last executing test programs: 12m11.001883304s ago: executing program 32 (id=50): unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x80, 0x0, 0xfe, 0x4, [0x0, 0x0, 0x4, 0xffffffbb, 0x0, 0x0, 0x1]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600060000000800090001000000050002"], 0x44}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x0, 0x2f, 0x0, 0x0, 0x5}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000140)=""/224) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) r4 = getuid() quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@md0, r4, &(0x7f0000000240)) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m39.26194023s ago: executing program 33 (id=252): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)={0x490102, 0x104, 0x13}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000200)="63962e18c3af10027218a1a4f797c06bad2e9d0b4d0703d1831b0dc9a13a0cd3c07b1dc6f80a113dcee88bad7e85953951dc578f3c4e1a8299c2faa813214fae356d66f20c4c1c2046af1d5a3b894f80e07317d1b92eb18961c6cfada27b285a60b5195c79e43f0fda5600e758699af101938bb4d6100b7cf15771d5291e801f3b17d0", 0x83, 0x4081, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000000600)=""/156, 0x9c) openat$cgroup_pressure(r2, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c873, 0xffffffffffffffff, 0xffffc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20004450) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$llc(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0xfffffffffffff800, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x8e, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4001) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") syz_emit_ethernet(0xd7e, &(0x7f0000004000)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x11, 0x4, 0x0, 0x6, 0xd70, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@ssrr={0x89, 0x7, 0xd2, [@remote]}, @cipso={0x86, 0x6, 0x1}, @timestamp_prespec={0x44, 0x4, 0x2f, 0x3, 0x6}, @lsrr={0x83, 0x3, 0x98}, @noop, @ssrr={0x89, 0x1b, 0x2c, [@private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8d, 0x3, [], "4c5871995e206a4e0baa38eb4e50e5f76486028c59d09cac1dd387f1946870e50a4feceedfb6f0272979205c60e8eee76657c9eb1fe6220c4f3f5c459efcb7c5ed120751d3ce5b453435f96eb403e779aa4d5cfdc03831e3736439fa071ca9e11bc2320fd2fa042098ac8011adacde9f15d561b81b362416fea6be67585296678c91a31e2f56ff77bafa015f72"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "f388f26247e38200382bf6433d7802c5a3b19f60da817f256992b462b76f099365deaea1ba0eed1eaec72f8c9ed633ddf5c5adb125f731cffb65dc5ef437e04def920d17045d4df4bf15759c7f008bba40a1582201f2f00f4ab4dd583797c916a7cafdd713be3f8b85eec9e3cf1cc9d90cc7b60a009dc8a5622e87af46e9f528519d02d2113bad0fa90b6493c83260a2ed99b5fd194dcd414a146490e7d632fbb41024fd9a830216747d12ef25a85876077cb6bb7c12438541cf42b6fd"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5], "89fbeaa2cb62d40db260fc948f3393b7f51b9ebfd4f8087dd040febefd1d0591106097a3d55d531652481e94012bcb7edc1d9bb160d7e33fcb3af4e663f69595"}, {0x8, 0x88be, 0x0, {{0xc, 0x1, 0xfa, 0x3, 0x1, 0x0, 0x0, 0x2}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xb9, 0x2, 0x0, 0x2, 0x5, 0x8}, 0x2, {0x7, 0x7, 0x3, 0x1d, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 11m29.639036869s ago: executing program 1 (id=275): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, r3, 0x0, 0xffffffffffffff8f, 0xfffffffffffffffe}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x8b, 0x5, 0x81, 0x4, 0x0, 0x6, 0x100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x3ff, 0xfff}, 0x486, 0xfffffffffffffff7, 0xdbe, 0x7, 0xb5, 0x8, 0x5, 0x0, 0x2, 0x0, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008001}, 0x40041) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 11m29.548101612s ago: executing program 1 (id=277): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='-\x00', 0x3003, &(0x7f0000000100)={@_ha_fsid={[0xb1f]}, {0x24, 0x8, 0x7, 0x8000000000000001}}, 0xc, &(0x7f0000000140), &(0x7f0000000180)}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0xd}, 0xa865, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x1, 0x0, 0x8000000000}, 0x0, 0xffeffffffffffffd, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 11m29.452154155s ago: executing program 1 (id=280): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x7, 0x4, 0x3, 0x3, 0x1c, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x6, 0x3}]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="460609000000000014003500627269646765300000000000000000000c0016800400ee7f04000180050011"], 0x48}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 11m29.28370156s ago: executing program 1 (id=285): unshare(0x28020500) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000061000007b8af8ff00000000bfa200000000000007020000f8ffffffdfc0000008000000b70400000080000000000000df8500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000e30722875f9db989edacf6dfcd300000bc59252a201d6f2e08f447442d51735aa4d0c60f53af50d53e9700a9586ca2899c4ba57d042877fbe449ac711b251e81080000000000000060b57ef7ff605132fe6038b694"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r7 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x4}) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r10, 0x80000001, 0x4) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11m28.99809811s ago: executing program 1 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x7fe, 0x10000}, 0x28) r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x8, 0x8}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeaa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = signalfd(r2, &(0x7f0000000040)={[0x8331]}, 0x8) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r5, 0x7000000) r6 = dup(r5) preadv2(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000080)={@empty, @remote, 0x0, "516f7b1b5260aa15b4dce35d66b4db167a7d3120c3c061893d8c6786ff0f9294", 0x5, 0x2, 0x7, 0x9}, 0x3c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYRES8=r2], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x88282, 0x0) write$vga_arbiter(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:1:'], 0x14) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000000000000102940000000000000000000000000c001500bf000000090000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[@ANYBLOB="540000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03fc0300145f02002c0012800e0001006670366772657461700000001800028014000700fefffffffffffffffffffffffffffffe0800040000100000"], 0x54}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) 11m27.139648709s ago: executing program 6 (id=253): socket$kcm(0x10, 0x0, 0x4) getresuid(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xf, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x0, 0x2, 0x4, 0x6, 0x9, 0x18, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7ff}, @tail_call, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000180)='syzkaller\x00', 0x101, 0xca, &(0x7f0000001900)=""/202, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}}, 0x1c}}, 0x44004) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r4, &(0x7f0000000640)=@access={'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x5b) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r5 = socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bind$inet(r5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 11m27.1016853s ago: executing program 34 (id=309): fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/snmp6\x00') lseek(r3, 0x87, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f0000000480)={[{@test_dummy_encryption_v1}, {@init_itable_val}, {@nouid32}, {@i_version}, {@jqfmt_vfsv1}, {@nodelalloc}, {@dax}]}, 0x3, 0x483, &(0x7f0000001100)="$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") socket$unix(0x1, 0x5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x104, 0x80000002, 0xfffff7f9, 0xf9, 0x8c, "13ff775cff03000040000000ff004000", 0x200008, 0xc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25f, &(0x7f0000000800)="$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") 11m26.718610202s ago: executing program 6 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, 0xffffffffffffffff, 0x3000}, 0xc) 11m26.631389215s ago: executing program 6 (id=320): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200290000", 0x1d) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) 11m25.757452723s ago: executing program 6 (id=324): unshare(0x28020500) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000061000007b8af8ff00000000bfa200000000000007020000f8ffffffdfc0000008000000b70400000080000000000000df8500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000e30722875f9db989edacf6dfcd300000bc59252a201d6f2e08f447442d51735aa4d0c60f53af50d53e9700a9586ca2899c4ba57d042877fbe449ac711b251e81080000000000000060b57ef7ff605132fe6038b694"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r7 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pv6bR3+kU7t3J/v2TouefM5Zzb6dNz5vScOwFU1mD6Ty1if0RMJxH9yfxiWWdkhYMLz3vw50dn00cS9fprvyeRZHn585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTV7Hh49tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb0g7/TNd9/v/2TszW+++isZ+faXsSROxsvZE5dex1YZjMHG9yRZWdR3YqsrK0lH9nOy9CVOOoue2dW+RrFu+euXvjpPRH90xMMXrz8+fqXUxgHbqp5E1IGKSsQ/VFQ+Dsjf2y9/H1wrZVQCtMP9UwsTACvjv3NhbjB6GnMDux8ksXRaJ4mIzc3MNdsTEXfvjN08d2fsZmzTPBxQbP5GRDxZFP9JI/4HoicGGvFfa4r/dFxwJvua5r+6yfqXTxWLf2ifhfjvWTX+o0X8v7Uk/t/eZP2DD5Pv9DbFf+9mLwkAAAAAAAAq6/apiHi+6O//tcX1P1Gw/qcvIk5uQf2Dy45X/v2/dm8LqgEK3D8V8VLh+t9avvp3oCNL/aexHqArOXdhavJIRPw3Ig5F1670eGSVOg5/uu/LVmWD2fq//JHWfzdbC5i1417nruZzJsZnxx/1uoGI+zcinipc/5ss9v9JQf+f/j6YXmcd+569daZV2drxD2yX+tcRBwv7/4d3rUhWvz/HcGM8MJyPClZ6+sPPvmtV/2bjv/AWE8CGpP3/7tXjfyBZer+emY3XcXSus96qbLPj/+7k9cYtZ7qzvA/GZ2evjkR0J6c70tym/NGNtxkeR3k85PGSxv+hZ1af/ysa//dGxPyy/zv5o3lPce7/f/f92qo9xv9QnjT+JzbU/288MXpr4PtW9a+v/z/W6OsPZTnm/2DBF3mYdjfnF4RjZ1FRu9sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+DWkTsiaQ2tJiu1YaGIvoi4n+xuzZ1ZWb2uXNX3rs8kZY1Pv+/ln/Sb//CcZJ//v/AkuPRZcdHI2JvRHze0ds4Hjp7ZWqi7IsHAAAAAAAAAAAAAAAAAACAHaKvxf7/1G8dZbcO2HadZTcAKE1B/P9URjuA9tP/Q3WJf6gu8Q/VJf6husQ/VJf4h+oS/1Bd4h8AAAAAAB4rew/c/jmJiPkXexuPVHdW1lVqy4DtViu7AUBp3OIHqsvSH6gu7/GBZI3ynpYnrXXmaqbPPsLJAAAAAAAAAAAAAFA5B/fb/w9VZf8/VJf9/1Bd+f7/AyW3A2g/7/GBWGMnf+H+/zXPAgAAAAAAAAAAAAC20szctYvjU1OTVyXe2BnNaGeiXq9fT38Kdkp7/uWJfCn8TmnPskS+1299Z5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//+Ekkyg==") quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x4}) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r10, 0x80000001, 0x4) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11m25.194101921s ago: executing program 6 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) 11m24.501520894s ago: executing program 35 (id=328): socket$kcm(0x10, 0x0, 0x4) getresuid(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) clock_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}}, 0x1c}}, 0x44004) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r4, &(0x7f0000000640)=@access={'system_u:object_r:systemd_logind_sessions_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x5b) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r5 = socket(0x2, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bind$inet(r5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 11m24.232320112s ago: executing program 6 (id=330): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c20000028100118b88478e9afb4f0eb54b48bbdcec976daef8b014a72d97609fe53d60233d1cadc42d13a3829000000000000000"], 0x0) 11m24.207202283s ago: executing program 36 (id=330): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c20000028100118b88478e9afb4f0eb54b48bbdcec976daef8b014a72d97609fe53d60233d1cadc42d13a3829000000000000000"], 0x0) 11m21.323514446s ago: executing program 1 (id=346): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x240008c4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x400c8c0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1081}, 0x4000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x8000001e, 0x0, 0x14, "1b10b9ad00"}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m21.098894163s ago: executing program 37 (id=346): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x240008c4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x400c8c0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1081}, 0x4000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x8000001e, 0x0, 0x14, "1b10b9ad00"}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m21.006837535s ago: executing program 7 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea0800", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) 11m20.820728882s ago: executing program 7 (id=350): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x60}, {r0, 0x10}], 0x2, 0x0, 0x0, 0x0) 11m19.907396581s ago: executing program 7 (id=352): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x4, 0x4) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet(0x2, 0xa, 0xfffff7fd) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 11m19.774521315s ago: executing program 7 (id=353): unshare(0x28020500) close(0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000061000007b8af8ff00000000bfa200000000000007020000f8ffffffdfc0000008000000b70400000080000000000000df8500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000e30722875f9db989edacf6dfcd300000bc59252a201d6f2e08f447442d51735aa4d0c60f53af50d53e9700a9586ca2899c4ba57d042877fbe449ac711b251e81080000000000000060b57ef7ff605132fe6038b694"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) r7 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f0000000bc0)="$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") quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x4}) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x20000000002, &(0x7f0000000040)) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11m19.539553253s ago: executing program 7 (id=354): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x88800) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x10, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="882055000000", 0xfffffffffffffffd, 0x3, 0x6, 0x2, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800954a7200000306030000000000000000000500000305000100070000000500010007000000050001000700000005000100070000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) dup2(r3, r2) connect$inet(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r5) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000140)={[{@test_dummy_encryption}, {@data_journal}]}, 0xff, 0x52c, &(0x7f0000000640)="$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") sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 11m19.220942683s ago: executing program 7 (id=357): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xd035, 0x6b4043) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x5c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40140}, 0x40000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x1) perf_event_open(&(0x7f0000000380)={0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfa, 0x3ff}, 0x180, 0xc8, 0x0, 0x0, 0x4000000000, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x8e0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1e, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7}}, 0x40) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000940)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x8, 0x6, 0x8003, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x54008, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mblk_io_submit}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") 11m19.183448704s ago: executing program 38 (id=357): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xd035, 0x6b4043) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x1, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x5c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40140}, 0x40000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1}, 0x1) perf_event_open(&(0x7f0000000380)={0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfa, 0x3ff}, 0x180, 0xc8, 0x0, 0x0, 0x4000000000, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x8e0, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x1e, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7}}, 0x40) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000940)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x8, 0x6, 