][T10377] __ext4_expand_extra_isize+0x246/0x280 [ 149.118548][T10377] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 149.124062][T10377] ext4_evict_inode+0x7c3/0xd40 [ 149.129121][T10377] ? __pfx_ext4_evict_inode+0x10/0x10 [ 149.135031][T10377] evict+0x2af/0x510 [ 149.139092][T10377] ? __dquot_initialize+0x146/0x7c0 [ 149.144972][T10377] iput+0x41a/0x580 [ 149.149014][T10377] ext4_process_orphan+0x1a9/0x1c0 [ 149.154249][T10377] ext4_orphan_cleanup+0x6a8/0xa00 [ 149.159432][T10377] ext4_fill_super+0x3408/0x37c0 [ 149.164564][T10377] ? set_blocksize+0x14c/0x270 [ 149.169442][T10377] ? setup_bdev_super+0x30e/0x370 [ 149.175419][T10377] ? __pfx_ext4_fill_super+0x10/0x10 [ 149.180858][T10377] get_tree_bdev_flags+0x291/0x300 [ 149.186205][T10377] ? __pfx_ext4_fill_super+0x10/0x10 [ 149.191660][T10377] get_tree_bdev+0x1f/0x30 [ 149.196143][T10377] ext4_get_tree+0x1c/0x30 [ 149.201283][T10377] vfs_get_tree+0x57/0x1d0 [ 149.206461][T10377] do_new_mount+0x288/0x8d0 [ 149.211092][T10377] path_mount+0x4d0/0xbc0 [ 149.215899][T10377] __se_sys_mount+0x28c/0x2e0 [ 149.220818][T10377] __x64_sys_mount+0x67/0x80 [ 149.225671][T10377] x64_sys_call+0x2d61/0x3020 [ 149.230445][T10377] do_syscall_64+0x12c/0x370 [ 149.235892][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.241945][T10377] RIP: 0033:0x7f8fc692d20a [ 149.246525][T10377] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.266559][T10387] netlink: 'syz.9.2107': attribute type 29 has an invalid length. [ 149.267645][T10377] RSP: 002b:00007f8fc535de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.282335][T10387] netlink: 'syz.9.2107': attribute type 29 has an invalid length. [ 149.283722][T10377] RAX: ffffffffffffffda RBX: 00007f8fc535dee0 RCX: 00007f8fc692d20a [ 149.300322][T10377] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007f8fc535dea0 [ 149.308479][T10377] RBP: 0000200000000000 R08: 00007f8fc535dee0 R09: 0000000000800700 [ 149.316707][T10377] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 149.325467][T10377] R13: 00007f8fc535dea0 R14: 000000000000046f R15: 00002000000007c0 [ 149.333948][T10377] [ 149.337094][T10377] ---[ end trace 0000000000000000 ]--- [ 149.344019][T10377] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.2104: bit already cleared for inode 11 [ 149.356348][T10377] loop6: lost filesystem error report for type 5 error -117 [ 149.363344][T10377] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 149.379380][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 149.379400][ C0] EXT4-fs (loop6): initial error at time 2000000000: ext4_free_inode:354 [ 149.379420][ C0] EXT4-fs (loop6): last error at time 2000000000: ext4_free_inode:354 [ 149.443226][T10377] loop6: lost filesystem error report for type 5 error -117 [ 149.446225][T10377] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 149.474892][T10377] loop6: lost filesystem error report for type 5 error -117 [ 149.475039][T10377] EXT4-fs (loop6): 1 orphan inode deleted [ 149.511997][T10377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.643490][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.846541][T10417] loop6: detected capacity change from 0 to 4096 [ 149.887000][T10417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.983786][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.165336][T10422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.183029][T10422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.477071][T10429] __nla_validate_parse: 3 callbacks suppressed [ 150.477084][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2120'. [ 150.549611][T10431] netlink: 'syz.6.2123': attribute type 10 has an invalid length. [ 150.558781][T10431] bond0: (slave dummy0): Releasing backup interface [ 150.589284][T10431] team0: Port device dummy0 added [ 150.601761][T10431] netlink: 'syz.6.2123': attribute type 10 has an invalid length. [ 150.633563][T10431] team0: Port device dummy0 removed [ 150.645054][T10431] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.018076][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2134'. [ 151.194223][T10462] netlink: 'syz.9.2133': attribute type 10 has an invalid length. [ 151.250870][T10468] netlink: 'syz.9.2133': attribute type 10 has an invalid length. [ 151.286865][T10462] bond0: (slave dummy0): Releasing backup interface [ 151.297278][T10462] team0: Port device dummy0 added [ 151.306466][T10468] team0: Port device dummy0 removed [ 151.328484][T10468] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.337679][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2135'. [ 151.585773][T10483] lo speed is unknown, defaulting to 1000 [ 151.929768][T10472] loop6: detected capacity change from 0 to 1024 [ 151.985008][T10472] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.017887][T10472] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 152.042010][T10472] EXT4-fs (loop6): orphan cleanup on readonly fs [ 152.082483][T10472] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.2136: Invalid inode table block 0 in block_group 0 [ 152.105251][T10472] loop6: lost filesystem error report for type 5 error -117 [ 152.106121][T10472] EXT4-fs (loop6): Remounting filesystem read-only [ 152.113809][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 152.113862][ C0] EXT4-fs (loop6): initial error at time 2000000003: __ext4_get_inode_loc:4782 [ 152.113950][ C0] EXT4-fs (loop6): last error at time 2000000003: __ext4_get_inode_loc:4782 [ 152.168051][T10472] __quota_error: 8 callbacks suppressed [ 152.168252][T10472] Quota error (device loop6): write_blk: dquota write failed [ 152.184146][T10472] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 152.196541][T10472] EXT4-fs (loop6): 1 truncate cleaned up [ 152.210685][T10472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.352584][ T28] audit: type=1400 audit(2000000003.590:1986): avc: denied { ioctl } for pid=10515 comm="syz.9.2148" path="socket:[29242]" dev="sockfs" ino=29242 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.472777][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.023200][ T28] audit: type=1400 audit(2000000004.260:1987): avc: denied { create } for pid=10536 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 153.073370][ T28] audit: type=1400 audit(2000000004.290:1988): avc: denied { sys_admin } for pid=10536 comm="syz.4.2159" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 153.095765][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2161'. [ 153.112436][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2161'. [ 153.143936][T10539] netlink: 'syz.6.2160': attribute type 10 has an invalid length. [ 153.167299][T10539] bond0: (slave dummy0): Releasing backup interface [ 153.176511][T10551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2163'. [ 153.188399][T10539] team0: Port device dummy0 added [ 153.203748][T10554] netlink: 'syz.6.2160': attribute type 10 has an invalid length. [ 153.231999][T10554] team0: Port device dummy0 removed [ 153.254038][T10554] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.347496][ T28] audit: type=1400 audit(2000000004.590:1989): avc: denied { write } for pid=10564 comm="syz.6.2171" path="socket:[29335]" dev="sockfs" ino=29335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.390711][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.400251][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.401919][T10582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2176'. [ 153.411866][T10577] loop9: detected capacity change from 0 to 256 [ 153.427820][T10582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2176'. [ 153.515928][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2180'. [ 153.527044][ T28] audit: type=1400 audit(2000000004.770:1990): avc: denied { getopt } for pid=10597 comm="syz.3.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 153.550724][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 153.585182][T10598] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 153.670109][T10599] loop6: detected capacity change from 0 to 512 [ 153.698352][T10599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.717707][T10599] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.799653][ T28] audit: type=1400 audit(2000000005.040:1991): avc: denied { unmount } for pid=10614 comm="syz.3.2186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 153.842386][ T28] audit: type=1400 audit(2000000005.080:1992): avc: denied { create } for pid=10616 comm="syz.3.2187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.864687][ T28] audit: type=1400 audit(2000000005.090:1993): avc: denied { write } for pid=10616 comm="syz.3.2187" name="file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.968191][T10630] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 154.120963][T10647] loop9: detected capacity change from 0 to 512 [ 154.144942][T10647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.164619][T10647] ext4 filesystem being mounted at /185/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.195873][ T8078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.333898][T10685] netlink: 'syz.9.2214': attribute type 3 has an invalid length. [ 154.349248][ T5121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.634201][T10725] FAULT_INJECTION: forcing a failure. [ 154.634201][T10725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.648085][T10725] CPU: 1 UID: 0 PID: 10725 Comm: syz.9.2231 Tainted: G W syzkaller #0 PREEMPT(full) [ 154.648191][T10725] Tainted: [W]=WARN [ 154.648196][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 154.648317][T10725] Call Trace: [ 154.648328][T10725] [ 154.648337][T10725] __dump_stack+0x1d/0x30 [ 154.648362][T10725] dump_stack_lvl+0x95/0xd0 [ 154.648429][T10725] dump_stack+0x15/0x1b [ 154.648449][T10725] should_fail_ex+0x263/0x280 [ 154.648471][T10725] should_fail+0xb/0x20 [ 154.648491][T10725] should_fail_usercopy+0x1a/0x20 [ 154.648662][T10725] strncpy_from_user+0x27/0x250 [ 154.648690][T10725] ? __kmalloc_cache_noprof+0x18a/0x400 [ 154.648710][T10725] __se_sys_memfd_create+0x20f/0x3b0 [ 154.648734][T10725] __x64_sys_memfd_create+0x31/0x40 [ 154.648815][T10725] x64_sys_call+0x1f22/0x3020 [ 154.648916][T10725] do_syscall_64+0x12c/0x370 [ 154.648943][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.648964][T10725] RIP: 0033:0x7f0762f5bf79 [ 154.648977][T10725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.649061][T10725] RSP: 002b:00007f07619b6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 154.649081][T10725] RAX: ffffffffffffffda RBX: 00000000000004f1 RCX: 00007f0762f5bf79 [ 154.649095][T10725] RDX: 00007f07619b6ee0 RSI: 0000000000000000 RDI: 00007f0762ff29dd [ 154.649108][T10725] RBP: 00002000000012c0 R08: 00000000ffffffff R09: 0000000000000000 [ 154.649122][T10725] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 154.649209][T10725] R13: 00007f07619b6ee0 R14: 00007f07619b6ea0 R15: 0000200000000480 [ 154.649228][T10725] [ 155.031150][T10759] netlink: 'syz.5.2245': attribute type 1 has an invalid length. [ 155.063355][T10759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.090097][T10763] lo speed is unknown, defaulting to 1000 [ 155.146166][T10759] bond2: (slave veth7): Enslaving as an active interface with a down link [ 155.171285][T10765] team3: entered promiscuous mode [ 155.176545][T10765] team3: entered allmulticast mode [ 155.181960][T10765] 8021q: adding VLAN 0 to HW filter on device team3 [ 155.195994][T10778] netlink: 'syz.9.2247': attribute type 10 has an invalid length. [ 155.208277][T10778] bond0: (slave dummy0): Releasing backup interface [ 155.229388][T10778] team0: Port device dummy0 added [ 155.254350][T10778] netlink: 'syz.9.2247': attribute type 10 has an invalid length. [ 155.271299][T10774] bond2 (unregistering): (slave veth7): Releasing active interface [ 155.285423][T10774] bond2 (unregistering): Released all slaves [ 155.306573][T10778] team0: Port device dummy0 removed [ 155.315388][T10778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.367962][T10799] FAULT_INJECTION: forcing a failure. [ 155.367962][T10799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.437061][T10809] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 155.444097][T10799] CPU: 1 UID: 0 PID: 10799 Comm: syz.6.2259 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.444129][T10799] Tainted: [W]=WARN [ 155.444147][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 155.444158][T10799] Call Trace: [ 155.444165][T10799] [ 155.444172][T10799] __dump_stack+0x1d/0x30 [ 155.444196][T10799] dump_stack_lvl+0x95/0xd0 [ 155.444217][T10799] dump_stack+0x15/0x1b [ 155.444235][T10799] should_fail_ex+0x263/0x280 [ 155.444282][T10799] should_fail+0xb/0x20 [ 155.444355][T10799] should_fail_usercopy+0x1a/0x20 [ 155.444390][T10799] _copy_from_user+0x1c/0xb0 [ 155.444417][T10799] copy_from_sockptr_offset+0x66/0xa0 [ 155.444439][T10799] do_tcp_getsockopt+0x254/0x1ba0 [ 155.444463][T10799] ? do_user_addr_fault+0xb9d/0x1050 [ 155.444567][T10799] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 155.444586][T10799] ? irqentry_exit+0x91/0x520 [ 155.444609][T10799] tcp_getsockopt+0x6e/0xe0 [ 155.444628][T10799] sock_common_getsockopt+0x60/0x70 [ 155.444688][T10799] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 155.444712][T10799] do_sock_getsockopt+0x1c4/0x210 [ 155.444732][T10799] __x64_sys_getsockopt+0x11d/0x1a0 [ 155.444799][T10799] x64_sys_call+0x2dcf/0x3020 [ 155.444863][T10799] do_syscall_64+0x12c/0x370 [ 155.445028][T10799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.445049][T10799] RIP: 0033:0x7f8fc692bf79 [ 155.445065][T10799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.445081][T10799] RSP: 002b:00007f8fc537f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 155.445098][T10799] RAX: ffffffffffffffda RBX: 00007f8fc6ba5fa0 RCX: 00007f8fc692bf79 [ 155.445112][T10799] RDX: 000000000000001c RSI: 0000000000000006 RDI: 0000000000000003 [ 155.445124][T10799] RBP: 00007f8fc537f090 R08: 0000200000000a40 R09: 0000000000000000 [ 155.445137][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.445150][T10799] R13: 00007f8fc6ba6038 R14: 00007f8fc6ba5fa0 R15: 00007ffc52ed71b8 [ 155.445202][T10799] [ 155.681730][T10822] loop6: detected capacity change from 0 to 1024 [ 155.690007][T10822] EXT4-fs: Ignoring removed nobh option [ 155.698777][T10822] ext4: Unknown parameter 'euid' [ 155.828300][T10837] netlink: 'syz.5.2271': attribute type 10 has an invalid length. [ 155.839007][T10837] bond0: (slave dummy0): Releasing backup interface [ 155.846250][T10837] dummy0: left promiscuous mode [ 155.851296][T10837] dummy0: left allmulticast mode [ 155.860147][T10837] team0: Port device dummy0 added [ 155.882147][T10853] netlink: 'syz.5.2271': attribute type 10 has an invalid length. [ 155.917332][T10853] team0: Port device dummy0 removed [ 155.937191][T10853] dummy0: entered promiscuous mode [ 155.979849][T10853] dummy0: entered allmulticast mode [ 156.002433][T10853] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.060785][T10870] __nla_validate_parse: 5 callbacks suppressed [ 156.060803][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2282'. [ 156.118373][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2282'. [ 156.511847][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2286'. [ 156.532319][T10878] team1: entered promiscuous mode [ 156.538568][T10878] team1: entered allmulticast mode [ 156.544753][T10878] 8021q: adding VLAN 0 to HW filter on device team1 [ 156.568788][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2289'. [ 156.579245][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2289'. [ 156.590851][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2289'. [ 156.720500][T10900] netlink: 'syz.5.2297': attribute type 10 has an invalid length. [ 156.726753][T10906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2295'. [ 156.785226][T10900] bond0: (slave dummy0): Releasing backup interface [ 156.796033][T10900] dummy0: left promiscuous mode [ 156.800981][T10900] dummy0: left allmulticast mode [ 156.811409][T10900] team0: Port device dummy0 added [ 156.821558][T10907] team0: Port device dummy0 removed [ 156.830185][T10907] dummy0: entered promiscuous mode [ 156.836178][T10907] dummy0: entered allmulticast mode [ 156.842131][T10907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 157.074138][T10933] loop9: detected capacity change from 0 to 2048 [ 157.207887][ T3304] loop9: p1 < > p3 [ 157.215283][ T3304] loop9: p3 size 134217728 extends beyond EOD, truncated [ 157.692495][T10933] loop9: p1 < > p3 [ 157.701575][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 157.701598][ T28] audit: type=1400 audit(2000000008.940:2005): avc: denied { connect } for pid=10932 comm="syz.9.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.734300][T10933] loop9: p3 size 134217728 extends beyond EOD, truncated [ 158.013019][ T28] audit: type=1400 audit(2000000008.970:2006): avc: denied { write } for pid=10932 comm="syz.9.2309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 158.047699][ T4951] udevd[4951]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 158.054701][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 158.096500][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 158.104130][ T4951] udevd[4951]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 158.153720][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 158.270811][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2325'. [ 158.293912][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2325'. [ 158.326316][T10986] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 158.395739][T10998] validate_nla: 2 callbacks suppressed [ 158.395756][T10998] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 158.421012][T10998] bond0: (slave dummy0): Releasing backup interface [ 158.424006][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2331'. [ 158.451760][T10998] team0: Port device dummy0 added [ 158.530373][T10988] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 158.580823][T10988] team0: Port device dummy0 removed [ 158.633913][T10988] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 158.939446][T11022] netlink: 'syz.4.2337': attribute type 7 has an invalid length. [ 159.074581][ T28] audit: type=1400 audit(2000000010.320:2007): avc: denied { map } for pid=11035 comm="syz.9.2342" path="socket:[31957]" dev="sockfs" ino=31957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.113164][ T28] audit: type=1400 audit(2000000010.320:2008): avc: denied { read } for pid=11035 comm="syz.9.2342" path="socket:[31957]" dev="sockfs" ino=31957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.268116][T11056] lo speed is unknown, defaulting to 1000 [ 159.968362][T11080] Cannot find del_set index 0 as target [ 159.977870][ T28] audit: type=1400 audit(2000000011.220:2009): avc: denied { map } for pid=11079 comm="syz.9.2358" path="socket:[32069]" dev="sockfs" ino=32069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.059859][T11088] loop9: detected capacity change from 0 to 4096 [ 160.073164][ T28] audit: type=1400 audit(2000000011.220:2010): avc: denied { read } for pid=11079 comm="syz.9.2358" path="socket:[32069]" dev="sockfs" ino=32069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.119200][T11088] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.162055][ T8078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.735977][T11112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.745468][T11112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.801051][T11127] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 160.903614][T11136] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 160.913742][T11127] bond0: (slave dummy0): Releasing backup interface [ 160.929561][T11127] team0: Port device dummy0 added [ 160.948038][T11136] team0: Port device dummy0 removed [ 160.955864][T11136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.492710][T11162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11162 comm=syz.3.2390 [ 161.610658][T11171] __nla_validate_parse: 4 callbacks suppressed [ 161.610700][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2394'. [ 161.647224][T11174] loop9: detected capacity change from 0 to 512 [ 161.707630][T11174] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.733061][ T28] audit: type=1400 audit(2000000012.960:2011): avc: denied { getopt } for pid=11167 comm="syz.6.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.805374][T11174] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.821444][T11188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2400'. [ 161.828346][ T28] audit: type=1400 audit(2000000013.020:2012): avc: denied { setopt } for pid=11182 comm="syz.5.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.928454][T11199] syz_tun: left allmulticast mode [ 161.952279][T11191] netlink: 'syz.4.2401': attribute type 10 has an invalid length. [ 161.964489][T11191] bond0: (slave dummy0): Releasing backup interface [ 162.069976][T11209] netlink: 'syz.4.2401': attribute type 10 has an invalid length. [ 162.114302][T11191] dummy0: left promiscuous mode [ 162.199774][T11191] dummy0: entered promiscuous mode [ 162.220744][T11191] team0: Port device dummy0 added [ 162.323199][T11209] team0: Port device dummy0 removed [ 162.339759][T11209] dummy0: left promiscuous mode [ 162.347059][T11209] dummy0: entered promiscuous mode [ 162.363356][T11209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.591052][ T8078] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.605000][T11225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11225 comm=syz.4.2412 [ 162.709818][T11238] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 162.727725][T11238] tipc: Started in network mode [ 162.732656][T11238] tipc: Node identity 4, cluster identity 4711 [ 162.739511][T11238] tipc: Node number set to 4 [ 162.842508][ T28] audit: type=1400 audit(2000000014.080:2013): avc: denied { create } for pid=11247 comm="syz.6.