0x8003, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x54008, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mblk_io_submit}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") 9m42.143836044s ago: executing program 3 (id=1245): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) getpgid(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) close(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@empty, 0x0, 0xb, 0x0, 0x0, 0x2, 0x20, 0x20, 0x8}, {0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2e0}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@local, 0x10000000, 0x1, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff}, {{@in6=@private2, 0x0, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1, 0x3}]}]}, 0x13c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40801, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d000000c6c8f9aa0001034ae08a12745da1d6e4502ac6490df2a45b310c7bec9321def0fc77e044986dc33df14b9d5fe6aeb3a662beca46e1978a966e386d09a7e4fca5973c333e0bccfb7de8748ea7e5b64c2179d7c27ad5da373d609ff505c77bc9e6e26b9995e2c0e7", @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf250c0000000800060000feffff"], 0x1c}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 9m41.971919669s ago: executing program 3 (id=1246): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'wlan0\x00', 0x2}) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1, 0x2, 0xb8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x80000001}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) ioctl$LOOP_CLR_FD(r5, 0x4c01) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x2}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}}}]}, 0x1a0}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x57) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1b4240537a9a1561, 0x0, 0x1, 0x5, {{0x6, 0x4, 0x0, 0x1c, 0x18, 0x64, 0x0, 0x1, 0x6, 0x0, @broadcast, @private=0xa010100, {[@end]}}}}}) 9m40.894213994s ago: executing program 3 (id=1262): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) 9m40.860368565s ago: executing program 3 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c5}, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) 9m40.691095561s ago: executing program 3 (id=1271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 9m40.643371362s ago: executing program 3 (id=1273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000024000180060005004e230000060001000200051b08000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 9m25.527375936s ago: executing program 39 (id=1273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000024000180060005004e230000060001000200051b08000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 7m16.396647024s ago: executing program 4 (id=2606): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m16.251495909s ago: executing program 4 (id=2613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 7m16.251061939s ago: executing program 4 (id=2614): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) sendmmsg(0xffffffffffffffff, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x2000000, 0x0) socket$kcm(0x2b, 0x1, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x828, 0x6, 0x0, 0x0, 0x8b, 0x800000, 0x100, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xda53, 0x0, 0x3, 0xffffdf00, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0x2, 0x4, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x1fffffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x4, 0x0, &(0x7f00000002c0)="b8000005", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) 7m16.003662897s ago: executing program 4 (id=2621): ioprio_set$uid(0x3, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[0x0]) 7m15.879877331s ago: executing program 4 (id=2622): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 7m15.860892382s ago: executing program 4 (id=2623): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xb}, 0x114244, 0x0, 0xafe8, 0x5, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000fc0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004080}, 0x0) 6m59.629157932s ago: executing program 40 (id=2623): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xb}, 0x114244, 0x0, 0xafe8, 0x5, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000fc0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004080}, 0x0) 17.611515645s ago: executing program 5 (id=6089): set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') renameat2(r0, &(0x7f0000000300)='./cgroup\x00', r0, &(0x7f00000002c0)='./cgroup\x00', 0x5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x400, 0x1c, 0xfffffff9, 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0xfffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) alarm(0x7) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x3e, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xcb, 0x2}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timer_create(0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000100)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000000)={0xdfe, 0x4, 0x4, 0xa}) 17.322213114s ago: executing program 5 (id=6092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000000)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000400)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write(r1, &(0x7f0000000300)="898400000000", 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r4 = syz_clone(0x8011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x2, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xbe7, 0x6, 0x4, 0xfff, 0x5]}, &(0x7f0000000380)=0x78) r6 = socket(0xa, 0x3, 0xff) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000200000000000086dd6c37a07e00080001000000000000003f8d00000000000000fe8000000000000000000000000000aaff"], 0x0) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010020) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000080)=0x6222, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030b00000000000000000000000100090000000000030006006c0000000200000000100000000000000000000002000100000000000002fb0b00000000030005000000000002"], 0x58}, 0x1, 0x7}, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) 16.254791687s ago: executing program 5 (id=6100): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000002}, 0x2000400c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x0, 0x60004, 0xffffffff, 0xffffffff, 0x1, 0xfffffffc, 0x0, 0x0, 0x3}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x200000000000000, 0x0, 0x28000000}, 0x20040084) recvmmsg(r6, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9c0}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001080)=""/244, 0xf4}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2}}], 0x4, 0x40, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.944985783s ago: executing program 8 (id=6137): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 4) 5.944795753s ago: executing program 8 (id=6138): r0 = socket(0x2, 0x80805, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r5, 0x18, 0x30}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x53, 0x1d}, {0x0, 0xd42, 0x0, 0x2da}, 0x4214, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x3}, {{@in6=@private1, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}]}]}, 0x1fc}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r6, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) 5.38747176s ago: executing program 8 (id=6147): ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0xa) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4) sendmmsg$inet6(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000380)="42e7809dd81c379cb912f2f1c60e9abdd3572e5661149a09fccfdce0f5ef78eddec13e9bed4d940840084cccf2767876d6db5f9e9482c78e09787b42fde6fbcfce7b5da73d4864a81429d5c716f72bc44fecdc5e059cf2f14cf59447cbd3d2189ecc7de01234b72f419fedbf4b6d0146160e4675b67219adf9136a035fe88cf78dd29223e0651b3a73ebc35b0ed6c981b8eb80e5d11077160fe1fc1aea57bb68684be53d0c910240371703978d7a65f12a987a1cd0a7b0b489a990c324265388c41dc93fddff312ed033f796a211c0280d2ff9a2e7509ce8b3b60df999a490cc434c08d3", 0xe4}, {&(0x7f0000000480)="35475b640c52c3310d5711f798073f55fdc1daca9ec0187da378d61291e88ee139d0cf791d08e04dc2367c4cfd2f124a2bcc93069c69c67984fbf0ab9accf44e32a5de7a79b0cb00f8f7df951475d5f7c01bb28d3a728bde84b393146ff4a8015a318c77084b082f1b402897303e2712c86cc8e76ea64c4d549f579b4e53aafa1914083218a93f63044d2a3de15b420a6a4eca402c38d00f5f", 0x99}, {&(0x7f0000002380)="df9f4755ed8a9e3b2739aa3bd83202eb19c1509bccc6abd3f4d875f893d5fdf4cbcdda0bb09df2d6f496f5ee149f8534312c0d743b9e785f6bc4772d148bfb72b8b4c55d2f9431a50713e52b90bd2bd25865a113b8d2bfce4608755af2372336c283a540afa53fb84f85ade2dc4bfe599ffd5ceedf929d74a09221bc532671749b58dd8bed1b4acdd686eddb2596f1cf9d2e0f9dbebf054532d230f59b9c5d1ae611112b4ee1002c9c5d6ccfabfbcfae9010e35cb5a65fb61548a494ea30b4fb68b6c63606b09952730c56dc384161a0aaa5696ae604e4f57049d8ec7102c0c6704d75c3ccdb5fbaad7d410a20abcdaefd63edb3f6e9f1e82808212c42c58cc52b2fef4a4a729a9732a2b047e53ab623866267d65e6506e0380e357a0a5390a9296226f9b0f59b73e9eb03394880b25bf967c0cb57a5313aa1c7680e8ce01d654666e43cb5da8b37abd9c5be4423d271292acd735642fe3405f09fdcb862504eb3be81db87a3961bdd1dd1f612ddb70807d3fabb5090a15aa2a740164a27303b6630ff9c26f69635021af712e7eca08e444209911596ab0ef1fdda76a0435f31ac9c5f3e6df2b69ce843935903cb96000237aef9de04eefac541ed3912f703a32dfba918a4100b6b08d97ab2ecfc274d03a70cc4f8e17a37128c8afa550f53f2883986a23bb67d02fd50969a23ed4fbef58297a09060e1fc2374f7c5051157687bf2b12059d5646a98f3081924215aa13b0026b066fd00d509be8134fa794f25182e64c208ebdd0e2c403d50ba32ebc1e75074ee6579dc0a19353958d9a01c01aea462dae060d849e3e02a6c5bb71effc088714f8b7f1bb7707be92514c914b2107180bbfef47d266eaf2c770fba4d6a10045a4ea233768bf3521565cb0fd282d6e2deaa59426696f0989555b5d05c626873a43b3a9e5602f979480b9ee35e59420aa03826463cb221d6296a33cb16b8974db017112cc1fda45e9e869026025983a7775d9e1ebd3e7f7323ca841051a2a08aea89ab4185abfd2a96ced85d70c2a5e033f9df42ae51beff68b09147dff02098d6456140fbb0d52e463237800835d006ade682918c7e599043a2c1d5c0e7795e4f66c6b98b79b33d87f34ad91dc25702372d60ff4f74e1609aba755c19f9cb81984ac6ece04d58042dae537bf85b0e5d1441c9c5338a875a405a03a74e19649c5759c4d1480051050d6d32e77d4a2eb0d3bcc125164d5a20c2ce60cbec9a147847de2004d5b634a32a36cba06477cd36fd0b433ea66077f78c5ee57e6bccea96ad36508a7d085d58a62235d235a3c94db05916c6d601dbbf388c2e71548884107df77a247b41a3c0b3e1cd841aca77192938bba7489e1a7554b064472f092c7e63c7ee407860e5c0896ef2b54bb7d2a0261080417687c6f53d7dbb79ecb505af72488f8a50a04e997508f4f0788b8d80d6433718dde4f4698749fdcd810a6d7e008ceb708b52bf47c9559ac478eee22377f377d12494532eef74ef7226216a63c7300edb3762006b5af0cac94ea2325124d40044eede9eee9f519ca23aeedea6fea4a1abc157fe7e20456b5b10ca0b16bcb12e283ce0f35a1f318f8c88b84a55613ab9c2fb1f0cdb55bd47aff105c9783a4fcafe1202f771f4e568b6614cc7422563852048c095b04f66fe027f19704d718d9629d361e888c501da54d2f62b3a9c3bd8317d467dc4e44d56432365f904cb7bebf84ae9f0cf37c39c1bef2aced167cb6b31323bf130db20c036ca05ec0a28bc0a55d668f87b153f3e4e17b42b76db61aed64370010e01dc601ad32ebfa6e7988fcc3d71777703a9d40aa910d93d97e770f816814292ef176fff2604b1e5db9eaba8ae0ac6e3114e65ec671978ccac2234fd7d22bee9fcc7d26035cc029d5ca673bc2cf561691ceb37a9b96f3a09978515fcf4c30ce420d6d1a4d80af58c8c80352e2a1be74221e11b2b4289285a7c836ab9a2ef1e7b4e6a0bac4fdfbb8282c1390936dd7fa695cb1961a9bc8662c3003baa4c6a07251f4860611270a9db83ee28b8abd01ad60a520d4d1be3b6c8a7355ede2a2567f5f5f7e8579e00a6fff75e61ef7fd7674093451842de38dd40e3ec7fc1ae7f8d1b0503640192bc61cbddab0a1192a9327e8ec19e2b03b59c99407946885d33c19e9e4b1273f1e102dcd0f22885d81f2f3a9b304db4a2573e3c9d62bd0a0de1322b59d12eeed420290375528fb99731f79743535f9e09538215accade230894cb50510403b1a439ba9fdc2c63ab854318fc66b740be153a7b74e5ec31c35d7a8ed77210dcaf3446ef114cce9ef2e1e82c932d1ea453ae4589f51877f1c080e962b097bca6941925ac9f4df4548e4ef51e0df03edc32ceba4382b2909c706b3749da965f946803db0eaa36c4442a89ea59a676bbeb9b50f116a880249aea0fa94f3b1b76ae1e1727f97279d55d9bbf1e80862784837110e9560739b0205d0f8bb3bcfddbf50947a7b01790aeea92c3a6f081006eb9c54d5afe862e62cb52d1285a81e48dc31d4574030e27d7a21ae945bb86a0789fe46a1d1c9e17a823a5cb56e41487f17370199b5c0ab7885b08f4feb16aeef6ec1d18a2f290cfe084c2f48861d2b7038a29a4f55eabd1b71fb48c0110e08f8f531b66cfb096008b03a71b875119d8c7d114ecd4e0630d75b96f35d4f29281461a85c00e8487f9bdc7b573247a1cab9d1dca57602b6593c31fa0cb47cc74fefda80dae91f159c182f2d1b10dde1ad4c29e11fed057a029254dc966cda165c5ce094dd73ee5a5304bc139ed95cf7a7c4860c3a6457da228b652c405f7eb711d37a1f0a73f8276f5e38fff8add9acef13231d350cb6bd8c973ba573a8e324987173d9ec5ce097317cc5936fdcacb10c961d0cb36f7358175571a7623ecfe64d4f1dade01fb3caa4386b5cd40503bb17d89cf3ee5101d13fd7998a37d3296785a9f3452a8f6dc40f6374a0a878119b76d52f77fd9796ecf3cd9f2166b2706f093562f8edf418f9f24173f7ce84ea0ae2ca20345fc68ab80882910dcc64bc1ec49257c746b2a117dc6cb7fc65068ff4b64b034efa6e911fad988765fe66bbbbd6f0a3c271eda75d72f72e7283496971d7902ae4d476830ce85252e7715c90945d21580b44c7a453d8d5ae9aa43f5a51375a27e3d94c74f3174cf3da2211a28fd98209b0e092f3b96191977d3ae68a7832dc3cbbb1554dfd06b4a72ddf4a8ea8a0ccd64ff8d944d1d6966e3258e8369c9a91b7f417ad4793f385cf6e221567041ccb4fc21bc4c9fb6a60f412a2072271adb820ff106fa6eb67fa12175ebc0d7623501fadf273b1857c41dd6a72e30ef93544fa97cf9590e6ceee1c90db077031a25261845d9d8009d31072cc33ec6a9eb7d56737502e250b776c73228c2a4d44026cb866d631807c329accedc32ab6048debc96960fc835c90622d374c501d2ed4251cd4d92987ae1db5e4a6be8483e72c1fa34e11d7c85468f4e277429457727adcc1d141cf7fe315a88cc4afe66e2e10ca4296c892cde53b246ca1f7e3688265990283e4c184e49ef3c84b1c69c36d39ab5ebf26e3495cf5a39b9421a7adca680d6d0794c07ada1525d1c23ead3c3bf4cabde63cfe5347643b62f4af22fe82f97b269577f5f79a98bf995e477f0d0ed8a2c78a3673aefc76cf9d346210ce344517c73b731887164990fa1ac52858fc89566d54bab9213e1ca7e751036617a76ab91ed6f4a03cd25384718c7d87c88cd7bf6f24e3c0f5975f44b7d4fb03d2b7edd583575713f8c933d2c947279fd5552caf50a6b7e802b043cc14f4c0fc823bae7120f3f8cec092b00512c5af6dfb83f4039d0a7c70067b6bacd75b693ef38d1c9f0881323ac1baa5ececb0fc2c9f3a3c9b111197dc878875a6a649395c0532b07881895979aaaa51e320d1b877e81ecd78e80ce275e1228d1669b6b1c815aa6ded7dd0acce40cc4414161eed9b29856a82e2317e27dd632c680d531edf41896d5cc602add1523c1d12c61733f98435ed115f0fd1fcf91ed79c89cb7fea0ed680e253b82d3a2d009e1e3cc82aec98f11081c38890c1158dcaf0ced96553d0f9c96fa6663dff8b07c47aea303949f2a23922bd26743c34305822f293a1d49be54827817af9bdbc5008435769ec2d7570601ed4a3b70dff50c355fa1803351608a54c4d531a796d8ef2113697e7cfe5c780a918e09999b59f70dca5fdcd2f9f9de66597faa7fc79e98bde690b47c3cdab6283d658af67363927191f78db4970a1a6f501e7532848ba2332947963ff60831e89e1e285ecc64b1c7f1a6d21c5a6cc33da4db1267a23fed871cd183b35bf41ba012b8fa86522a9b1369b68b3351d94622c643400fe0af31bb93cad398cfd6253bff39e957bc68d5079b4bdfa9c7bf9ceef9533c166d188029fd7a62533574881efa18aab668722a429b26e7fc8b700fe8d8968591b9b2ab3acc2fd76919fc5b47745d3648146ff33377f896337ccec1d5fc8352c6bc6dceff1713a12aee374881fa1b7ee98aa332f9587c98aaa61ca88374a47bc4e1448f1bd60bf405c21af6f12a1080c4ba77a36e96239fdff7750809f700d80c66c0923f269237585ac675d559a8bbbad93c92e43b3640f1a7bbb70e5eb2d7ca8206a1be0603718b09ead40f79bc9cf55e88c8648375565f63b1f044f8ddab1567f86402f34b9db2d599acfd0e4ca313ce58f9bbfcd26573eb2cbe0c2926dca7a2fc896adf79785427f4a3f734e0c1088867099b1f276093ecfbddae5394d0830261860815b6d35e2bb4962a6ec87b9a2996eae6c46897e4addb525ffc04e58ec32db46ca48a009a95e1193e0cf0780267ec792c0ffd1dcc82afd128a79f3b4b6bd5411f94ea382e76db9fd7c6f9a22257a9e6979bcf12411857456ebc7cef21ba948516c6da2b6239b725c5bbfdb18c1cbef49b086c6131155eb0f0578df0797537bf51119ab83e0a1a0733dc5f439c506c43c16960af8016af48eded09439780d9c1c85bdaf81848aebca4599a22b7bf8f3c005f8736c2ec943f99e5ab6332ce4eaadbcd02f254bcdbbb81d20177466e5f062f61d01e96acb400067cb8cb6ab16716e04cb14fa24da255fb72b41c4f0a356e1a616d2d105e4164f316a91245942a9b33e3b666569c1ee47ccc7cf39de8b32877afe8d32dcaeff13a06812f1dda171d06b8481bf2d9c97c6418f68b37b85f411d222fbd5174dc04df824c0059b298a70cf6e396eca2a7ead16191f6f7b341dddc", 0xe83}], 0x3}}], 0x1, 0x4000800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) 5.017344202s ago: executing program 2 (id=6148): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e40)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a0900000000000000000002000000"], 0x64}}, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x844a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{0x0}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@nobh}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.746986721s ago: executing program 9 (id=6153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000033d3850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002040000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) syz_open_dev$MSR(&(0x7f0000000040), 0xc7c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000000c0)={'macvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x3}, &(0x7f0000000780)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 4.14243696s ago: executing program 8 (id=6157): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn\x00\x00\x00\x00\x00') sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.102027681s ago: executing program 2 (id=6158): socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x94c9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x106200, 0x10004, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4001001}, 0x20040000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x75a3c0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c000780080006400000000004d97d418a597214ca0004000100000012000300686173683a6e65742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) 3.743554272s ago: executing program 9 (id=6159): r0 = creat(0x0, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000002680)={0x0, 0x0, 0x0}, 0x40010000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000040)={&(0x7f0000000580)="5a946b882120", 0x6}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) readv(r1, &(0x7f0000000440)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1) 3.356576775s ago: executing program 5 (id=6105): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00cd09d001202d5dbcbed805492c4b88183c3e78839d94d750cc7374e3e32e7de80760968076055c369c3876d6047473817c8ee74f8c61e4ef4db42d942fb50de6cf7a8fa13e1efac0bac39f0165299f41b284491c81eac2cb3a0d4eab34b6bce51635616007c202bd501428292a654d", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x99}, 0x8084) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) socket(0x2a, 0x4, 0x35798612) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) r10 = getpid() sched_setscheduler(r10, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1a568cf19a94ea7cd77568d1745bfab3a837c82f6f2759bf3f67107f1b610aa2f40e5d76d57dd55d7d813d69f9e72c6ab5a89b4b93e013f0681a1be8986a3e07229984f33e9b06b8aaa9f23ef36757867b", @ANYBLOB="986d35eda947f396d71f", @ANYRESDEC=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r13) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.316568036s ago: executing program 0 (id=6162): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 3.266799757s ago: executing program 0 (id=6163): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0xa1) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) (fail_nth: 1) 3.235107248s ago: executing program 8 (id=6164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d000000055e070012000000050018007f000000050017000000000006000a00ffff000005001900040000000600080000000000baaf2aca57a9e04f7a97cb48d6d24af66d71e70e314f350cf6bb2806b9b1e51d5beb130ce329a8c5d7b3a41afb8a79b6fb0d7db0448424360a06c630a6b795a9804f31e6cfaf104fb0ec1e43825fe561c48e0fa05911a8ac4a802aba1f3472c8ba47ea7a480814ce1aa8bfaefd863c5bf8000000000000610d69af897ecc62757a34a7368afd0d28b69be6b42ed332c51c40dc7e8ad4837ce7bc323e79d991e419e173fb6e1f0ad0106688d00576a518fd2492dfacc6775d637215f252f30ab1ae046e"], 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = getpgid(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x49880) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="2dc726bd7000561bac106dd738d4d1fadb"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x48800) 3.17956434s ago: executing program 0 (id=6165): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) io_uring_setup(0x6294, 0x0) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0xb, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x3874}, 0x8) 3.17906113s ago: executing program 0 (id=6166): ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0xa) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4) sendmmsg$inet6(r5, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000380)="42e7809dd81c379cb912f2f1c60e9abdd3572e5661149a09fccfdce0f5ef78eddec13e9bed4d940840084cccf2767876d6db5f9e9482c78e09787b42fde6fbcfce7b5da73d4864a81429d5c716f72bc44fecdc5e059cf2f14cf59447cbd3d2189ecc7de01234b72f419fedbf4b6d0146160e4675b67219adf9136a035fe88cf78dd29223e0651b3a73ebc35b0ed6c981b8eb80e5d11077160fe1fc1aea57bb68684be53d0c910240371703978d7a65f12a987a1cd0a7b0b489a990c324265388c41dc93fddff312ed033f796a211c0280d2ff9a2e7509ce8b3b60df999a490cc434c08d3", 0xe4}, {&(0x7f0000000480)="35475b640c52c3310d5711f798073f55fdc1daca9ec0187da378d61291e88ee139d0cf791d08e04dc2367c4cfd2f124a2bcc93069c69c67984fbf0ab9accf44e32a5de7a79b0cb00f8f7df951475d5f7c01bb28d3a728bde84b393146ff4a8015a318c77084b082f1b402897303e2712c86cc8e76ea64c4d549f579b4e53aafa1914083218a93f63044d2a3de15b420a6a4eca402c38d00f5f", 0x99}, {&(0x7f0000002380)="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", 0xe83}], 0x3}}], 0x1, 0x4000800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) 3.107110443s ago: executing program 2 (id=6167): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e40)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a3c000000120a0900000000000000000002000000"], 0x64}}, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x844a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{0x0}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@nobh}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.848301941s ago: executing program 9 (id=6168): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000600000000000001000000004600450210000000000000100400000008000000000000010000000033005e040000000000000002030000000d000000090000850100000002000000000000000000000002000000020000000900000009000000000000000e0000000800000005000000ffffffff0c00000001000000060000000400000000000000a60000000200000003000000010000000900000005000000230700000c00000003001000070000000a00000000000007000000000f00000000010000000051007e01090000000000000a020000000061002596"], &(0x7f0000000940)=""/21, 0xf3, 0x15, 0x1, 0x7fff}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0xa216, 0x6, 0x11001, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) fchdir(0xffffffffffffffff) r3 = open(&(0x7f0000000740)='./bus\x00', 0x801, 0x21) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f00000007c0)={[{@nolazytime}, {@grpjquota_path={'grpjquota', 0x3d, './bus/file0'}}, {@noload}, {@noblock_validity}, {@noblock_validity}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x65cf}}, {@dioread_lock}, {@mblk_io_submit}], [], 0x3d}, 0x65, 0x533, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x12fb, &(0x7f0000000180)={0x0, 0x86e1, 0x4, 0x8, 0x38b}, &(0x7f0000010080), 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x47e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e9, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, r3, 0x3) 2.183194142s ago: executing program 2 (id=6169): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180400000000000000000069d800000000000000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085ec3263d022e27c5d1d03524d7e25c4fa60d0edbb7bea246e36fcb5f47031cefa5aa2ffcec2bfa4fa88bd272151624ceb0bb1a175f16ee9e0a9cef27e1ba1a15689c05bcb0ba284ab17615e203bffba38e80e47fc04ec202053428ca1fd070304362b6b69c207b1fdddf524ede0db93c7786fd832281bba41312413e71ee447ac7942896c40"], &(0x7f00000005c0)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x2b1}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x20060840) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYRES8=r5], 0x48}, 0x1, 0x0, 0x0, 0x40885}, 0x20000800) sendmsg$can_bcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}, 0x2}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x3c, r10, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="00130000", @ANYRES16=r10, @ANYBLOB="000229bd7000ffdbdf252a0000000c0005000202aaaaaaaaaaaa05003700000000000c0005000200aaaaaaaaaaaa08002f00f7ffffff0a0001007770616e310000000a0001007770616e31000000"], 0x54}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f2abd7000fcdbdf251c00000008000300", @ANYRES32=r11, @ANYBLOB="71f321b1afdeb932fb24b201dfb6f278c9d12bd75f4af3a4e708e83e5b5f3ef845969e3afba769c1837258"], 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)={0x60, r3, 0x522dac39254971e1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9d50c02160941b3d}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) 2.182733062s ago: executing program 0 (id=6170): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180400000000000000000069d800000000000000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085ec3263d022e27c5d1d03524d7e25c4fa60d0edbb7bea246e36fcb5f47031cefa5aa2ffcec2bfa4fa88bd272151624ceb0bb1a175f16ee9e0a9cef27e1ba1a15689c05bcb0ba284ab17615e203bffba38e80e47fc04ec202053428ca1fd070304362b6b69c207b1fdddf524ede0db93c7786fd832281bba41312413e71ee447ac7942896c40"], &(0x7f00000005c0)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895", 0x2b1}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r5}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYRES8=r6], 0x48}, 0x1, 0x0, 0x0, 0x40885}, 0x20000800) sendmsg$can_bcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}, 0x2}, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r9) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x3c, r11, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="00130000", @ANYRES16=r11, @ANYBLOB="000229bd7000ffdbdf252a0000000c0005000202aaaaaaaaaaaa05003700000000000c0005000200aaaaaaaaaaaa08002f00f7ffffff0a0001007770616e310000000a0001007770616e31000000"], 0x54}, 0x1, 0x0, 0x0, 0xc840}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="210f2abd7000fcdbdf251c00000008000300", @ANYRES32=r12, @ANYBLOB="71f321b1afdeb932fb24b201dfb6f278c9d12bd75f4af3a4e708e83e5b5f3ef845969e3afba769c1837258"], 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000ac0)={0x60, r4, 0x522dac39254971e1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9d50c02160941b3d}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) 1.077649967s ago: executing program 9 (id=6171): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd29, 0x10080}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000010000000200020000000900010073797a3000000000090003"], 0x2c}}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x78, 0x30, 0xb, 0x5, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x8000, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0xfffffffffffffdd9, 0xb, @mcast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x40) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000140)=0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 110.280987ms ago: executing program 8 (id=6172): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@acl}, {@dax}, {@jqfmt_vfsv1}]}, 0x1, 0x506, &(0x7f0000000e00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]) r7 = socket$kcm(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fdffffff000000000757000018110000", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000175302823b399c7300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 92.428477ms ago: executing program 9 (id=6173): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 91.804227ms ago: executing program 2 (id=6174): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0) (fail_nth: 3) 89.589108ms ago: executing program 0 (id=6175): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000100)={0x0, 0x5128, 0x20000, 0x0, 0x2ea, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r3) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000900), 0xd}, 0x1101, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, 0x0) getdents(r6, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x514, &(0x7f0000002080)="$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") sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000080010400000000e8efffff00000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000001c00128009000100626f6e64000000000c00028008000900feffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 41.817239ms ago: executing program 5 (id=6176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03000000000000000000020008aa090001"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r7, @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2040900) 1.1538ms ago: executing program 2 (id=6177): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x1}, 0x1efb0, 0x3, 0x1, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 463.67µs ago: executing program 5 (id=6178): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0xfffe}, {0x52, 0x2}, @cond=[{0x203, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xb, 0x5, 0x1, 0x48, 0x1, 0xfb}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xffffffff, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2216, 0x107721, 0x16, 0x0, 0x0) 0s ago: executing program 9 (id=6179): fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040851}, 0x200080c1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) kernel console output (not intermixed with test programs): length. [ 637.251636][T22712] xt_nat: multiple ranges no longer supported [ 639.258947][T22740] 9p: Bad value for 'rfdno' [ 639.572688][T22751] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5350'. [ 639.673902][ T40] net_ratelimit: 64 callbacks suppressed [ 639.673917][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.693847][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.708226][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 639.708240][ T28] audit: type=1326 audit(2000000561.487:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22758 comm="syz.9.5352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7bb27ce59 code=0x0 [ 639.760810][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.775244][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.823426][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.837710][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.087666][ T28] audit: type=1400 audit(2000000561.870:3966): avc: denied { accept } for pid=22765 comm="syz.5.5354" path="socket:[74740]" dev="sockfs" ino=74740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 640.304570][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.319380][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.347335][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.361642][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.580494][T22792] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 640.601299][T22792] vhci_hcd vhci_hcd.0: invalid port number 255 [ 641.012226][T22807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5367'. [ 641.024412][T22807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=22807 comm=syz.5.5367 [ 641.348923][T22817] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.506922][ T28] audit: type=1326 audit(2000000563.208:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22824 comm="syz.0.5374" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b9512ce59 code=0x0 [ 641.614741][T22829] 9p: Bad value for 'wfdno' [ 641.797813][T22823] netlink: 'syz.5.5373': attribute type 4 has an invalid length. [ 642.133766][T22851] ip6_vti0 speed is unknown, defaulting to 1000 [ 642.826439][T22867] 9p: Bad value for 'wfdno' [ 643.034523][T22872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5390'. [ 643.059952][T22870] bond2: entered allmulticast mode [ 643.067385][T22872] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5390'. [ 643.086953][T22873] macvlan4: entered promiscuous mode [ 643.107278][T22873] macvlan4: entered allmulticast mode [ 643.137649][T22873] bond2: (slave macvlan4): Opening slave failed [ 643.936270][T22880] netlink: 328 bytes leftover after parsing attributes in process `syz.5.5391'. [ 645.286986][ T40] net_ratelimit: 50 callbacks suppressed [ 645.287003][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.306950][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.329753][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.344102][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.385307][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.399684][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.706660][T22883] FAULT_INJECTION: forcing a failure. [ 645.706660][T22883] name failslab, interval 1, probability 0, space 0, times 0 [ 645.729273][T22883] CPU: 0 UID: 