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 162.842788][T11250] delete_channel: no stack [ 163.020629][ T28] audit: type=1400 audit(2000000014.260:2014): avc: denied { bind } for pid=11247 comm="syz.6.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 163.219311][T11264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11264 comm=syz.6.2426 [ 163.437849][T11283] netlink: 'syz.6.2434': attribute type 2 has an invalid length. [ 163.446012][ T28] audit: type=1400 audit(2000000014.680:2015): avc: denied { getopt } for pid=11282 comm="syz.6.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.486071][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2434'. [ 163.508160][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2434'. [ 163.553167][T11283] netlink: 'syz.6.2434': attribute type 2 has an invalid length. [ 163.570057][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2434'. [ 164.077461][T11299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2439'. [ 164.102440][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 164.126112][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 164.145976][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 164.172173][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 164.286951][T11308] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 164.374927][T11312] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 164.462068][T11312] bond2 (unregistering): Released all slaves [ 164.468420][ T28] audit: type=1400 audit(2000000015.700:2016): avc: denied { name_bind } for pid=11319 comm="syz.6.2447" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 164.493397][T11321] netlink: 'syz.6.2447': attribute type 10 has an invalid length. [ 164.524639][T11324] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 164.577837][T11331] netlink: 'syz.6.2449': attribute type 10 has an invalid length. [ 164.604399][T11331] bond0: (slave dummy0): Releasing backup interface [ 164.674093][T11342] netlink: 'syz.6.2449': attribute type 10 has an invalid length. [ 164.685085][T11331] team0: Port device dummy0 added [ 164.714313][T11342] team0: Port device dummy0 removed [ 164.721579][T11342] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.286405][T11361] netlink: 'syz.6.2457': attribute type 10 has an invalid length. [ 165.295514][T11361] bond0: (slave dummy0): Releasing backup interface [ 165.302240][T11354] Cannot find del_set index 0 as target [ 165.356601][T11366] netlink: 'syz.6.2457': attribute type 10 has an invalid length. [ 165.375979][T11361] team0: Port device dummy0 added [ 165.389572][T11366] team0: Port device dummy0 removed [ 165.393994][T11273] syz.5.2430 (11273) used greatest stack depth: 5392 bytes left [ 165.401591][T11366] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.574371][ T28] audit: type=1400 audit(2000000016.820:2017): avc: denied { mac_admin } for pid=11379 comm="syz.3.2464" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 165.574371][T11383] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 165.654037][ T28] audit: type=1400 audit(2000000016.890:2018): avc: denied { relabelto } for pid=11379 comm="syz.3.2464" name="159" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 165.690697][ T28] audit: type=1400 audit(2000000016.890:2019): avc: denied { associate } for pid=11379 comm="syz.3.2464" name="159" dev="tmpfs" ino=842 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0" [ 165.740648][T11396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11396 comm=syz.9.2469 [ 166.400722][ T28] audit: type=1400 audit(2000000017.640:2020): avc: denied { remove_name } for pid=8658 comm="syz-executor" name="binderfs" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 166.430224][ T28] audit: type=1400 audit(2000000017.640:2021): avc: denied { rmdir } for pid=8658 comm="syz-executor" name="159" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 166.457495][ T28] audit: type=1400 audit(2000000017.670:2022): avc: denied { map } for pid=11407 comm="syz.3.2472" path="socket:[32350]" dev="sockfs" ino=32350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.590335][T11426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11426 comm=syz.4.2481 [ 166.774176][T11455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11455 comm=syz.4.2495 [ 167.566017][T11501] __nla_validate_parse: 2 callbacks suppressed [ 167.566034][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2509'. [ 167.667688][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2513'. [ 167.750624][T11518] Cannot find map_set index 135 as target [ 168.795422][T11551] netlink: 'syz.6.2529': attribute type 1 has an invalid length. [ 168.806157][T11555] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2530'. [ 168.827163][T11551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.983251][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 168.983270][ T28] audit: type=1400 audit(2000000020.180:2036): avc: denied { setopt } for pid=11545 comm="syz.3.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.039788][T11558] bond1: (slave veth5): Enslaving as an active interface with a down link [ 169.073415][T11555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.131011][T11555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.180762][T11559] lo speed is unknown, defaulting to 1000 [ 169.275378][T11551] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.309779][T11551] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 169.444834][ T28] audit: type=1400 audit(2000000020.690:2037): avc: denied { watch watch_reads } for pid=11566 comm="syz.9.2534" path="/247/file1" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.784446][T11576] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2536'. [ 169.837423][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2536'. [ 170.803614][T11601] netlink: 'syz.6.2543': attribute type 10 has an invalid length. [ 170.826554][T11601] bond0: (slave dummy0): Releasing backup interface [ 170.844046][T11601] team0: Port device dummy0 added [ 170.856253][T11595] netlink: 'syz.6.2543': attribute type 10 has an invalid length. [ 170.874901][T11595] team0: Port device dummy0 removed [ 170.881353][T11595] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.153216][ T28] audit: type=1400 audit(2000000022.390:2038): avc: denied { unlink } for pid=8658 comm="syz-executor" name="bus" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 171.382164][T11618] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 171.412336][T11618] bond0: (slave dummy0): Releasing backup interface [ 171.421088][T11618] dummy0: left promiscuous mode [ 171.432209][T11618] dummy0: entered promiscuous mode [ 171.438708][T11623] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 171.449278][T11618] team0: Port device dummy0 added [ 171.463995][T11623] team0: Port device dummy0 removed [ 171.472872][T11623] dummy0: left promiscuous mode [ 171.484530][T11623] dummy0: entered promiscuous mode [ 171.613943][T11623] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 171.686763][T11629] netlink: 'syz.5.2553': attribute type 6 has an invalid length. [ 171.705255][T11629] netlink: 'syz.5.2553': attribute type 6 has an invalid length. [ 171.757808][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2553'. [ 172.401691][T11605] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2545'. [ 172.421442][T11605] .70·: renamed from hsr0 [ 172.434969][T11605] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.453168][T11605] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.492670][T11605] .70·: entered allmulticast mode [ 172.498666][T11605] hsr_slave_0: entered allmulticast mode [ 172.505385][T11605] hsr_slave_1: entered allmulticast mode [ 172.525762][T11605] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 172.652316][ T28] audit: type=1400 audit(2000000023.850:2039): avc: denied { create } for pid=11643 comm="syz.3.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 172.679600][T11652] netlink: 'syz.9.2558': attribute type 10 has an invalid length. [ 172.691104][T11652] bond0: (slave dummy0): Releasing backup interface [ 172.776249][T11648] netlink: 'syz.9.2558': attribute type 10 has an invalid length. [ 172.824007][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2559'. [ 172.830746][T11652] team0: Port device dummy0 added [ 172.833186][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2559'. [ 172.873676][T11648] team0: Port device dummy0 removed [ 172.890569][T11648] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 173.291678][ T28] audit: type=1400 audit(2000000024.530:2040): avc: denied { mount } for pid=11628 comm="syz.5.2553" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 173.314537][T11635] syz_tun: entered allmulticast mode [ 173.403516][T11628] syz_tun: left allmulticast mode [ 173.426766][T11681] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2568'. [ 173.436324][T11681] netlink: zone id is out of range [ 173.441792][T11681] netlink: zone id is out of range [ 173.457202][T11681] netlink: zone id is out of range [ 173.462599][T11681] netlink: zone id is out of range [ 173.468427][T11681] netlink: zone id is out of range [ 173.473995][T11681] netlink: zone id is out of range [ 173.479321][T11681] netlink: zone id is out of range [ 173.487016][T11681] netlink: zone id is out of range [ 173.492263][T11681] netlink: zone id is out of range [ 174.071489][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2574'. [ 174.081194][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2574'. [ 174.582078][T11760] 9p: Bad value for 'rfdno' [ 174.613486][T11755] netlink: 'syz.9.2597': attribute type 10 has an invalid length. [ 174.663506][T11755] bond0: (slave dummy0): Releasing backup interface [ 174.671841][T11765] netlink: 'syz.9.2597': attribute type 10 has an invalid length. [ 174.683262][T11755] team0: Port device dummy0 added [ 174.723533][T11765] team0: Port device dummy0 removed [ 174.764572][T11765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.893811][ T28] audit: type=1400 audit(2000000026.130:2041): avc: denied { write } for pid=11788 comm="syz.3.2608" path="socket:[33903]" dev="sockfs" ino=33903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.943608][T11791] netlink: 'syz.9.2609': attribute type 5 has an invalid length. [ 174.973225][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2609'. [ 174.976797][T11793] futex_wake_op: syz.3.2610 tries to shift op by 32; fix this program [ 174.995486][T11791] ip6erspan0: entered promiscuous mode [ 175.197420][T11801] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2616'. [ 175.241945][T11801] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2616'. [ 175.307578][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'. [ 175.364535][ T28] audit: type=1326 audit(2000000026.600:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.3.2623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f551cb7bf79 code=0x0 [ 175.444798][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2612'. [ 175.469379][T11837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11837 comm=syz.3.2623 [ 176.039551][ T28] audit: type=1326 audit(2000000027.270:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.073448][ T28] audit: type=1326 audit(2000000027.270:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.083665][ T4919] IPVS: starting estimator thread 0... [ 176.097941][ T28] audit: type=1326 audit(2000000027.270:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.132286][ T28] audit: type=1326 audit(2000000027.270:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.174408][ T28] audit: type=1326 audit(2000000027.280:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.208851][ T28] audit: type=1326 audit(2000000027.280:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.234129][ T28] audit: type=1326 audit(2000000027.280:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.234266][T11851] IPVS: using max 2688 ests per chain, 134400 per kthread [ 176.266865][ T28] audit: type=1326 audit(2000000027.280:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 176.531937][T11874] netlink: 'syz.9.2644': attribute type 10 has an invalid length. [ 176.547207][T11874] bond0: (slave dummy0): Releasing backup interface [ 176.562209][T11874] team0: Port device dummy0 added [ 176.569844][T11874] netlink: 'syz.9.2644': attribute type 10 has an invalid length. [ 176.588877][T11874] team0: Port device dummy0 removed [ 176.600964][T11874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 177.570366][T11898] netlink: 'syz.9.2649': attribute type 6 has an invalid length. [ 177.579172][T11898] netlink: 'syz.9.2649': attribute type 6 has an invalid length. [ 178.443416][T11898] syz_tun: entered allmulticast mode [ 178.451476][T11896] syz_tun: left allmulticast mode [ 178.470825][T11923] __nla_validate_parse: 8 callbacks suppressed [ 178.470845][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 178.486529][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 178.541155][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2675'. [ 178.598040][T11933] netlink: 'syz.3.2665': attribute type 10 has an invalid length. [ 178.643868][T11933] bond0: (slave dummy0): Releasing backup interface [ 178.654350][T11933] team0: Port device dummy0 added [ 178.660320][T11938] netlink: 'syz.3.2665': attribute type 10 has an invalid length. [ 178.671206][T11938] team0: Port device dummy0 removed [ 178.679212][T11938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.862036][T11945] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2669'. [ 178.914878][T11951] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2669'. [ 179.001453][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2671'. [ 179.096497][T11946] lo speed is unknown, defaulting to 1000 [ 179.260831][T11946] chnl_net:caif_netlink_parms(): no params data found [ 179.332522][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.339919][T11946] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.348665][T11946] bridge_slave_0: entered allmulticast mode [ 179.356392][T11946] bridge_slave_0: entered promiscuous mode [ 179.364114][T11946] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.371458][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.404300][T11946] bridge_slave_1: entered allmulticast mode [ 179.411086][T11946] bridge_slave_1: entered promiscuous mode [ 179.460430][T11946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.476197][ T41] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.491118][ T41] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.786517][T11946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.825212][T11946] team0: Port device team_slave_0 added [ 179.835951][T11946] team0: Port device team_slave_1 added [ 179.844970][ T41] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.855567][ T41] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.891079][T11946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.903641][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.931602][T11946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.944043][ T41] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.953888][ T41] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.965202][T11946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.972468][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.999990][T11946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.017661][ T41] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.028672][ T41] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.056292][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2678'. [ 180.089387][T11987] netlink: 'syz.3.2679': attribute type 13 has an invalid length. [ 180.148827][T11946] hsr_slave_0: entered promiscuous mode [ 180.155980][T11946] hsr_slave_1: entered promiscuous mode [ 180.169013][T11946] debugfs: 'hsr0' already exists in 'hsr' [ 180.199742][T11946] Cannot create hsr debugfs directory [ 180.316617][T12014] netlink: 'syz.5.2687': attribute type 10 has an invalid length. [ 180.400787][T12017] netlink: 'syz.5.2687': attribute type 10 has an invalid length. [ 180.575653][T12014] bond0: (slave dummy0): Releasing backup interface [ 180.590648][T12014] dummy0: left promiscuous mode [ 180.636915][T12014] dummy0: left allmulticast mode [ 180.683477][T12014] team0: Port device dummy0 added [ 180.769981][T12017] team0: Port device dummy0 removed [ 180.789588][T12017] dummy0: entered promiscuous mode [ 180.798897][T12017] dummy0: entered allmulticast mode [ 180.805824][T12017] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.969567][T12001] xt_socket: unknown flags 0x58 [ 181.235365][ T41] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 181.254154][ T41] dummy0: left promiscuous mode [ 181.260064][ T41] bond0 (unregistering): Released all slaves [ 181.268047][ T41] bond1 (unregistering): Released all slaves [ 181.313666][T12062] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2698'. [ 181.330687][T12062] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2698'. [ 181.347708][ T41] tipc: Left network mode [ 181.389033][ T41] hsr_slave_0: left promiscuous mode [ 181.406230][ T41] hsr_slave_1: left promiscuous mode [ 181.431166][ T41] veth1_macvtap: left promiscuous mode [ 181.441094][ T41] veth0_macvtap: left promiscuous mode [ 181.447838][ T41] veth1_vlan: left promiscuous mode [ 181.453645][ T41] veth0_vlan: left promiscuous mode [ 182.078255][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 182.078270][ T28] audit: type=1400 audit(2000000033.320:2052): avc: denied { read } for pid=12092 comm="syz.3.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.105252][T12095] netlink: 'syz.5.2705': attribute type 10 has an invalid length. [ 182.131898][T12095] bond0: (slave dummy0): Releasing backup interface [ 182.141271][T12095] dummy0: left promiscuous mode [ 182.149564][T12095] dummy0: left allmulticast mode [ 182.156174][T12100] netlink: 'syz.5.2705': attribute type 10 has an invalid length. [ 182.167705][T12095] team0: Port device dummy0 added [ 182.178528][T12100] team0: Port device dummy0 removed [ 182.188339][T12100] dummy0: entered promiscuous mode [ 182.196050][T12100] dummy0: entered allmulticast mode [ 182.201914][T12100] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.243770][T12109] lo speed is unknown, defaulting to 1000 [ 182.349342][T11946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.401191][T11946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.450394][T11946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.475346][T11946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.585828][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.611251][T11946] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.631594][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.638785][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.674686][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.682186][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.797232][T11946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.981980][T11946] veth0_vlan: entered promiscuous mode [ 182.990657][T11946] veth1_vlan: entered promiscuous mode [ 183.025673][T11946] veth0_macvtap: entered promiscuous mode [ 183.036476][T11946] veth1_macvtap: entered promiscuous mode [ 183.059879][T11946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.077085][T11946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.090718][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.101894][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.121454][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.139600][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.231412][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 183.356656][T12209] netlink: 'syz.5.2727': attribute type 10 has an invalid length. [ 183.370158][T12209] bond0: (slave dummy0): Releasing backup interface [ 183.377516][T12209] dummy0: left promiscuous mode [ 183.382611][T12209] dummy0: left allmulticast mode [ 183.395281][T12209] team0: Port device dummy0 added [ 183.410637][T12209] netlink: 'syz.5.2727': attribute type 10 has an invalid length. [ 183.434239][T12209] team0: Port device dummy0 removed [ 183.442018][T12209] dummy0: entered promiscuous mode [ 183.449680][T12209] dummy0: entered allmulticast mode [ 183.481163][T12209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.600383][T12235] __nla_validate_parse: 6 callbacks suppressed [ 183.600460][T12235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2739'. [ 183.602758][T12233] xt_hashlimit: size too large, truncated to 1048576 [ 183.607682][T12235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2739'. [ 183.873906][T12253] netlink: 'syz.9.2747': attribute type 1 has an invalid length. [ 183.902174][T12253] bond2: (slave ip6gretap1): making interface the new active one [ 183.920404][T12253] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 184.112305][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 184.180406][T12294] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 184.181732][ T28] audit: type=1400 audit(2000000035.420:2053): avc: denied { getopt } for pid=12300 comm="syz.9.