0 PID: 22883 Comm: syz.2.5392 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 645.729308][T22883] Tainted: [W]=WARN [ 645.729315][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.729326][T22883] Call Trace: [ 645.729404][T22883] [ 645.729412][T22883] __dump_stack+0x1d/0x30 [ 645.729432][T22883] dump_stack_lvl+0x95/0xd0 [ 645.729449][T22883] dump_stack+0x15/0x1b [ 645.729466][T22883] should_fail_ex+0x263/0x280 [ 645.729531][T22883] ? dev_ethtool+0x96/0x16a0 [ 645.729548][T22883] should_failslab+0x8c/0xb0 [ 645.729641][T22883] __kmalloc_cache_noprof+0x5f/0x400 [ 645.729668][T22883] dev_ethtool+0x96/0x16a0 [ 645.729728][T22883] ? full_name_hash+0x92/0xe0 [ 645.729750][T22883] ? strcmp+0x22/0x50 [ 645.729781][T22883] dev_ioctl+0x2e0/0x960 [ 645.729804][T22883] sock_do_ioctl+0x1aa/0x230 [ 645.729867][T22883] sock_ioctl+0x41b/0x610 [ 645.729914][T22883] ? __pfx_sock_ioctl+0x10/0x10 [ 645.729936][T22883] __se_sys_ioctl+0xce/0x140 [ 645.729974][T22883] __x64_sys_ioctl+0x43/0x50 [ 645.730001][T22883] x64_sys_call+0x1563/0x3020 [ 645.730025][T22883] do_syscall_64+0x12c/0x3b0 [ 645.730110][T22883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.730186][T22883] RIP: 0033:0x7f647368ce59 [ 645.730201][T22883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.730218][T22883] RSP: 002b:00007f64720e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.730240][T22883] RAX: ffffffffffffffda RBX: 00007f6473905fa0 RCX: 00007f647368ce59 [ 645.730255][T22883] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 645.730298][T22883] RBP: 00007f64720e7090 R08: 0000000000000000 R09: 0000000000000000 [ 645.730311][T22883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.730323][T22883] R13: 00007f6473906038 R14: 00007f6473905fa0 R15: 00007ffc57bcf258 [ 645.730360][T22883] [ 645.933236][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.942308][T22887] FAULT_INJECTION: forcing a failure. [ 645.942308][T22887] name failslab, interval 1, probability 0, space 0, times 0 [ 645.947552][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.971637][T22887] CPU: 0 UID: 0 PID: 22887 Comm: syz.8.5395 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 645.971677][T22887] Tainted: [W]=WARN [ 645.971684][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.971696][T22887] Call Trace: [ 645.971756][T22887] [ 645.971763][T22887] __dump_stack+0x1d/0x30 [ 645.971784][T22887] dump_stack_lvl+0x95/0xd0 [ 645.971802][T22887] dump_stack+0x15/0x1b [ 645.971872][T22887] should_fail_ex+0x263/0x280 [ 645.971893][T22887] should_failslab+0x8c/0xb0 [ 645.971956][T22887] __kvmalloc_node_noprof+0x155/0x640 [ 645.971977][T22887] ? __pfx_net_ctl_permissions+0x10/0x10 [ 645.972064][T22887] ? proc_sys_call_handler+0x247/0x4a0 [ 645.972138][T22887] proc_sys_call_handler+0x247/0x4a0 [ 645.972211][T22887] proc_sys_write+0x22/0x30 [ 645.972237][T22887] iter_file_splice_write+0x6c4/0xa80 [ 645.972333][T22887] ? __pfx_iter_file_splice_write+0x10/0x10 [ 645.972360][T22887] direct_splice_actor+0x156/0x2a0 [ 645.972391][T22887] splice_direct_to_actor+0x311/0x670 [ 645.972491][T22887] ? __pfx_direct_splice_actor+0x10/0x10 [ 645.972524][T22887] do_splice_direct+0x119/0x1a0 [ 645.972553][T22887] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 645.972613][T22887] do_sendfile+0x382/0x650 [ 645.972634][T22887] __x64_sys_sendfile64+0x105/0x150 [ 645.972654][T22887] x64_sys_call+0x2dc4/0x3020 [ 645.972677][T22887] do_syscall_64+0x12c/0x3b0 [ 645.972741][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.972875][T22887] RIP: 0033:0x7f480d27ce59 [ 645.972891][T22887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.972909][T22887] RSP: 002b:00007f480bccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 645.972928][T22887] RAX: ffffffffffffffda RBX: 00007f480d4f5fa0 RCX: 00007f480d27ce59 [ 645.973019][T22887] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 645.973031][T22887] RBP: 00007f480bccf090 R08: 0000000000000000 R09: 0000000000000000 [ 645.973044][T22887] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 645.973057][T22887] R13: 00007f480d4f6038 R14: 00007f480d4f5fa0 R15: 00007ffcd9ed20c8 [ 645.973076][T22887] [ 646.082649][ T28] audit: type=1326 audit(2000000567.482:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22891 comm="syz.2.5397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647368ce59 code=0x0 [ 646.086847][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 646.237523][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 646.408880][T22889] batman_adv: batadv0: Interface deactivated: dummy0 [ 646.478877][T22912] random: crng reseeded on system resumption [ 646.903293][T22889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.919070][T22889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.997526][ T68] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.016257][ T68] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.049575][ T68] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.108821][ T68] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.119038][T22916] xt_nat: multiple ranges no longer supported [ 647.281654][T22943] FAULT_INJECTION: forcing a failure. [ 647.281654][T22943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.310044][T22943] CPU: 0 UID: 0 PID: 22943 Comm: syz.5.5412 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 647.310156][T22943] Tainted: [W]=WARN [ 647.310164][T22943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.310176][T22943] Call Trace: [ 647.310182][T22943] [ 647.310190][T22943] __dump_stack+0x1d/0x30 [ 647.310212][T22943] dump_stack_lvl+0x95/0xd0 [ 647.310233][T22943] dump_stack+0x15/0x1b [ 647.310253][T22943] should_fail_ex+0x263/0x280 [ 647.310298][T22943] should_fail+0xb/0x20 [ 647.310315][T22943] should_fail_usercopy+0x1a/0x20 [ 647.310333][T22943] _copy_from_iter+0xcf/0xea0 [ 647.310356][T22943] ? alloc_pages_mpol+0x217/0x260 [ 647.310384][T22943] copy_page_from_iter+0x161/0x1f0 [ 647.310461][T22943] tun_get_user+0xbe3/0x27e0 [ 647.310496][T22943] ? ref_tracker_alloc+0x1eb/0x2f0 [ 647.310586][T22943] tun_chr_write_iter+0x15e/0x210 [ 647.310612][T22943] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 647.310646][T22943] vfs_write+0x5a6/0x9f0 [ 647.310672][T22943] ksys_write+0xdc/0x1a0 [ 647.310695][T22943] __x64_sys_write+0x40/0x50 [ 647.310723][T22943] x64_sys_call+0x27e1/0x3020 [ 647.310746][T22943] do_syscall_64+0x12c/0x3b0 [ 647.310777][T22943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.310880][T22943] RIP: 0033:0x7f0ed1fed68e [ 647.310912][T22943] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.310930][T22943] RSP: 002b:00007f0ed0a86fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 647.311002][T22943] RAX: ffffffffffffffda RBX: 00007f0ed0a876c0 RCX: 00007f0ed1fed68e [ 647.311017][T22943] RDX: 000000000000004a RSI: 0000200000000380 RDI: 00000000000000c8 [ 647.311031][T22943] RBP: 00007f0ed0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 647.311045][T22943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.311056][T22943] R13: 00007f0ed22a6038 R14: 00007f0ed22a5fa0 R15: 00007fff4e190df8 [ 647.311141][T22943] [ 647.535963][T22930] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.561008][T22946] 9p: Bad value for 'wfdno' [ 647.744993][T22956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.109840][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 648.117742][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 648.191728][ T28] audit: type=1326 audit(2000000569.455:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22964 comm="syz.9.5417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7bb27ce59 code=0x0 [ 648.313053][T22971] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5420'. [ 648.583652][T22968] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 648.588036][T22982] 9p: Bad value for 'wfdno' [ 648.603725][T22983] tipc: Cannot configure node identity twice [ 648.734856][T22987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5426'. [ 648.803804][T22987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22987 comm=syz.0.5426 [ 649.206288][T23016] netlink: 'syz.8.5438': attribute type 1 has an invalid length. [ 649.322218][T23020] xt_nat: multiple ranges no longer supported [ 649.352677][T23018] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.840753][T23041] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5446'. [ 649.851084][T23042] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 649.862792][T23041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23041 comm=syz.8.5446 [ 650.020666][ T28] audit: type=1326 audit(2000000571.167:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23047 comm="syz.2.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647368ce59 code=0x0 [ 650.138131][T23055] netlink: 'syz.8.5451': attribute type 1 has an invalid length. [ 650.155490][T23055] xt_nat: multiple ranges no longer supported [ 650.331966][ T28] audit: type=1400 audit(2000000571.457:3971): avc: denied { unmount } for pid=16882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 650.354792][T23065] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5454'. [ 650.398775][T23067] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.574750][ T28] audit: type=1400 audit(2000000571.681:3972): avc: denied { getopt } for pid=23076 comm="syz.8.5460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 650.709725][T23084] random: crng reseeded on system resumption [ 650.890255][ T40] net_ratelimit: 49 callbacks suppressed [ 650.890341][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 650.910296][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.043802][T23086] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5461'. [ 651.084983][T23086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23086 comm=syz.9.5461 [ 651.088363][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.112068][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.167643][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.181958][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.417348][T23094] syzkaller0: entered promiscuous mode [ 651.434405][T23094] syzkaller0: entered allmulticast mode [ 651.627982][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.642429][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.670351][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.684904][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.911918][ T28] audit: type=1326 audit(2000000572.935:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23110 comm="syz.2.5472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647368ce59 code=0x0 [ 651.991509][T23117] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5474'. [ 652.010456][T23117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23117 comm=syz.8.5474 [ 652.204716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 653.658944][T23136] random: crng reseeded on system resumption [ 654.108334][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5477'. [ 654.409316][T23148] netlink: 'syz.8.5483': attribute type 1 has an invalid length. [ 654.424409][T23148] xt_nat: multiple ranges no longer supported [ 654.492148][T23155] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5487'. [ 654.508351][T23155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23155 comm=syz.9.5487 [ 654.739298][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'. [ 654.750308][ T28] audit: type=1326 audit(2000000575.553:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.2.5489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647368ce59 code=0x0 [ 654.799367][T23172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5493'. [ 654.936725][T23183] netlink: 'syz.9.5497': attribute type 1 has an invalid length. [ 654.945189][T23183] xt_nat: multiple ranges no longer supported [ 654.984543][T23187] xt_nat: multiple ranges no longer supported [ 655.035053][T23193] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5501'. [ 655.044326][T23193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23193 comm=syz.9.5501 [ 655.193471][T23194] ip6_vti0 speed is unknown, defaulting to 1000 [ 655.675709][T23211] netlink: 'syz.9.5508': attribute type 1 has an invalid length. [ 655.684277][T23211] xt_nat: multiple ranges no longer supported [ 655.728069][T23217] pimreg: entered allmulticast mode [ 655.750850][T23219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5512'. [ 655.762686][T23219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23219 comm=syz.0.5512 [ 655.922766][T23235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5520'. [ 656.486543][T13513] net_ratelimit: 38 callbacks suppressed [ 656.486558][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 656.506518][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.558925][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 656.573343][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.589558][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 656.603851][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.774913][ T28] audit: type=1326 audit(2000000577.480:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23246 comm="syz.2.5524" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647368ce59 code=0x0 [ 656.778752][T23250] program syz.9.5525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.913403][ T28] audit: type=1400 audit(2000000577.611:3976): avc: denied { ioctl } for pid=23255 comm="syz.8.5527" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 657.036383][T23265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5531'. [ 657.045737][T23265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23265 comm=syz.0.5531 [ 657.072390][T23270] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5533'. [ 657.105388][T23273] FAULT_INJECTION: forcing a failure. [ 657.105388][T23273] name failslab, interval 1, probability 0, space 0, times 0 [ 657.118072][T23273] CPU: 1 UID: 0 PID: 23273 Comm: syz.0.5534 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 657.118091][T23273] Tainted: [W]=WARN [ 657.118095][T23273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 657.118173][T23273] Call Trace: [ 657.118177][T23273] [ 657.118183][T23273] __dump_stack+0x1d/0x30 [ 657.118197][T23273] dump_stack_lvl+0x95/0xd0 [ 657.118209][T23273] dump_stack+0x15/0x1b [ 657.118271][T23273] should_fail_ex+0x263/0x280 [ 657.118283][T23273] ? sctp_add_bind_addr+0x71/0x1e0 [ 657.118300][T23273] should_failslab+0x8c/0xb0 [ 657.118317][T23273] __kmalloc_cache_noprof+0x5f/0x400 [ 657.118419][T23273] sctp_add_bind_addr+0x71/0x1e0 [ 657.118435][T23273] sctp_copy_local_addr_list+0x1b3/0x250 [ 657.118484][T23273] sctp_copy_one_addr+0x7f/0x280 [ 657.118500][T23273] sctp_bind_addr_copy+0x79/0x290 [ 657.118593][T23273] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 657.118619][T23273] sctp_connect_new_asoc+0x1c3/0x3a0 [ 657.118633][T23273] sctp_sendmsg+0x100f/0x1d60 [ 657.118647][T23273] ? __pfx_sctp_sendmsg+0x10/0x10 [ 657.118714][T23273] inet_sendmsg+0xc5/0xd0 [ 657.118730][T23273] ? __pfx_inet_sendmsg+0x10/0x10 [ 657.118798][T23273] ____sys_sendmsg+0x519/0x5b0 [ 657.118814][T23273] ___sys_sendmsg+0x195/0x1e0 [ 657.118886][T23273] __x64_sys_sendmsg+0xd4/0x160 [ 657.118920][T23273] x64_sys_call+0x194c/0x3020 [ 657.118933][T23273] do_syscall_64+0x12c/0x3b0 [ 657.118950][T23273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.118978][T23273] RIP: 0033:0x7f2b9512ce59 [ 657.118989][T23273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.118999][T23273] RSP: 002b:00007f2b93b87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.119011][T23273] RAX: ffffffffffffffda RBX: 00007f2b953a5fa0 RCX: 00007f2b9512ce59 [ 657.119019][T23273] RDX: 0000000028008841 RSI: 0000200000001640 RDI: 0000000000000003 [ 657.119026][T23273] RBP: 00007f2b93b87090 R08: 0000000000000000 R09: 0000000000000000 [ 657.119096][T23273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.119103][T23273] R13: 00007f2b953a6038 R14: 00007f2b953a5fa0 R15: 00007ffd74179d08 [ 657.119114][T23273] [ 657.129232][T23275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5535'. [ 657.154223][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 657.375509][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 657.390015][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 657.404438][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 657.521164][T23288] FAULT_INJECTION: forcing a failure. [ 657.521164][T23288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.534279][T23288] CPU: 1 UID: 0 PID: 23288 Comm: syz.0.5540 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 657.534300][T23288] Tainted: [W]=WARN [ 657.534304][T23288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 657.534325][T23288] Call Trace: [ 657.534330][T23288] [ 657.534336][T23288] __dump_stack+0x1d/0x30 [ 657.534426][T23288] dump_stack_lvl+0x95/0xd0 [ 657.534438][T23288] dump_stack+0x15/0x1b [ 657.534448][T23288] should_fail_ex+0x263/0x280 [ 657.534460][T23288] should_fail+0xb/0x20 [ 657.534512][T23288] should_fail_usercopy+0x1a/0x20 [ 657.534524][T23288] _copy_from_user+0x1c/0xb0 [ 657.534593][T23288] ___sys_sendmsg+0xc1/0x1e0 [ 657.534621][T23288] __x64_sys_sendmsg+0xd4/0x160 [ 657.534636][T23288] x64_sys_call+0x194c/0x3020 [ 657.534649][T23288] do_syscall_64+0x12c/0x3b0 [ 657.534670][T23288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.534683][T23288] RIP: 0033:0x7f2b9512ce59 [ 657.534693][T23288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.534769][T23288] RSP: 002b:00007f2b93b87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.534782][T23288] RAX: ffffffffffffffda RBX: 00007f2b953a5fa0 RCX: 00007f2b9512ce59 [ 657.534789][T23288] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000007 [ 657.534797][T23288] RBP: 00007f2b93b87090 R08: 0000000000000000 R09: 0000000000000000 [ 657.534804][T23288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.534811][T23288] R13: 00007f2b953a6038 R14: 00007f2b953a5fa0 R15: 00007ffd74179d08 [ 657.534933][T23288] [ 657.943099][T23312] ip6_vti0 speed is unknown, defaulting to 1000 [ 658.100822][T23318] vlan0: left promiscuous mode [ 658.145051][T23318] ip6gre1: left promiscuous mode [ 658.189057][ T3816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.331570][ T3816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 659.321133][ T28] audit: type=1326 audit(2000000579.865:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23346 comm="syz.2.5560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647368ce59 code=0x0 [ 660.098992][T23351] ip6_vti0 speed is unknown, defaulting to 1000 [ 660.430707][T23361] __nla_validate_parse: 4 callbacks suppressed [ 660.430721][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5563'. [ 661.902952][ T30] net_ratelimit: 44 callbacks suppressed [ 661.902981][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 661.922891][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.199622][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.213940][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.417841][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.432160][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.654650][T23386] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 662.737492][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.751816][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.774278][T23384] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 662.961475][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.975869][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.010913][ T28] audit: type=1326 audit(2000000583.316:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23391 comm="syz.0.5573" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b9512ce59 code=0x0 [ 663.399854][T23404] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.409594][T23404] batman_adv: batadv0: Interface activated: dummy0 [ 663.430861][T23404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.546489][T23404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.567754][T23404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.593416][T23404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 663.604580][T23404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.618819][T23404] veth1_vlan: left promiscuous mode [ 663.625392][T23404] veth0_vlan: left promiscuous mode [ 663.631632][T23404] veth0_vlan: entered promiscuous mode [ 663.642235][T23404] veth1_vlan: entered promiscuous mode [ 663.652570][T23404] veth1_macvtap: left promiscuous mode [ 663.659552][T23404] veth0_macvtap: left promiscuous mode [ 663.667172][T23404] veth0_macvtap: entered promiscuous mode [ 663.674839][T23404] veth1_macvtap: entered promiscuous mode [ 663.686625][T23404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 663.695033][T23404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 663.704157][T23404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 663.712633][T23404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 663.721971][T23404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.729968][T23404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.741685][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.748760][ T49] bridge0: port 1(bridge_slave_0) entered listening state [ 663.762102][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.769211][ T49] bridge0: port 2(bridge_slave_1) entered listening state [ 663.802636][ T357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.812064][ T357] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.822693][ T357] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.833194][ T357] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.521891][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.529136][ C0] bridge0: topology change detected, propagating [ 664.535561][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.542756][ C0] bridge0: topology change detected, propagating [ 667.075937][T23425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23425 comm=syz.2.5583 [ 667.122592][T23431] xt_nat: multiple ranges no longer supported [ 667.258514][ T28] audit: type=1400 audit(2000000587.282:3979): avc: denied { getopt } for pid=23435 comm="syz.0.5587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 667.283035][ T49] net_ratelimit: 117 callbacks suppressed [ 667.283049][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.303119][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.649618][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.664008][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.683890][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.698943][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.788940][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.803385][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.154768][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 668.169689][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 668.239921][T23448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5590'. [ 669.213674][T23466] xt_nat: multiple ranges no longer supported [ 671.647140][T23475] xt_nat: multiple ranges no longer supported [ 671.764924][T23496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23496 comm=syz.0.5608 [ 671.810384][T23500] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5610'. [ 671.855479][T23501] xt_hashlimit: size too large, truncated to 1048576 [ 672.702011][ T49] net_ratelimit: 67 callbacks suppressed [ 672.702028][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 672.721984][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.012766][ T2236] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 673.027124][ T2236] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.151543][ T2236] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 673.166469][ T2236] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.203764][ T2236] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 673.218052][ T2236] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 673.301450][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 673.315741][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 675.280550][T23531] sg_write: data in/out 402397/290 bytes for SCSI command 0x0-- guessing data in; [ 675.280550][T23531] program syz.5.5618 not setting count and/or reply_len properly [ 675.322623][T23536] netlink: 'syz.0.5621': attribute type 20 has an invalid length. [ 675.330553][T23536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.347545][T23543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23543 comm=syz.8.5622 [ 676.134856][T23564] batman_adv: batadv0: Interface deactivated: dummy0 [ 676.141656][T23564] batman_adv: batadv0: Removing interface: dummy0 [ 676.317780][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5631'. [ 678.154760][T17744] net_ratelimit: 61 callbacks suppressed [ 678.154777][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 678.174825][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.236028][ T28] audit: type=1400 audit(2000000597.551:3980): avc: denied { execute } for pid=23581 comm="syz.0.5633" path="/memory.swap.current" dev="ramfs" ino=78269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 678.295013][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 678.309390][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.550562][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 678.564943][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.681940][T23587] netlink: 284 bytes leftover after parsing attributes in process `syz.8.5634'. [ 678.719527][T23587] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.764917][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 678.779247][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.861860][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 678.876284][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 678.901987][T23593] xt_nat: multiple ranges no longer supported [ 680.260876][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 680.268000][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 684.133791][T17744] net_ratelimit: 28 callbacks suppressed [ 684.133812][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 684.153749][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 684.442147][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 684.456510][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 684.478215][T23635] netlink: 'syz.2.5650': attribute type 1 has an invalid length. [ 685.238650][T23639] xt_nat: multiple ranges no longer supported [ 685.258673][T23638] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5651'. [ 685.505591][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 685.520422][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 685.536713][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 685.551636][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 686.044767][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 686.059677][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 689.248534][T23660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23660 comm=syz.2.5659 [ 689.258827][T23656] ip6_vti0 speed is unknown, defaulting to 1000 [ 689.374917][T23668] ip6_vti0 speed is unknown, defaulting to 1000 [ 689.382265][T23672] netlink: 'syz.0.5662': attribute type 1 has an invalid length. [ 689.398965][T23672] xt_nat: multiple ranges no longer supported [ 689.626807][T23681] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5665'. [ 689.635909][ T28] audit: type=1326 audit(2000000608.204:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23682 comm="syz.2.5666" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f647368ce59 code=0x0 [ 689.767165][T13513] net_ratelimit: 39 callbacks suppressed [ 689.767179][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 689.787769][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 689.872535][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 689.930663][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 689.945060][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 690.090001][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 690.104299][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 690.501600][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 690.516512][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 690.562307][T23696] ip6_vti0 speed is unknown, defaulting to 1000 [ 690.573306][ T28] audit: type=1400 audit(2000000609.093:3982): avc: denied { map } for pid=23697 comm="syz.5.5668" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 690.602986][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 690.617403][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 691.204811][T23707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5670'. [ 691.337011][T23709] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.626750][T23715] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.786142][T23717] macsec1: entered promiscuous mode [ 693.791380][T23717] macsec1: entered allmulticast mode [ 693.823557][T23732] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5678'. [ 695.919260][ T68] net_ratelimit: 44 callbacks suppressed [ 695.919277][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 695.939813][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 696.153288][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 696.167742][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 696.683294][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.690571][ C1] bridge0: topology change detected, propagating [ 696.696986][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.704197][ C1] bridge0: topology change detected, propagating [ 696.918503][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 696.932937][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 696.956331][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 696.970792][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 697.003665][T23762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5683'. [ 697.957122][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 697.971493][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 698.427436][T23774] ip6_vti0 speed is unknown, defaulting to 1000 [ 700.527393][T23790] syzkaller0: entered promiscuous mode [ 700.537953][T23790] syzkaller0: entered allmulticast mode [ 700.901272][T23803] netlink: 'syz.2.5695': attribute type 6 has an invalid length. [ 702.031329][ T30] net_ratelimit: 22 callbacks suppressed [ 702.031344][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 702.051340][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.115282][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 703.129622][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.144325][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 703.158649][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 703.470736][T23828] xt_hashlimit: size too large, truncated to 1048576 [ 704.187626][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 704.201983][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 705.189625][T23833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5702'. [ 705.393324][T23833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=23833 comm=syz.5.5702 [ 705.452089][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 705.466408][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 706.147581][T23853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23853 comm=syz.8.5708 [ 706.451202][T23858] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5709'. [ 706.681924][T23866] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5712'. [ 706.887508][T23866] ip6_vti0 speed is unknown, defaulting to 1000 [ 707.006267][T23880] tipc: Enabled bearer , priority 0 [ 707.030368][T23880] syzkaller0: entered promiscuous mode [ 707.036144][T23880] syzkaller0: entered allmulticast mode [ 707.042321][T23880] tipc: Resetting bearer [ 707.050643][T23879] tipc: Resetting bearer [ 707.069509][T23879] tipc: Disabling bearer [ 707.413512][ T49] net_ratelimit: 18 callbacks suppressed [ 707.413526][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 707.433488][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.750410][T23891] random: crng reseeded on system resumption [ 707.796882][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 707.811241][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 707.857194][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 707.871656][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.280097][T23901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23901 comm=syz.8.5723 [ 