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.191630][T12294] team0: Port device dummy0 added [ 184.254431][T12294] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 184.266327][T12294] team0: Port device dummy0 removed [ 184.277846][T12294] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 184.433862][T12342] syzkaller0: entered promiscuous mode [ 184.439449][T12342] syzkaller0: entered allmulticast mode [ 184.590544][T12372] bond0: (slave dummy0): Releasing backup interface [ 184.600615][T12372] team0: Port device dummy0 added [ 184.610075][T12372] team0: Port device dummy0 removed [ 184.619215][T12372] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 184.650830][T12382] lo speed is unknown, defaulting to 1000 [ 184.975865][T12401] lo speed is unknown, defaulting to 1000 [ 185.372906][T12409] Cannot find map_set index 135 as target [ 185.459392][T12415] validate_nla: 2 callbacks suppressed [ 185.459445][T12415] netlink: 'syz.6.2807': attribute type 10 has an invalid length. [ 185.474908][T12415] bond0: (slave dummy0): Releasing backup interface [ 185.482821][T12415] team0: Port device dummy0 added [ 185.489089][T12415] netlink: 'syz.6.2807': attribute type 10 has an invalid length. [ 185.498453][T12415] team0: Port device dummy0 removed [ 185.505213][T12415] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.176194][T12449] netlink: 'syz.4.2819': attribute type 10 has an invalid length. [ 186.190614][T12449] bond0: (slave dummy0): Releasing backup interface [ 186.224880][T12449] team0: Port device dummy0 added [ 186.237442][T12465] netlink: 'syz.4.2819': attribute type 10 has an invalid length. [ 186.245942][T12463] ip6tnl0: Caught tx_queue_len zero misconfig [ 186.311534][T12465] team0: Port device dummy0 removed [ 186.335518][T12465] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.741962][T12466] Cannot find del_set index 0 as target [ 186.741964][T12463] Cannot find add_set index 2 as target [ 186.841263][T12482] lo speed is unknown, defaulting to 1000 [ 187.075736][T12501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=12501 comm=syz.3.2839 [ 187.257736][T12515] lo speed is unknown, defaulting to 1000 [ 187.624348][T12545] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2849'. [ 187.643831][T12545] unsupported nlmsg_type 40 [ 187.977853][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 187.982578][T12563] netlink: 'syz.9.2854': attribute type 2 has an invalid length. [ 187.995351][T12563] net_ratelimit: 22 callbacks suppressed [ 187.995365][T12563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.647292][T12593] netlink: 'syz.9.2865': attribute type 13 has an invalid length. [ 188.655352][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2866'. [ 188.682483][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2867'. [ 188.728571][T12599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2869'. [ 188.867235][T12609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2871'. [ 189.088278][T12593] xt_socket: unknown flags 0x58 [ 189.280764][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2878'. [ 189.303756][ T28] audit: type=1326 audit(2000000040.530:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25cc2bf79 code=0x7ffc0000 [ 189.356591][ T28] audit: type=1326 audit(2000000040.530:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd25cc2bf79 code=0x7ffc0000 [ 189.402602][ T28] audit: type=1326 audit(2000000040.530:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd25cc2bce2 code=0x7ffc0000 [ 189.470684][ T28] audit: type=1326 audit(2000000040.600:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd25cbec84e code=0x7ffc0000 [ 189.513591][ T28] audit: type=1326 audit(2000000040.600:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd25cc2bda7 code=0x7ffc0000 [ 189.547197][ T28] audit: type=1326 audit(2000000040.600:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd25cbec84e code=0x7ffc0000 [ 189.592693][T12635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=12635 comm=syz.3.2881 [ 189.604672][ T28] audit: type=1326 audit(2000000040.600:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd25cbec84e code=0x7ffc0000 [ 189.656064][T12633] netlink: 'syz.4.2880': attribute type 10 has an invalid length. [ 189.663295][ T28] audit: type=1326 audit(2000000040.600:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25cc2bf79 code=0x7ffc0000 [ 189.688329][T12633] bond0: (slave dummy0): Releasing backup interface [ 189.705995][ T28] audit: type=1326 audit(2000000040.600:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25cc2bf79 code=0x7ffc0000 [ 189.707522][T12641] netlink: 'syz.4.2880': attribute type 10 has an invalid length. [ 189.760246][ T28] audit: type=1326 audit(2000000040.630:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd25cc2bf79 code=0x7ffc0000 [ 189.794198][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'. [ 189.805089][T12633] team0: Port device dummy0 added [ 189.846554][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'. [ 189.860550][T12641] team0: Port device dummy0 removed [ 189.883525][T12641] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.981514][T12661] tipc: Enabling of bearer rejected, failed to enable media [ 190.031960][T12676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=12676 comm=syz.4.2892 [ 190.125448][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2897'. [ 190.143523][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2897'. [ 190.484647][T12713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=12713 comm=syz.5.2906 [ 190.521341][T12717] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2908'. [ 191.154992][T12738] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 191.396800][T12763] netlink: 'syz.3.2928': attribute type 10 has an invalid length. [ 191.407306][T12763] bond0: (slave dummy0): Releasing backup interface [ 191.436623][T12763] team0: Port device dummy0 added [ 191.458091][T12763] netlink: 'syz.3.2928': attribute type 10 has an invalid length. [ 191.516185][T12763] team0: Port device dummy0 removed [ 191.527048][T12763] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.539511][T12770] lo speed is unknown, defaulting to 1000 [ 192.731334][T12815] lo speed is unknown, defaulting to 1000 [ 192.889588][T12831] netlink: 'syz.3.2953': attribute type 10 has an invalid length. [ 192.900100][T12831] bond0: (slave dummy0): Releasing backup interface [ 192.920931][T12831] team0: Port device dummy0 added [ 192.942570][T12831] netlink: 'syz.3.2953': attribute type 10 has an invalid length. [ 193.078345][T12831] team0: Port device dummy0 removed [ 193.102973][T12831] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 193.680970][T12892] netlink: 'syz.3.2977': attribute type 10 has an invalid length. [ 193.697808][T12892] __nla_validate_parse: 20 callbacks suppressed [ 193.697826][T12892] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2977'. [ 193.715611][T12892] bond0: entered promiscuous mode [ 193.721903][T12892] bond_slave_0: entered promiscuous mode [ 193.738765][T12892] bond_slave_1: entered promiscuous mode [ 193.744964][T12892] dummy0: entered promiscuous mode [ 193.750654][T12892] bridge0: port 3(bond0) entered blocking state [ 193.757417][T12892] bridge0: port 3(bond0) entered disabled state [ 193.780561][T12892] bond0: entered allmulticast mode [ 193.786114][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'. [ 193.795770][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'. [ 193.798959][T12892] bond_slave_0: entered allmulticast mode [ 193.843172][T12892] bond_slave_1: entered allmulticast mode [ 193.851290][T12892] dummy0: entered allmulticast mode [ 193.864544][T12892] bridge0: port 3(bond0) entered blocking state [ 193.871317][T12892] bridge0: port 3(bond0) entered forwarding state [ 193.898537][T12895] netlink: 'syz.6.2979': attribute type 5 has an invalid length. [ 193.930312][T12914] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2984'. [ 193.940516][T12914] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2984'. [ 194.450527][T12937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2991'. [ 194.519498][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 194.519513][ T28] audit: type=1400 audit(2000000045.760:2086): avc: denied { module_load } for pid=12946 comm="syz.4.2996" path="/62/bus" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 194.519546][T12947] Invalid ELF header magic: != ELF [ 194.595928][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3000'. [ 194.607444][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 194.614641][T12956] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2999'. [ 194.631465][T12956] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2999'. [ 194.839213][T13003] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 195.185899][T13040] lo: Caught tx_queue_len zero misconfig [ 195.247720][T13042] netlink: 'syz.9.3039': attribute type 10 has an invalid length. [ 195.259422][T13042] bond0: (slave dummy0): Releasing backup interface [ 195.274018][T13042] team0: Port device dummy0 added [ 195.281372][T13042] netlink: 'syz.9.3039': attribute type 10 has an invalid length. [ 195.302990][T13042] team0: Port device dummy0 removed [ 195.313878][T13042] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.552403][T13088] netlink: 'syz.6.3058': attribute type 10 has an invalid length. [ 195.587887][T13088] bond0: (slave dummy0): Releasing backup interface [ 195.597144][T13101] netlink: 'syz.9.3061': attribute type 3 has an invalid length. [ 195.605014][T13088] team0: Port device dummy0 added [ 195.620732][T13088] team0: Port device dummy0 removed [ 195.637627][T13088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.659191][T13106] lo speed is unknown, defaulting to 1000 [ 195.715394][T13113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.761368][T13113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.795978][ T28] audit: type=1400 audit(2000000047.040:2087): avc: denied { getopt } for pid=13118 comm="syz.4.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 195.844090][T13113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.904390][T13113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.969270][ T58] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.020695][ T58] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.044610][ T58] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.061581][ T1690] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.458550][T13148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.507069][T13148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.579738][T13148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.607465][T13157] lo speed is unknown, defaulting to 1000 [ 196.644128][T13148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.844909][T10460] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.858125][T10460] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.894299][ T1690] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.921448][ T1690] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.978068][T13193] IPv6: sit1: Disabled Multicast RS [ 196.985405][T13193] sit1: entered allmulticast mode [ 197.019892][T13157] lo speed is unknown, defaulting to 1000 [ 197.484188][T13241] lo speed is unknown, defaulting to 1000 [ 199.040632][T13340] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 199.131526][T13344] validate_nla: 1 callbacks suppressed [ 199.131540][T13344] netlink: 'syz.6.3150': attribute type 13 has an invalid length. [ 199.212452][T13350] lo speed is unknown, defaulting to 1000 [ 199.244164][T13355] lo speed is unknown, defaulting to 1000 [ 199.293853][T13344] gretap0: refused to change device tx_queue_len [ 199.387170][T13344] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.538070][ T28] audit: type=1400 audit(2000000050.760:2088): avc: denied { getopt } for pid=13369 comm="syz.4.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.605502][T13381] __nla_validate_parse: 29 callbacks suppressed [ 199.605518][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3164'. [ 199.684741][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3166'. [ 199.709418][T13392] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3167'. [ 199.740116][T13399] netlink: 'syz.9.3170': attribute type 39 has an invalid length. [ 199.886235][ T28] audit: type=1400 audit(2000000051.130:2089): avc: denied { create } for pid=13411 comm="syz.3.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.943397][T13417] veth0: Caught tx_queue_len zero misconfig [ 200.043002][ T28] audit: type=1400 audit(2000000051.280:2090): avc: denied { bind } for pid=13421 comm="syz.9.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.102136][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3181'. [ 200.234829][T13432] lo speed is unknown, defaulting to 1000 [ 200.315449][T13441] can: request_module (can-proto-0) failed. [ 200.519073][T13441] wireguard0: entered promiscuous mode [ 200.530913][T13441] wireguard0: entered allmulticast mode [ 200.957854][T13477] lo speed is unknown, defaulting to 1000 [ 200.974424][T13502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.980229][T13491] batadv_slave_0: entered promiscuous mode [ 200.990485][T13491] batadv_slave_0: left promiscuous mode [ 201.124111][T13513] netlink: 'syz.9.3207': attribute type 7 has an invalid length. [ 201.136958][T13461] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.137038][T13513] netlink: 'syz.9.3207': attribute type 7 has an invalid length. [ 201.146601][T13461] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.179504][T13461] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.194300][T13477] lo speed is unknown, defaulting to 1000 [ 201.205164][T13461] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.218778][T13509] lo speed is unknown, defaulting to 1000 [ 201.223593][T13461] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.233366][T13461] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.245588][T13461] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.302448][T13519] netlink: 'syz.5.3210': attribute type 10 has an invalid length. [ 201.311144][T13519] bond0: (slave dummy0): Releasing backup interface [ 201.318454][T13519] dummy0: left promiscuous mode [ 201.328112][T13519] dummy0: left allmulticast mode [ 201.337647][T13519] team0: Port device dummy0 added [ 201.346155][T13519] netlink: 'syz.5.3210': attribute type 10 has an invalid length. [ 201.351516][T13453] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.375812][T13519] team0: Port device dummy0 removed [ 201.386389][T13519] dummy0: entered promiscuous mode [ 201.391943][T13519] dummy0: entered allmulticast mode [ 201.399861][T13519] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.509991][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 201.651499][T13551] bridge0: port 3(bond0) entered disabled state [ 201.657960][T13551] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.665263][T13551] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.677063][ T28] audit: type=1326 audit(2000000052.890:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 201.706378][ T28] audit: type=1326 audit(2000000052.890:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 201.744624][ T28] audit: type=1326 audit(2000000052.940:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 201.770035][ T28] audit: type=1326 audit(2000000052.940:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 201.797088][ T28] audit: type=1326 audit(2000000052.940:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 201.822027][ T28] audit: type=1326 audit(2000000052.940:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 201.846881][ T28] audit: type=1326 audit(2000000052.940:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13558 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 201.885954][T13551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.914644][T13551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.956366][ T58] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.981427][ T58] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.994385][ T58] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.023826][ T58] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.065112][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3238'. [ 202.097934][T13603] cgroup: Invalid name [ 202.162252][T13617] sctp: [Deprecated]: syz.9.3239 (pid 13617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.162252][T13617] Use struct sctp_sack_info instead [ 202.196823][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3248'. [ 203.155792][T13675] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3265'. [ 203.227103][T13675] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3265'. [ 203.258348][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3266'. [ 203.263287][T13679] bond4: option resend_igmp: invalid value (65068) [ 203.274181][T13679] bond4: option resend_igmp: allowed values 0 - 255 [ 203.284048][T13679] bond4 (unregistering): Released all slaves [ 203.553713][T13720] syz_tun: entered allmulticast mode [ 203.559465][T13718] syz_tun: left allmulticast mode [ 203.940952][T13751] lo speed is unknown, defaulting to 1000 [ 204.152704][T13770] netlink: 'syz.6.3304': attribute type 10 has an invalid length. [ 204.164319][T13770] bond0: (slave dummy0): Releasing backup interface [ 204.181545][T13770] team0: Port device dummy0 added [ 204.200434][T13770] netlink: 'syz.6.3304': attribute type 10 has an invalid length. [ 204.229691][T13770] team0: Port device dummy0 removed [ 204.236675][T13770] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.266958][T13785] syz_tun: entered allmulticast mode [ 204.272931][T13783] syz_tun: left allmulticast mode [ 204.401513][T13805] netlink: zone id is out of range [ 204.406899][T13805] netlink: zone id is out of range [ 204.412459][T13805] netlink: zone id is out of range [ 204.417787][T13805] netlink: zone id is out of range [ 204.424272][T13805] netlink: zone id is out of range [ 204.431209][T13805] netlink: zone id is out of range [ 204.436723][T13805] netlink: zone id is out of range [ 204.443651][T13805] netlink: zone id is out of range [ 204.449273][T13805] netlink: zone id is out of range [ 204.454996][T13805] netlink: zone id is out of range [ 204.560358][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 204.560472][ T28] audit: type=1400 audit(2000000055.800:2127): avc: denied { mounton } for pid=13822 comm="syz.6.3326" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.634988][ T28] audit: type=1400 audit(2000000055.880:2128): avc: denied { connect } for pid=13831 comm="syz.6.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.675074][T13836] __nla_validate_parse: 9 callbacks suppressed [ 204.675092][T13836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3332'. [ 204.691561][T13836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3332'. [ 204.736641][T13839] netlink: 'syz.3.3333': attribute type 10 has an invalid length. [ 204.745480][T13839] bond0: (slave dummy0): Releasing backup interface [ 204.752815][T13839] dummy0: left promiscuous mode [ 204.758537][T13839] dummy0: left allmulticast mode [ 204.764740][T13839] team0: Port device dummy0 added [ 204.772580][T13839] netlink: 'syz.3.3333': attribute type 10 has an invalid length. [ 204.781881][T13839] team0: Port device dummy0 removed [ 204.788172][T13839] dummy0: entered promiscuous mode [ 204.793475][T13839] dummy0: entered allmulticast mode [ 204.799367][T13839] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.831950][T13844] xt_CT: No such helper "snmp_trap" [ 205.080682][ T28] audit: type=1400 audit(2000000056.320:2129): avc: denied { create } for pid=13856 comm="syz.4.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 205.175622][T13875] Cannot find set identified by id 0 to match [ 205.300849][ T28] audit: type=1400 audit(2000000056.540:2130): avc: denied { create } for pid=13888 comm="syz.3.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 205.355347][ T28] audit: type=1400 audit(2000000056.570:2131): avc: denied { write } for pid=13890 comm="syz.9.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 205.554360][T13916] netlink: 'syz.6.3360': attribute type 10 has an invalid length. [ 205.578313][T13916] bond0: (slave dummy0): Releasing backup interface [ 205.578944][T13927] GUP no longer grows the stack in syz.5.3357 (13927): 200000006000-200000008000 (200000004000) [ 205.596508][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.5.3357 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.596542][T13927] Tainted: [W]=WARN [ 205.596550][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 205.596564][T13927] Call Trace: [ 205.596573][T13927] [ 205.596582][T13927] __dump_stack+0x1d/0x30 [ 205.596610][T13927] dump_stack_lvl+0x95/0xd0 [ 205.596692][T13927] dump_stack+0x15/0x1b [ 205.596710][T13927] fixup_user_fault+0x4fb/0x550 [ 205.596738][T13927] fault_in_user_writeable+0x5c/0xc0 [ 205.596842][T13927] futex_lock_pi+0x60b/0x7e0 [ 205.596882][T13927] ? __pfx_futex_wake_mark+0x10/0x10 [ 205.596924][T13927] do_futex+0x21f/0x380 [ 205.596953][T13927] __se_sys_futex+0x2f6/0x370 [ 205.596982][T13927] ? xfd_validate_state+0x45/0xf0 [ 205.597053][T13927] __x64_sys_futex+0x78/0x90 [ 205.597079][T13927] x64_sys_call+0x24ab/0x3020 [ 205.597103][T13927] do_syscall_64+0x12c/0x370 [ 205.597145][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.597170][T13927] RIP: 0033:0x7f83ddb9bf79 [ 205.597186][T13927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.597203][T13927] RSP: 002b:00007f83dc5d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.597279][T13927] RAX: ffffffffffffffda RBX: 00007f83dde16090 RCX: 00007f83ddb9bf79 [ 205.597340][T13927] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 205.597354][T13927] RBP: 00007f83ddc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 205.597377][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.597392][T13927] R13: 00007f83dde16128 R14: 00007f83dde16090 R15: 00007ffe252c7508 [ 205.597412][T13927] [ 205.600164][ T28] audit: type=1400 audit(2000000056.840:2132): avc: denied { write } for pid=13906 comm="syz.4.