708.338659][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.353007][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.389167][T23910] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5727'. [ 708.394047][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 708.413080][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 708.470906][T23911] ip6_vti0 speed is unknown, defaulting to 1000 [ 708.501201][ T28] audit: type=1326 audit(2000000625.862:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.559162][T23913] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5728'. [ 708.578567][ T28] audit: type=1326 audit(2000000625.890:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.618493][ T28] audit: type=1326 audit(2000000625.890:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.673234][ T28] audit: type=1326 audit(2000000625.890:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.699076][ T28] audit: type=1326 audit(2000000625.890:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.726805][ T28] audit: type=1326 audit(2000000625.890:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.771643][ T28] audit: type=1326 audit(2000000625.890:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.820302][ T28] audit: type=1326 audit(2000000625.890:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.895523][ T28] audit: type=1326 audit(2000000626.012:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 708.923650][T23917] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 708.960400][ T28] audit: type=1326 audit(2000000626.012:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23906 comm="syz.2.5726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647368ce59 code=0x7ffc0000 [ 712.671420][T23950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=23950 comm=syz.5.5738 [ 713.705360][ T68] net_ratelimit: 20 callbacks suppressed [ 713.705457][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.725538][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 713.743205][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 713.757496][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.778215][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 714.792566][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 714.809177][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 714.823596][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 715.186673][T23968] xt_nat: multiple ranges no longer supported [ 715.421263][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 715.435579][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 716.879530][T24012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24012 comm=syz.5.5759 [ 717.058684][T24015] netlink: 'syz.5.5760': attribute type 3 has an invalid length. [ 717.907963][T24028] xt_nat: multiple ranges no longer supported [ 718.369760][T24045] ip6_vti0 speed is unknown, defaulting to 1000 [ 718.974791][T24057] tipc: Enabling of bearer rejected, failed to enable media [ 719.534586][ T49] net_ratelimit: 34 callbacks suppressed [ 719.534603][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 719.555301][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 720.259698][T24074] random: crng reseeded on system resumption [ 720.436853][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 720.451150][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 720.466006][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 720.480300][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 721.082441][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 721.096965][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 721.242105][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 721.256596][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 721.273146][T24080] FAULT_INJECTION: forcing a failure. [ 721.273146][T24080] name failslab, interval 1, probability 0, space 0, times 0 [ 721.285809][T24080] CPU: 1 UID: 0 PID: 24080 Comm: syz.2.5780 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 721.285964][T24080] Tainted: [W]=WARN [ 721.285970][T24080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.285980][T24080] Call Trace: [ 721.285986][T24080] [ 721.285994][T24080] __dump_stack+0x1d/0x30 [ 721.286078][T24080] dump_stack_lvl+0x95/0xd0 [ 721.286094][T24080] dump_stack+0x15/0x1b [ 721.286109][T24080] should_fail_ex+0x263/0x280 [ 721.286130][T24080] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 721.286218][T24080] should_failslab+0x8c/0xb0 [ 721.286247][T24080] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 721.286277][T24080] ? mqueue_alloc_inode+0x34/0x50 [ 721.286306][T24080] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 721.286402][T24080] mqueue_alloc_inode+0x34/0x50 [ 721.286424][T24080] alloc_inode+0x40/0x170 [ 721.286440][T24080] new_inode+0x1d/0xe0 [ 721.286514][T24080] mqueue_get_inode+0x26/0x6a0 [ 721.286542][T24080] mqueue_create_attr+0x19f/0x270 [ 721.286563][T24080] ? __pfx_mqueue_create_attr+0x10/0x10 [ 721.286585][T24080] vfs_mkobj+0xa5/0x1c0 [ 721.286648][T24080] do_mq_open+0x351/0x4f0 [ 721.286727][T24080] __x64_sys_mq_open+0xcb/0x100 [ 721.286817][T24080] x64_sys_call+0x289c/0x3020 [ 721.286853][T24080] do_syscall_64+0x12c/0x3b0 [ 721.286879][T24080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.286910][T24080] RIP: 0033:0x7f647368ce59 [ 721.286924][T24080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.286965][T24080] RSP: 002b:00007f64720c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 721.286983][T24080] RAX: ffffffffffffffda RBX: 00007f6473906090 RCX: 00007f647368ce59 [ 721.286994][T24080] RDX: 0000000000000010 RSI: 00000000000008c2 RDI: 0000200000000380 [ 721.287006][T24080] RBP: 00007f64720c6090 R08: 0000000000000000 R09: 0000000000000000 [ 721.287017][T24080] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 721.287028][T24080] R13: 00007f6473906128 R14: 00007f6473906090 R15: 00007ffc57bcf258 [ 721.287073][T24080] [ 721.293690][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5779'. [ 721.392314][T24083] 9p: Bad value for 'wfdno' [ 721.693563][T24091] FAULT_INJECTION: forcing a failure. [ 721.693563][T24091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.712239][T24089] batman_adv: batadv0: Interface deactivated: dummy0 [ 721.713861][ T28] audit: type=1400 audit(2000000638.217:3993): avc: denied { nlmsg_write } for pid=24088 comm="syz.0.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 721.745392][T24091] CPU: 0 UID: 0 PID: 24091 Comm: syz.5.5784 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 721.745426][T24091] Tainted: [W]=WARN [ 721.745434][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.745477][T24091] Call Trace: [ 721.745483][T24091] [ 721.745490][T24091] __dump_stack+0x1d/0x30 [ 721.745514][T24091] dump_stack_lvl+0x95/0xd0 [ 721.745589][T24091] dump_stack+0x15/0x1b [ 721.745607][T24091] should_fail_ex+0x263/0x280 [ 721.745624][T24091] should_fail+0xb/0x20 [ 721.745714][T24091] should_fail_usercopy+0x1a/0x20 [ 721.745732][T24091] _copy_from_iter+0xcf/0xea0 [ 721.745751][T24091] ? __alloc_skb+0x4f6/0x690 [ 721.745802][T24091] ? __alloc_skb+0x200/0x690 [ 721.745820][T24091] netlink_sendmsg+0x4ae/0x6f0 [ 721.745851][T24091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.745881][T24091] ____sys_sendmsg+0x563/0x5b0 [ 721.745964][T24091] ___sys_sendmsg+0x195/0x1e0 [ 721.746002][T24091] __x64_sys_sendmsg+0xd4/0x160 [ 721.746044][T24091] x64_sys_call+0x194c/0x3020 [ 721.746069][T24091] do_syscall_64+0x12c/0x3b0 [ 721.746094][T24091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.746174][T24091] RIP: 0033:0x7f0ed202ce59 [ 721.746192][T24091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.746210][T24091] RSP: 002b:00007f0ed0a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.746228][T24091] RAX: ffffffffffffffda RBX: 00007f0ed22a5fa0 RCX: 00007f0ed202ce59 [ 721.746240][T24091] RDX: 0000000000008050 RSI: 0000200000000180 RDI: 0000000000000003 [ 721.746266][T24091] RBP: 00007f0ed0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 721.746280][T24091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.746294][T24091] R13: 00007f0ed22a6038 R14: 00007f0ed22a5fa0 R15: 00007fff4e190df8 [ 721.746315][T24091] [ 721.997361][T24089] dummy0: entered allmulticast mode [ 722.165492][ T28] audit: type=1400 audit(2000000638.648:3994): avc: denied { setopt } for pid=24093 comm="syz.5.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 722.199483][T24099] syzkaller0: entered promiscuous mode [ 722.206547][ T28] audit: type=1400 audit(2000000638.676:3995): avc: denied { nlmsg_read } for pid=24101 comm="syz.0.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 722.229580][T24099] syzkaller0: entered allmulticast mode [ 722.230106][T24103] tipc: Enabling of bearer rejected, failed to enable media [ 722.507408][T24125] random: crng reseeded on system resumption [ 722.915732][T24130] xt_hashlimit: size too large, truncated to 1048576 [ 723.131746][ T28] audit: type=1326 audit(2000000639.545:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24137 comm="syz.9.5797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7bb27ce59 code=0x0 [ 723.444790][T24167] SET target dimension over the limit! [ 723.447748][T24166] xt_nat: multiple ranges no longer supported [ 723.526310][ T28] audit: type=1400 audit(2000000639.901:3997): avc: denied { ioctl } for pid=24171 comm="syz.9.5809" path="socket:[80315]" dev="sockfs" ino=80315 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 724.568015][T24183] random: crng reseeded on system resumption [ 725.164354][ T357] net_ratelimit: 24 callbacks suppressed [ 725.164371][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 725.184442][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 725.347168][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 725.362111][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 725.367660][T24199] ip6_vti0 speed is unknown, defaulting to 1000 [ 725.388364][T24204] xt_nat: multiple ranges no longer supported [ 725.560679][T24223] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.567844][T24223] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.591387][T24223] bridge0: entered allmulticast mode [ 725.613474][T24219] ip6_vti0 speed is unknown, defaulting to 1000 [ 725.795545][T24223] bridge_slave_1: left allmulticast mode [ 725.801920][T24223] bridge_slave_1: left promiscuous mode [ 725.849235][T24223] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.875213][T24223] bridge_slave_0: left allmulticast mode [ 725.881021][T24223] bridge_slave_0: left promiscuous mode [ 725.886769][T24223] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.940994][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 725.955494][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 725.984755][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 725.999252][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 726.242737][T24249] random: crng reseeded on system resumption [ 726.330362][T24250] xt_nat: multiple ranges no longer supported [ 726.525246][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 726.539623][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 726.671871][T24234] ip6_vti0 speed is unknown, defaulting to 1000 [ 726.900689][T24270] FAULT_INJECTION: forcing a failure. [ 726.900689][T24270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.954821][T24270] CPU: 1 UID: 0 PID: 24270 Comm: syz.5.5837 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 726.954848][T24270] Tainted: [W]=WARN [ 726.954933][T24270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.954946][T24270] Call Trace: [ 726.954952][T24270] [ 726.954961][T24270] __dump_stack+0x1d/0x30 [ 726.954985][T24270] dump_stack_lvl+0x95/0xd0 [ 726.955001][T24270] dump_stack+0x15/0x1b [ 726.955017][T24270] should_fail_ex+0x263/0x280 [ 726.955085][T24270] should_fail+0xb/0x20 [ 726.955099][T24270] should_fail_usercopy+0x1a/0x20 [ 726.955117][T24270] _copy_from_user+0x1c/0xb0 [ 726.955212][T24270] do_sys_poll+0x140/0xc00 [ 726.955230][T24270] ? avc_has_perm+0x101/0x190 [ 726.955254][T24270] ? selinux_file_open+0x2e6/0x330 [ 726.955379][T24270] ? timespec64_add_safe+0x106/0x150 [ 726.955399][T24270] __x64_sys_poll+0x12c/0x230 [ 726.955495][T24270] x64_sys_call+0x2891/0x3020 [ 726.955514][T24270] do_syscall_64+0x12c/0x3b0 [ 726.955539][T24270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.955635][T24270] RIP: 0033:0x7f0ed202ce59 [ 726.955651][T24270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.955670][T24270] RSP: 002b:00007f0ed0a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 726.955692][T24270] RAX: ffffffffffffffda RBX: 00007f0ed22a5fa0 RCX: 00007f0ed202ce59 [ 726.955713][T24270] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 726.955748][T24270] RBP: 00007f0ed0a87090 R08: 0000000000000000 R09: 0000000000000000 [ 726.955759][T24270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.955832][T24270] R13: 00007f0ed22a6038 R14: 00007f0ed22a5fa0 R15: 00007fff4e190df8 [ 726.955853][T24270] [ 727.152283][T24234] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.159390][T24234] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.168681][T24234] bridge_slave_0: entered allmulticast mode [ 727.175364][T24234] bridge_slave_0: entered promiscuous mode [ 727.182269][T24234] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.201817][T24234] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.211250][T24234] bridge_slave_1: entered allmulticast mode [ 727.225062][T24234] bridge_slave_1: entered promiscuous mode [ 727.242771][T24234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.253574][T24234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.272828][T24234] team0: Port device team_slave_0 added [ 727.279585][T24234] team0: Port device team_slave_1 added [ 727.296274][T24234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.303303][T24234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.329314][T24234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.343387][T24234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.350465][T24234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.377206][T24234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.407133][T24234] hsr_slave_0: entered promiscuous mode [ 727.413383][T24234] hsr_slave_1: entered promiscuous mode [ 728.582189][T24297] xt_nat: multiple ranges no longer supported [ 728.679914][T24298] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5844'. [ 728.690531][T24234] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.714081][T24234] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.802599][T24234] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.823636][T24234] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.159054][T24311] random: crng reseeded on system resumption [ 729.184896][T24234] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.196798][T24234] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.438692][T24234] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.538709][T24234] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.933487][T24234] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 730.008375][T24234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.030925][T24234] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 730.058619][T24234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.076704][T24234] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 730.087451][T24320] xt_nat: multiple ranges no longer supported [ 730.088744][T24323] FAULT_INJECTION: forcing a failure. [ 730.088744][T24323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.102360][T24234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.114538][T24234] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 730.123216][T24234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.135422][T24323] CPU: 0 UID: 0 PID: 24323 Comm: syz.9.5853 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 730.135508][T24323] Tainted: [W]=WARN [ 730.135514][T24323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 730.135572][T24323] Call Trace: [ 730.135579][T24323] [ 730.135586][T24323] __dump_stack+0x1d/0x30 [ 730.135612][T24323] dump_stack_lvl+0x95/0xd0 [ 730.135638][T24323] dump_stack+0x15/0x1b [ 730.135658][T24323] should_fail_ex+0x263/0x280 [ 