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 205.637861][T13924] SELinux: Context system_u:object_r:update_modules_exec_t:s0 is not valid (left unmapped). [ 205.641888][T13931] netlink: 'syz.6.3360': attribute type 10 has an invalid length. [ 205.834464][ T28] audit: type=1400 audit(2000000056.880:2133): avc: denied { relabelfrom } for pid=13906 comm="syz.4.3359" name="UNIX" dev="sockfs" ino=40252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 205.838043][T13916] team0: Port device dummy0 added [ 205.858261][ T28] audit: type=1400 audit(2000000056.890:2134): avc: denied { relabelto } for pid=13906 comm="syz.4.3359" name="UNIX" dev="sockfs" ino=40252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:update_modules_exec_t:s0" [ 205.894094][T13931] team0: Port device dummy0 removed [ 205.904922][T13931] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 205.924010][T13937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3361'. [ 205.950840][T13938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3361'. [ 206.024800][ T28] audit: type=1326 audit(2000000057.270:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13951 comm="syz.6.3365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7fbf0000 [ 206.189277][T13953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3366'. [ 206.201460][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3366'. [ 206.481861][T13976] netlink: 'syz.3.3373': attribute type 10 has an invalid length. [ 206.503413][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.521852][T13965] bridge_slave_1: left allmulticast mode [ 206.528710][T13965] bridge_slave_1: left promiscuous mode [ 206.535121][T13977] netlink: 'syz.3.3373': attribute type 10 has an invalid length. [ 206.543639][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.619212][T13965] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 206.632931][T13976] bond0: (slave dummy0): Releasing backup interface [ 206.645275][T13976] dummy0: left promiscuous mode [ 206.650439][T13976] dummy0: left allmulticast mode [ 206.685785][T13976] team0: Port device dummy0 added [ 206.696295][T13977] team0: Port device dummy0 removed [ 206.705401][T13977] dummy0: entered promiscuous mode [ 206.729323][T13977] dummy0: entered allmulticast mode [ 206.751081][T13977] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 206.786942][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3375'. [ 206.805225][T13983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3375'. [ 207.089439][T13998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3381'. [ 207.204497][T14007] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3383'. [ 207.286766][T14011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14011 comm=syz.5.3386 [ 207.498715][T14018] lo speed is unknown, defaulting to 1000 [ 207.659080][T14009] tipc: Enabling of bearer rejected, failed to enable media [ 208.078431][T14017] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 208.215468][T14017] bond4 (unregistering): Released all slaves [ 208.322162][T14035] bridge_slave_1: left allmulticast mode [ 208.328058][T14035] bridge_slave_1: left promiscuous mode [ 208.334825][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.346885][T14035] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 208.488478][T14049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14049 comm=syz.4.3397 [ 208.565532][T14055] netlink: 'syz.4.3399': attribute type 10 has an invalid length. [ 208.576292][T14055] bond0: (slave dummy0): Releasing backup interface [ 208.597331][T14055] team0: Port device dummy0 added [ 208.604824][T14063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14063 comm=syz.6.3401 [ 208.607966][T14055] netlink: 'syz.4.3399': attribute type 10 has an invalid length. [ 208.639732][T14065] bond3: entered promiscuous mode [ 208.647178][T14065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.661449][T14055] team0: Port device dummy0 removed [ 208.675307][T14055] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.692992][T14065] bond3: entered allmulticast mode [ 208.699089][T14071] erspan0: entered promiscuous mode [ 208.705208][T14071] erspan0: entered allmulticast mode [ 208.716536][T14065] bond3: (slave bridge1): making interface the new active one [ 208.762998][T14065] bridge1: entered promiscuous mode [ 208.768694][T14065] bridge1: entered allmulticast mode [ 208.775305][T14065] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 208.789501][ T28] audit: type=1400 audit(2000000572.024:2136): avc: denied { setattr } for pid=14064 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 209.525762][T14101] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.557175][T14101] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.637858][T14101] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.658857][T14101] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.671659][T14111] validate_nla: 1 callbacks suppressed [ 209.671697][T14111] netlink: 'syz.6.3416': attribute type 10 has an invalid length. [ 209.689643][ T28] audit: type=1400 audit(2000000572.924:2137): avc: denied { accept } for pid=14119 comm="syz.4.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.695726][T14111] bond0: (slave dummy0): Releasing backup interface [ 209.733621][T14124] netlink: 'syz.6.3416': attribute type 10 has an invalid length. [ 209.745194][T14111] team0: Port device dummy0 added [ 209.772390][T14124] team0: Port device dummy0 removed [ 209.791898][T14124] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 209.824202][T14101] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.853142][T14101] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.917379][T14101] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.929899][T14101] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.119367][T13461] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.224082][T13461] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.248451][T13461] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.270263][T13461] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.593837][T13461] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.667701][T13461] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.721743][T13461] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.730095][T13461] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.855806][T14158] /dev/loop4: Can't lookup blockdev [ 211.362099][ T8078] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 211.388214][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 211.388272][ T8078] Tainted: [W]=WARN [ 211.388279][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 211.388289][ T8078] Call Trace: [ 211.388296][ T8078] [ 211.388305][ T8078] __dump_stack+0x1d/0x30 [ 211.388328][ T8078] dump_stack_lvl+0x95/0xd0 [ 211.388388][ T8078] dump_stack+0x15/0x1b [ 211.388406][ T8078] dump_header+0x80/0x240 [ 211.388428][ T8078] oom_kill_process+0x295/0x350 [ 211.388457][ T8078] out_of_memory+0x97d/0xb80 [ 211.388500][ T8078] try_charge_memcg+0x62e/0xa10 [ 211.388568][ T8078] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 211.388593][ T8078] __swap_cache_prepare_and_add+0x386/0x530 [ 211.388682][ T8078] swap_cache_alloc_folio+0xa2/0x120 [ 211.388703][ T8078] swap_cluster_readahead+0x26e/0x3d0 [ 211.388729][ T8078] swapin_readahead+0xde/0x840 [ 211.388785][ T8078] ? __rcu_read_unlock+0x4e/0x70 [ 211.388812][ T8078] ? __perf_event_task_sched_in+0xa65/0xad0 [ 211.388839][ T8078] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 211.388859][ T8078] ? __rcu_read_unlock+0x4e/0x70 [ 211.388881][ T8078] ? swap_cache_get_folio+0x26f/0x280 [ 211.388901][ T8078] do_swap_page+0x309/0x21f0 [ 211.388922][ T8078] ? __schedule+0x850/0xd20 [ 211.388994][ T8078] ? __rcu_read_lock+0x36/0x50 [ 211.389009][ T8078] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 211.389028][ T8078] handle_mm_fault+0xb40/0x3020 [ 211.389124][ T8078] ? vma_start_read+0x1c7/0x2c0 [ 211.389182][ T8078] do_user_addr_fault+0x62f/0x1050 [ 211.389235][ T8078] exc_page_fault+0x62/0xa0 [ 211.389253][ T8078] asm_exc_page_fault+0x26/0x30 [ 211.389307][ T8078] RIP: 0033:0x7f0762f17197 [ 211.389322][ T8078] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 211.389336][ T8078] RSP: 002b:00007fff931f9c30 EFLAGS: 00010202 [ 211.389351][ T8078] RAX: 0000000000000000 RBX: 000055558def3500 RCX: 00007f0762f17197 [ 211.389362][ T8078] RDX: 00007fff931f9c70 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.389374][ T8078] RBP: 00007fff931f9cdc R08: 0000000000000000 R09: 0000000000000000 [ 211.389410][ T8078] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 211.389423][ T8078] R13: 00000000000927c0 R14: 00000000000336f3 R15: 00007fff931f9d30 [ 211.389443][ T8078] [ 211.390553][ T8078] memory: usage 265860kB, limit 307200kB, failcnt 11802 [ 211.802599][ T8078] memory+swap: usage 238916kB, limit 9007199254740988kB, failcnt 0 [ 211.833115][ T8078] kmem: usage 203696kB, limit 9007199254740988kB, failcnt 0 [ 211.854924][ T8078] Memory cgroup stats for /syz9: [ 211.855232][ T8078] cache 0 [ 211.878567][ T8078] rss 0 [ 211.986621][ T8078] shmem 0 [ 211.996980][ T8078] mapped_file 0 [ 212.003761][ T8078] dirty 0 [ 212.017273][ T8078] writeback 24576 [ 212.090494][ T8078] workingset_refault_anon 75 [ 212.124654][ T8078] workingset_refault_file 5 [ 212.141923][ T8078] swap 18329600 [ 212.154819][ T8078] swapcached 24911872 [ 212.169062][ T8078] pgpgin 245541 [ 212.183813][ T8078] pgpgout 245526 [ 212.195247][ T8078] pgfault 212987 [ 212.207666][ T8078] pgmajfault 27 [ 212.218859][ T8078] inactive_anon 28672 [ 212.233002][ T8078] active_anon 32768 [ 212.246152][ T8078] inactive_file 0 [ 212.258854][ T8078] active_file 0 [ 212.270956][ T8078] unevictable 0 [ 212.283588][ T8078] hierarchical_memory_limit 314572800 [ 212.293488][ T8078] hierarchical_memsw_limit 9223372036854771712 [ 212.299654][ T8078] total_cache 0 [ 212.303766][ T8078] total_rss 0 [ 212.307109][ T8078] total_shmem 0 [ 212.310566][ T8078] total_mapped_file 0 [ 212.314791][ T8078] total_dirty 0 [ 212.318481][ T8078] total_writeback 24576 [ 212.322976][ T8078] total_workingset_refault_anon 75 [ 212.324692][T14203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14203 comm=syz.6.3446 [ 212.328280][ T8078] total_workingset_refault_file 5 [ 212.346553][ T8078] total_swap 18329600 [ 212.350530][ T8078] total_swapcached 24911872 [ 212.355094][ T8078] total_pgpgin 245541 [ 212.359288][ T8078] total_pgpgout 245526 [ 212.368149][ T8078] total_pgfault 212989 [ 212.372413][ T8078] total_pgmajfault 27 [ 212.376544][ T8078] total_inactive_anon 28672 [ 212.381102][ T8078] total_active_anon 32768 [ 212.385545][ T8078] total_inactive_file 0 [ 212.389708][ T8078] total_active_file 0 [ 212.394570][ T8078] total_unevictable 0 [ 212.398737][ T8078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2471,pid=11405,uid=0 [ 212.414240][ T8078] Memory cgroup out of memory: Killed process 11405 (syz.9.2471) total-vm:94288kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 212.486249][T14211] __nla_validate_parse: 3 callbacks suppressed [ 212.486267][T14211] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3450'. [ 212.532209][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3453'. [ 212.547002][T14217] team4: entered promiscuous mode [ 212.552211][T14217] team4: entered allmulticast mode [ 212.559889][T14217] 8021q: adding VLAN 0 to HW filter on device team4 [ 212.790088][T14225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14225 comm=syz.6.3454 [ 213.004396][T14222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3454'. [ 213.059217][T14222] lo speed is unknown, defaulting to 1000 [ 213.168097][ T28] audit: type=1400 audit(2000000576.394:2138): avc: denied { setopt } for pid=14221 comm="syz.6.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 213.686094][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3481'. [ 213.721586][T14313] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3484'. [ 213.977308][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3489'. [ 214.013363][ T28] audit: type=1400 audit(2000000577.244:2139): avc: denied { read } for pid=14329 comm="syz.6.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.240965][T14322] lo speed is unknown, defaulting to 1000 [ 214.265414][T14358] tipc: Started in network mode [ 214.265870][T14356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14356 comm=syz.3.3494 [ 214.283381][T14358] tipc: Node identity ac14140f, cluster identity 4711 [ 214.290484][T14358] tipc: Enabled bearer , priority 10 [ 214.348936][ T58] bond0: left allmulticast mode [ 214.362156][ T58] bond_slave_0: left allmulticast mode [ 214.368676][ T58] bond_slave_1: left allmulticast mode [ 214.375077][ T58] bridge0: port 3(bond0) entered disabled state [ 214.385564][ T58] bridge_slave_1: left allmulticast mode [ 214.396545][ T58] bridge_slave_1: left promiscuous mode [ 214.405817][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.417513][ T58] bridge_slave_0: left allmulticast mode [ 214.430741][ T58] bridge_slave_0: left promiscuous mode [ 214.437419][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.475704][ T28] audit: type=1400 audit(2000000577.714:2140): avc: denied { read } for pid=14381 comm="syz.3.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 214.644949][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.653948][ T58] bond_slave_0: left promiscuous mode [ 214.660462][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.669569][ T58] bond_slave_1: left promiscuous mode [ 214.676075][ T58] bond0 (unregistering): Released all slaves [ 214.686040][T14384] veth1: Caught tx_queue_len zero misconfig [ 214.728458][ T28] audit: type=1326 audit(2000000577.964:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.764306][ T28] audit: type=1326 audit(2000000577.964:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.765177][ T58] tipc: Left network mode [ 214.790243][ T28] audit: type=1326 audit(2000000577.964:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.817046][ T28] audit: type=1326 audit(2000000577.964:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.841291][ T28] audit: type=1326 audit(2000000577.964:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.856850][T14322] chnl_net:caif_netlink_parms(): no params data found [ 214.871786][ T28] audit: type=1326 audit(2000000577.964:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.871869][T14322] ================================================================== [ 214.895702][ T28] audit: type=1326 audit(2000000577.964:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.903788][T14322] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 214.903819][T14322] [ 214.903824][T14322] write to 0xffffffff86c6bbb0 of 8 bytes by task 28 on cpu 1: [ 214.903837][T14322] data_alloc+0x310/0x390 [ 214.927552][ T28] audit: type=1326 audit(2000000577.964:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.934434][T14322] prb_reserve+0x8d7/0xae0 [ 214.936759][ T28] audit: type=1326 audit(2000000577.964:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 214.944444][T14322] vprintk_store+0x54a/0x910 [ 214.944472][T14322] vprintk_emit+0x1a4/0x600 [ 214.944486][T14322] vprintk_default+0x26/0x30 [ 214.944502][T14322] vprintk+0x1d/0x30 [ 214.944520][T14322] _printk+0x79/0xa0 [ 214.944534][T14322] kauditd_hold_skb+0x1b1/0x1c0 [ 214.944553][T14322] kauditd_send_queue+0x273/0x2c0 [ 214.944571][T14322] kauditd_thread+0x444/0x670 [ 214.944588][T14322] kthread+0x22a/0x280 [ 215.040370][T14322] ret_from_fork+0x150/0x360 [ 215.045309][T14322] ret_from_fork_asm+0x1a/0x30 [ 215.050071][T14322] [ 215.052379][T14322] read to 0xffffffff86c6bbb0 of 16 bytes by task 14322 on cpu 0: [ 215.060355][T14322] _prb_read_valid+0x1bc/0x950 [ 215.065424][T14322] prb_read_valid+0x3c/0x60 [ 215.070026][T14322] console_unlock+0x146/0x280 [ 215.074702][T14322] vprintk_emit+0x3e4/0x600 [ 215.079318][T14322] vprintk_default+0x26/0x30 [ 215.083908][T14322] vprintk+0x1d/0x30 [ 215.087809][T14322] _printk+0x79/0xa0 [ 215.091696][T14322] ipcaif_newlink+0x147/0x2a0 [ 215.096476][T14322] rtnl_newlink_create+0x1e4/0x650 [ 215.101720][T14322] rtnl_newlink+0x10a0/0x1330 [ 215.106400][T14322] rtnetlink_rcv_msg+0x64b/0x720 [ 215.111328][T14322] netlink_rcv_skb+0x123/0x220 [ 215.116080][T14322] rtnetlink_rcv+0x1c/0x30 [ 215.120479][T14322] netlink_unicast+0x5c0/0x690 [ 215.125242][T14322] netlink_sendmsg+0x5c8/0x6f0 [ 215.130172][T14322] __sys_sendto+0x470/0x4d0 [ 215.134674][T14322] __x64_sys_sendto+0x76/0x90 [ 215.139429][T14322] x64_sys_call+0x2d35/0x3020 [ 215.144102][T14322] do_syscall_64+0x12c/0x370 [ 215.148946][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.154910][T14322] [ 215.157214][T14322] Reported by Kernel Concurrency Sanitizer on: [ 215.163623][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 215.175334][T14322] Tainted: [W]=WARN [ 215.179213][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 215.189435][T14322] ================================================================== [ 215.204091][ T28] audit: type=1326 audit(2000000577.964:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14399 comm="syz.6.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8fc692bf79 code=0x7ffc0000 [ 215.298014][ T58] hsr_slave_0: left promiscuous mode [ 215.318305][ T58] hsr_slave_1: left promiscuous mode [ 215.324439][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.332066][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.366644][ T58] team0 (unregistering): Port device team_slave_1 removed [ 215.375856][ T58] team0 (unregistering): Port device team_slave_0 removed [ 215.409671][ T35] tipc: Node number set to 2886997007 [ 215.422616][T14322] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.429924][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.437676][T14322] bridge_slave_0: entered allmulticast mode [ 215.444256][T14322] bridge_slave_0: entered promiscuous mode [ 215.451000][T14322] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.458304][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.465878][T14322] bridge_slave_1: entered allmulticast mode [ 215.472309][T14322] bridge_slave_1: entered promiscuous mode [ 215.490178][T14322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.501126][T14322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.522153][T14322] team0: Port device team_slave_0 added [ 215.530079][T14322] team0: Port device team_slave_1 added [ 215.545515][T14322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.552744][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.579972][T14322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.591198][T14322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.598433][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.624981][T14322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.652805][T14322] hsr_slave_0: entered promiscuous mode [ 215.660524][T14322] hsr_slave_1: entered promiscuous mode [ 215.751240][ T58] IPVS: stop unused estimator thread 0... [ 215.935213][ T58] bond0: left allmulticast mode [ 215.940217][ T58] bond_slave_0: left allmulticast mode [ 215.946164][ T58] bond_slave_1: left allmulticast mode [ 215.951631][ T58] dummy0: left allmulticast mode [ 215.956774][ T58] bond0: left promiscuous mode [ 215.961689][ T58] bond_slave_0: left promiscuous mode [ 215.967277][ T58] bond_slave_1: left promiscuous mode [ 215.972856][ T58] dummy0: left promiscuous mode [ 215.977978][ T58] bridge0: port 3(bond0) entered disabled state [ 215.984839][ T58] bridge_slave_1: left allmulticast mode [ 215.990540][ T58] bridge_slave_1: left promiscuous mode [ 215.996218][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.004937][ T58] bridge_slave_0: left allmulticast mode [ 216.010635][ T58] bridge_slave_0: left promiscuous mode [ 216.016418][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.066161][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.075614][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.085074][ T58] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 216.093883][ T58] bond0 (unregistering): Released all slaves [ 216.101316][ T58] bond1 (unregistering): Released all slaves [ 216.109434][ T58] bond2 (unregistering): Released all slaves [ 216.117621][ T58] bond3 (unregistering): Released all slaves [ 216.137565][T14322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.146230][T14322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.155564][T14322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.164194][ T58] tipc: Disabling bearer [ 216.169535][ T58] tipc: Left network mode [ 216.169656][T14322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.186045][ T58] hsr_slave_0: left promiscuous mode [ 216.191809][ T58] hsr_slave_1: left promiscuous mode [ 216.197826][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.205717][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.250940][ T58] team0 (unregistering): Port device team_slave_1 removed [ 216.261341][ T58] team0 (unregistering): Port device team_slave_0 removed [ 216.312351][T14322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.324984][T14322] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.334567][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.341896][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.352569][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.359812][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.414799][T14322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.508197][T14322] veth0_vlan: entered promiscuous mode [ 216.515898][T14322] veth1_vlan: entered promiscuous mode [ 216.530505][T14322] veth0_macvtap: entered promiscuous mode [ 216.538121][T14322] veth1_macvtap: entered promiscuous mode [ 216.548693][T14322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.560441][T14322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.570137][ T58] IPVS: stop unused estimator thread 0... [ 216.579219][T13453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.594473][T13453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.616548][T13453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.626155][T13459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0