730.135752][T24323] should_fail+0xb/0x20 [ 730.135766][T24323] should_fail_usercopy+0x1a/0x20 [ 730.135788][T24323] _copy_from_iter+0xcf/0xea0 [ 730.135845][T24323] ? __rcu_read_unlock+0x4e/0x70 [ 730.135866][T24323] packet_sendmsg+0x1ef0/0x3240 [ 730.135898][T24323] ? __rcu_read_unlock+0x4e/0x70 [ 730.135918][T24323] ? avc_has_perm_noaudit+0xab/0x130 [ 730.136002][T24323] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 730.136044][T24323] ? __pfx_packet_sendmsg+0x10/0x10 [ 730.136074][T24323] __sys_sendto+0x42e/0x490 [ 730.136104][T24323] __x64_sys_sendto+0x76/0x90 [ 730.136203][T24323] x64_sys_call+0x2d35/0x3020 [ 730.136225][T24323] do_syscall_64+0x12c/0x3b0 [ 730.136251][T24323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.136270][T24323] RIP: 0033:0x7ff7bb27ce59 [ 730.136287][T24323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.136403][T24323] RSP: 002b:00007ff7b9cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 730.136422][T24323] RAX: ffffffffffffffda RBX: 00007ff7bb4f5fa0 RCX: 00007ff7bb27ce59 [ 730.136437][T24323] RDX: 000000000001000a RSI: 0000200000000180 RDI: 0000000000000003 [ 730.136450][T24323] RBP: 00007ff7b9cd7090 R08: 0000200000000140 R09: 0000000000000014 [ 730.136530][T24323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.136543][T24323] R13: 00007ff7bb4f6038 R14: 00007ff7bb4f5fa0 R15: 00007ffd80368098 [ 730.136563][T24323] [ 730.381700][T24321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5852'. [ 730.533283][T24234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.542542][T24339] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5852'. [ 730.589677][T13513] net_ratelimit: 27 callbacks suppressed [ 730.589692][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 730.609678][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 730.666340][T24234] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.679163][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 730.693428][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 730.722722][T24234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 730.733098][T24234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.173766][T24348] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.180509][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 731.195385][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 731.279598][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 731.294604][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 731.350937][T24234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.511882][T24234] veth0_vlan: entered promiscuous mode [ 731.527430][T24234] veth1_vlan: entered promiscuous mode [ 731.554987][T24234] veth0_macvtap: entered promiscuous mode [ 731.569040][T24234] veth1_macvtap: entered promiscuous mode [ 731.581826][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 731.604975][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.612089][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.628289][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.635402][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.778134][T24234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.817042][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 731.831454][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 731.854053][T24234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.905635][T24383] xt_nat: multiple ranges no longer supported [ 731.961168][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.970801][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.037964][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.077500][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.121152][T24393] netlink: 'syz.2.5867': attribute type 2 has an invalid length. [ 732.151118][T24393] netlink: 'syz.2.5867': attribute type 1 has an invalid length. [ 732.182928][T24395] netlink: 'syz.5.5870': attribute type 1 has an invalid length. [ 732.334895][T24405] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 732.443038][T24412] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 732.564495][T24414] xt_nat: multiple ranges no longer supported [ 732.570561][T24417] macsec2: entered promiscuous mode [ 732.647719][T24420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.701590][T24427] bridge0: port 3(batadv1) entered disabled state [ 732.708122][T24427] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.715350][T24427] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.722658][T24427] bridge0: entered allmulticast mode [ 732.731433][ T28] audit: type=1400 audit(2000000648.487:3998): avc: denied { listen } for pid=24423 comm="syz.9.5881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 732.766270][ T28] audit: type=1400 audit(2000000648.552:3999): avc: denied { remount } for pid=24426 comm="syz.9.5882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 732.801970][T24431] netlink: 256 bytes leftover after parsing attributes in process `syz.9.5883'. [ 732.885461][T24420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.901340][T24436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5884'. [ 732.917609][T24436] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5884'. [ 732.992150][T24420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.198779][ T40] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.212967][ T40] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.225062][T24464] xt_nat: multiple ranges no longer supported [ 733.244420][T17744] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.252694][T17744] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.316886][T24469] FAULT_INJECTION: forcing a failure. [ 733.316886][T24469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.340916][T24469] CPU: 1 UID: 0 PID: 24469 Comm: syz.8.5893 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 733.340949][T24469] Tainted: [W]=WARN [ 733.341016][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.341028][T24469] Call Trace: [ 733.341034][T24469] [ 733.341041][T24469] __dump_stack+0x1d/0x30 [ 733.341063][T24469] dump_stack_lvl+0x95/0xd0 [ 733.341082][T24469] dump_stack+0x15/0x1b [ 733.341141][T24469] should_fail_ex+0x263/0x280 [ 733.341162][T24469] should_fail+0xb/0x20 [ 733.341179][T24469] should_fail_usercopy+0x1a/0x20 [ 733.341201][T24469] _copy_from_user+0x1c/0xb0 [ 733.341231][T24469] input_event_from_user+0x5e/0x190 [ 733.341253][T24469] ? input_inject_event+0xe3/0x100 [ 733.341276][T24469] evdev_write+0x1b0/0x2b0 [ 733.341307][T24469] ? __pfx_evdev_write+0x10/0x10 [ 733.341330][T24469] vfs_write+0x269/0x9f0 [ 733.341357][T24469] ? __rcu_read_unlock+0x4e/0x70 [ 733.341382][T24469] ? __fget_files+0x184/0x1c0 [ 733.341403][T24469] ksys_write+0xdc/0x1a0 [ 733.341442][T24469] __x64_sys_write+0x40/0x50 [ 733.341467][T24469] x64_sys_call+0x27e1/0x3020 [ 733.341489][T24469] do_syscall_64+0x12c/0x3b0 [ 733.341565][T24469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.341584][T24469] RIP: 0033:0x7f1ba3dace59 [ 733.341598][T24469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.341689][T24469] RSP: 002b:00007f1ba27ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.341710][T24469] RAX: ffffffffffffffda RBX: 00007f1ba4025fa0 RCX: 00007f1ba3dace59 [ 733.341725][T24469] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 733.341739][T24469] RBP: 00007f1ba27ff090 R08: 0000000000000000 R09: 0000000000000000 [ 733.341752][T24469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.341765][T24469] R13: 00007f1ba4026038 R14: 00007f1ba4025fa0 R15: 00007ffec02796d8 [ 733.341842][T24469] [ 733.588328][T24471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5894'. [ 733.941991][ T28] audit: type=1400 audit(2000000649.656:4000): avc: denied { ioctl } for pid=24492 comm="syz.5.5902" path="socket:[83102]" dev="sockfs" ino=83102 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 733.946750][T24495] xt_nat: multiple ranges no longer supported [ 734.110278][T24507] syzkaller0: entered promiscuous mode [ 734.116077][T24507] syzkaller0: entered allmulticast mode [ 734.968732][T24519] batman_adv: batadv0: Adding interface: dummy0 [ 734.976508][T24519] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.002897][T24519] batman_adv: batadv0: Interface activated: dummy0 [ 735.123038][T24525] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5914'. [ 735.133075][T24525] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5914'. [ 735.169125][T24529] xt_nat: multiple ranges no longer supported [ 735.209022][T24531] netlink: 'syz.8.5916': attribute type 1 has an invalid length. [ 735.227693][T24531] FAULT_INJECTION: forcing a failure. [ 735.227693][T24531] name failslab, interval 1, probability 0, space 0, times 0 [ 735.245303][T24531] CPU: 0 UID: 0 PID: 24531 Comm: syz.8.5916 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 735.245381][T24531] Tainted: [W]=WARN [ 735.245388][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 735.245399][T24531] Call Trace: [ 735.245405][T24531] [ 735.245413][T24531] __dump_stack+0x1d/0x30 [ 735.245518][T24531] dump_stack_lvl+0x95/0xd0 [ 735.245539][T24531] dump_stack+0x15/0x1b [ 735.245558][T24531] should_fail_ex+0x263/0x280 [ 735.245577][T24531] should_failslab+0x8c/0xb0 [ 735.245734][T24531] kmem_cache_alloc_noprof+0x66/0x3f0 [ 735.245760][T24531] ? security_inode_alloc+0x37/0x100 [ 735.245785][T24531] security_inode_alloc+0x37/0x100 [ 735.245858][T24531] inode_init_always_gfp+0x4a0/0x4e0 [ 735.245886][T24531] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 735.245935][T24531] alloc_inode+0x58/0x170 [ 735.246012][T24531] new_inode+0x1d/0xe0 [ 735.246030][T24531] __debugfs_create_file+0x97/0x2b0 [ 735.246060][T24531] debugfs_create_file_full+0x3f/0x60 [ 735.246088][T24531] ? __pfx_macvlan_setup+0x10/0x10 [ 735.246118][T24531] ref_tracker_dir_debugfs+0x10e/0x220 [ 735.246144][T24531] alloc_netdev_mqs+0x1a7/0xa70 [ 735.246169][T24531] rtnl_create_link+0x239/0x720 [ 735.246193][T24531] rtnl_newlink_create+0x174/0x650 [ 735.246243][T24531] ? security_capable+0x7b/0x90 [ 735.246344][T24531] ? netlink_ns_capable+0x86/0xa0 [ 735.246434][T24531] rtnl_newlink+0x1185/0x1400 [ 735.246475][T24531] ? tick_program_event+0x79/0xc0 [ 735.246498][T24531] ? _raw_spin_unlock+0x9/0x30 [ 735.246560][T24531] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 735.246584][T24531] ? __rcu_read_unlock+0x4e/0x70 [ 735.246602][T24531] ? avc_has_perm_noaudit+0xab/0x130 [ 735.246630][T24531] ? cred_has_capability+0x224/0x2a0 [ 735.246710][T24531] ? selinux_capable+0x31/0x40 [ 735.246807][T24531] ? security_capable+0x7b/0x90 [ 735.246844][T24531] ? ns_capable+0x7c/0xb0 [ 735.246873][T24531] ? __pfx_rtnl_newlink+0x10/0x10 [ 735.246903][T24531] rtnetlink_rcv_msg+0x64b/0x720 [ 735.246952][T24531] netlink_rcv_skb+0x123/0x220 [ 735.246977][T24531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 735.247065][T24531] rtnetlink_rcv+0x1c/0x30 [ 735.247093][T24531] netlink_unicast+0x5a8/0x680 [ 735.247122][T24531] netlink_sendmsg+0x5c8/0x6f0 [ 735.247215][T24531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.247240][T24531] ____sys_sendmsg+0x563/0x5b0 [ 735.247323][T24531] ___sys_sendmsg+0x195/0x1e0 [ 735.247352][T24531] __x64_sys_sendmsg+0xd4/0x160 [ 735.247375][T24531] x64_sys_call+0x194c/0x3020 [ 735.247455][T24531] do_syscall_64+0x12c/0x3b0 [ 735.247514][T24531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.247532][T24531] RIP: 0033:0x7f1ba3dace59 [ 735.247545][T24531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.247561][T24531] RSP: 002b:00007f1ba27ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.247582][T24531] RAX: ffffffffffffffda RBX: 00007f1ba4025fa0 RCX: 00007f1ba3dace59 [ 735.247652][T24531] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 735.247663][T24531] RBP: 00007f1ba27ff090 R08: 0000000000000000 R09: 0000000000000000 [ 735.247673][T24531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.247686][T24531] R13: 00007f1ba4026038 R14: 00007f1ba4025fa0 R15: 00007ffec02796d8 [ 735.247707][T24531] [ 735.576972][T24531] debugfs: out of free dentries, can not create file 'netdev@ffff88811b63d598' [ 735.629645][ T28] audit: type=1326 audit(2000000651.236:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.5.5917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ed202ce59 code=0x0 [ 735.760955][T24548] bridge0: port 2(bridge_slave_1) entered listening state [ 735.773948][T24548] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.140741][T17744] net_ratelimit: 50 callbacks suppressed [ 736.140756][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 736.160810][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 736.450127][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 736.464450][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 736.510291][T24570] netlink: 'syz.0.5926': attribute type 1 has an invalid length. [ 736.618284][T24576] xt_nat: multiple ranges no longer supported [ 736.643202][T24576] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5929'. [ 737.146926][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 737.161254][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 737.386922][T24584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5931'. [ 737.451572][T24586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5933'. [ 737.521865][T24587] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5933'. [ 737.591163][T24589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.603243][T24591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.612894][T24589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.624034][T24591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.638616][T24589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.653325][T24589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.661329][T24593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.670880][T24593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.680874][T24589] batman_adv: batadv0: Removing interface: dummy0 [ 737.718317][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 737.732668][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 737.774662][T24597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.783282][T24597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.805348][T24599] syzkaller0: entered promiscuous mode [ 737.810843][T24599] syzkaller0: entered allmulticast mode [ 737.878866][T24601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.887747][T24601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.255299][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 738.269677][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 738.286424][T24609] sctp: [Deprecated]: syz.5.5944 (pid 24609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.286424][T24609] Use struct sctp_sack_info instead [ 738.315420][T24617] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5947'. [ 738.353443][T24623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.362502][T24623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.623547][T24650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5961'. [ 738.633135][T24650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5961'. [ 738.676840][T24660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.686339][T24660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.786566][T24678] netlink: 'syz.0.5972': attribute type 1 has an invalid length. [ 738.800118][T24678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 738.812009][T24678] vlan2: entered allmulticast mode [ 738.817146][T24678] veth0_to_bond: entered allmulticast mode [ 738.825449][T24678] bond4: (slave vlan2): making interface the new active one [ 738.834095][T24678] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 738.940350][T24685] netlink: 'syz.0.5975': attribute type 13 has an invalid length. [ 738.941892][T24689] netlink: 'syz.8.5977': attribute type 10 has an invalid length. [ 738.956167][T24689] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5977'. [ 739.023888][T24689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.032454][T24689] team0: Port device netdevsim0 added [ 739.072906][T24696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.081828][T24696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.301682][T24716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=24716 comm=syz.9.5990 [ 739.389218][T24719] xt_nat: multiple ranges no longer supported [ 739.424938][T24721] ip6_vti0 speed is unknown, defaulting to 1000 [ 739.723667][T24736] xt_hashlimit: size too large, truncated to 1048576 [ 741.234158][T24749] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=24749 comm=syz.8.5999 [ 741.338821][T24755] dummy0: left allmulticast mode [ 741.640455][T24764] net_ratelimit: 23 callbacks suppressed [ 741.640468][T24764] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 741.839236][T17743] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 741.853837][T17743] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 741.901849][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 741.916188][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 741.979414][T24773] netlink: 'syz.9.6007': attribute type 1 has an invalid length. [ 742.091922][T24773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.204627][T24765] ip6_vti0 speed is unknown, defaulting to 1000 [ 742.512036][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 742.526456][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 742.740704][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 742.755128][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 742.873748][T24791] __nla_validate_parse: 2 callbacks suppressed [ 742.873774][T24791] netlink: 277 bytes leftover after parsing attributes in process `syz.9.6011'. [ 742.984057][T24790] ip6_vti0 speed is unknown, defaulting to 1000 [ 743.125279][T24794] ip6_vti0 speed is unknown, defaulting to 1000 [ 743.289546][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 743.568224][T24809] ip6tnl0: Caught tx_queue_len zero misconfig [ 743.771696][T24819] bridge0: port 3(batadv1) entered blocking state [ 743.778194][T24819] bridge0: port 3(batadv1) entered forwarding state [ 743.784973][T24819] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.792055][T24819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.799517][T24819] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.806724][T24819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.937983][T24819] batadv_slave_1: entered promiscuous mode [ 743.950089][T24819] batadv_slave_1: entered allmulticast mode [ 743.986312][T24819] macsec1: left promiscuous mode [ 744.018126][T24818] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.125048][T24836] block device autoloading is deprecated and will be removed. [ 744.139225][T24829] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.272776][T24840] usb usb7: check_ctrlrecip: process 24840 (syz.9.6024) requesting ep 01 but needs 81 [ 744.283100][T24840] usb usb7: usbfs: process 24840 (syz.9.6024) did not claim interface 0 before use [ 744.303985][T24840] tipc: Can't bind to reserved service type 0 [ 744.370773][T24846] ip6_vti0 speed is unknown, defaulting to 1000 [ 744.563619][T24859] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6029'. [ 745.136756][T24885] random: crng reseeded on system resumption [ 746.247262][T24893] ip6_vti0 speed is unknown, defaulting to 1000 [ 746.852453][T23112] syz_tun (unregistering): left allmulticast mode [ 746.904645][T24919] ip6_vti0 speed is unknown, defaulting to 1000 [ 746.911489][T24935] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6051'. [ 746.995925][T13513] net_ratelimit: 25 callbacks suppressed [ 746.995940][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 747.015815][T13513] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 747.087952][T24940] random: crng reseeded on system resumption [ 747.185412][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 747.199712][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 747.386549][T24919] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.427907][T24919] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.482156][T24919] bridge_slave_0: entered allmulticast mode [ 747.488785][T24919] bridge_slave_0: entered promiscuous mode [ 747.498658][T24919] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.505860][T24919] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.513215][T24919] bridge_slave_1: entered allmulticast mode [ 747.519821][T24919] bridge_slave_1: entered promiscuous mode [ 747.539130][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 747.554298][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 747.586682][T24919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.601416][T24919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.671202][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6055'. [ 747.820266][T24919] team0: Port device team_slave_0 added [ 747.841231][T24919] team0: Port device team_slave_1 added [ 747.862712][T24957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6055'. [ 747.872356][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 747.886645][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 747.948994][T24919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.067464][T24955] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6055'. [ 748.104436][T24919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.176789][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 748.191231][T17744] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 748.264327][T24919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.310284][T24960] ip6_vti0 speed is unknown, defaulting to 1000 [ 748.530263][T24919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.557930][T24919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.626330][T24919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.762971][T24919] hsr_slave_0: entered promiscuous mode [ 748.788263][T24919] hsr_slave_1: entered promiscuous mode [ 748.809496][T24919] debugfs: 'hsr0' already exists in 'hsr' [ 748.823144][T24919] Cannot create hsr debugfs directory [ 748.841732][T24974] batman_adv: batadv0: Interface deactivated: dummy0 [ 748.856557][T24974] batman_adv: batadv0: Removing interface: dummy0 [ 749.088197][T24919] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.138675][T24919] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.202305][T24999] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.211229][T25000] sit1: entered allmulticast mode [ 751.773462][T24919] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.865661][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6071'. [ 751.909319][T24919] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.050304][T24919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 752.080247][T25022] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 752.081288][T24919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.090394][ T28] audit: type=1400 audit(2000000666.631:4002): avc: denied { relabelto } for pid=25021 comm="syz.0.6077" name="/" dev="ramfs" ino=85393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 752.105973][T24919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 752.123712][ T28] audit: type=1400 audit(2000000666.631:4003): avc: denied { associate } for pid=25021 comm="syz.0.6077" name="/" dev="ramfs" ino=85393 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 752.168078][T24919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 752.271791][T24919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 752.309794][T24919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 752.341103][T24919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 752.392203][T24919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 752.409025][T25030] netlink: 'syz.8.6079': attribute type 1 has an invalid length. [ 752.471132][T25030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 752.548602][T25040] xt_hashlimit: size too large, truncated to 1048576 [ 752.945293][ T68] net_ratelimit: 12 callbacks suppressed [ 752.945335][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 752.965253][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 753.425543][T25046] random: crng reseeded on system resumption [ 753.429013][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6082'. [ 753.808737][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 753.823078][ T40] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 753.853687][T25038] vlan2: entered allmulticast mode [ 753.874195][T25038] veth0_to_bond: entered allmulticast mode [ 753.887822][ T28] audit: type=1400 audit(2000000668.296:4004): avc: denied { ioctl } for pid=25049 comm="syz.9.6083" path="socket:[85450]" dev="sockfs" ino=85450 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 753.953633][T25052] tipc: Enabling of bearer rejected, failed to enable media [ 754.085501][T24919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.132720][T25062] Cannot find add_set index 0 as target [ 754.178872][T24919] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.205245][T25068] FAULT_INJECTION: forcing a failure. [ 754.205245][T25068] name failslab, interval 1, probability 0, space 0, times 0 [ 754.207714][T25064] ip6_vti0 speed is unknown, defaulting to 1000 [ 754.220889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.231287][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.240469][T25068] CPU: 0 UID: 0 PID: 25068 Comm: syz.9.6090 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 754.240499][T25068] Tainted: [W]=WARN [ 754.240506][T25068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.240519][T25068] Call Trace: [ 754.240526][T25068] [ 754.240535][T25068] __dump_stack+0x1d/0x30 [ 754.240578][T25068] dump_stack_lvl+0x95/0xd0 [ 754.240594][T25068] dump_stack+0x15/0x1b [ 754.240612][T25068] should_fail_ex+0x263/0x280 [ 754.240680][T25068] should_failslab+0x8c/0xb0 [ 754.240826][T25068] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 754.240921][T25068] ? kzalloc_noprof+0x52/0xa0 [ 754.240944][T25068] ? ip6_opt_dup+0x37/0x50 [ 754.240967][T25068] kmemdup_noprof+0x2b/0x70 [ 754.240992][T25068] ip6_opt_dup+0x37/0x50 [ 754.241025][T25068] ip6_setup_cork+0x4bc/0x680 [ 754.241050][T25068] ip6_make_skb+0x107/0x370 [ 754.241112][T25068] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 754.241236][T25068] udpv6_sendmsg+0x1578/0x1750 [ 754.241334][T25068] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 754.241431][T25068] inet6_sendmsg+0xac/0xd0 [ 754.241460][T25068] ? __pfx_inet6_sendmsg+0x10/0x10 [ 754.241555][T25068] ____sys_sendmsg+0x3c1/0x5b0 [ 754.241614][T25068] ___sys_sendmsg+0x195/0x1e0 [ 754.241718][T25068] __x64_sys_sendmsg+0xd4/0x160 [ 754.241742][T25068] x64_sys_call+0x194c/0x3020 [ 754.241773][T25068] do_syscall_64+0x12c/0x3b0 [ 754.241803][T25068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.241883][T25068] RIP: 0033:0x7ff7bb27ce59 [ 754.241901][T25068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.241928][T25068] RSP: 002b:00007ff7b9cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.241987][T25068] RAX: ffffffffffffffda RBX: 00007ff7bb4f5fa0 RCX: 00007ff7bb27ce59 [ 754.242001][T25068] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000004 [ 754.242012][T25068] RBP: 00007ff7b9cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 754.242025][T25068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.242038][T25068] R13: 00007ff7bb4f6038 R14: 00007ff7bb4f5fa0 R15: 00007ffd80368098 [ 754.242058][T25068] [ 754.509584][T24919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 754.520076][T24919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.532023][T25076] netlink: 'syz.9.6093': attribute type 1 has an invalid length. [ 754.533122][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.546848][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.554399][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 754.568743][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 754.606335][T25076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 754.624161][T25080] vlan2: entered allmulticast mode [ 754.631897][T25080] veth0_to_bond: entered allmulticast mode [ 754.958718][T24919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.061061][T24919] veth0_vlan: entered promiscuous mode [ 755.077308][T24919] veth1_vlan: entered promiscuous mode [ 755.193175][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 755.207498][ T68] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 755.333721][T24919] veth0_macvtap: entered promiscuous mode [ 755.349911][T24919] veth1_macvtap: entered promiscuous mode [ 755.389608][T24919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.456403][T24919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.518470][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.548620][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.636690][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.678672][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.971927][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 755.986312][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 756.805698][T25127] xt_hashlimit: size too large, truncated to 1048576 [ 758.286344][T25132] ip6_vti0 speed is unknown, defaulting to 1000 [ 758.579579][T25149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.606189][T25149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.825106][ T357] net_ratelimit: 2 callbacks suppressed [ 758.825121][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 758.844987][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 758.946150][T25148] ip6_vti0 speed is unknown, defaulting to 1000 [ 759.467261][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 759.481622][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 760.183464][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.211389][T25191] xt_nat: multiple ranges no longer supported [ 760.257619][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 760.271938][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 760.328148][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.358132][T25191] lo: Caught tx_queue_len zero misconfig [ 760.392334][T25148] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.536250][T25148] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.551097][T25148] bridge_slave_0: entered allmulticast mode [ 760.564149][T25148] bridge_slave_0: entered promiscuous mode [ 760.957353][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 760.971664][ T30] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 761.655760][T25148] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.670760][T25148] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.809822][T25148] bridge_slave_1: entered allmulticast mode [ 761.816618][T25148] bridge_slave_1: entered promiscuous mode [ 761.864013][T25216] random: crng reseeded on system resumption [ 761.910126][T25217] xt_cgroup: path and classid specified [ 762.674309][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 762.688668][ T357] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 762.978767][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.048907][T25148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.485100][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6122'. [ 763.531173][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.554768][T25148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.569164][T25232] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6124'. [ 763.578533][T25232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6124'. [ 763.579275][T25148] team0: Port device team_slave_0 added [ 763.594688][T25148] team0: Port device team_slave_1 added [ 763.610980][T25148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.618080][T25148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.644509][T25148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.656016][T25148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.663018][T25148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.689342][T25148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.719984][T25148] hsr_slave_0: entered promiscuous mode [ 763.726344][T25148] hsr_slave_1: entered promiscuous mode [ 763.732240][T25148] debugfs: 'hsr0' already exists in 'hsr' [ 763.738119][T25148] Cannot create hsr debugfs directory [ 763.755589][T25236] netlink: 256 bytes leftover after parsing attributes in process `syz.8.6126'. [ 764.369594][ T40] bond0 (unregistering): Released all slaves [ 764.381569][ T40] bond1 (unregistering): Released all slaves [ 764.393101][ T40] bond2 (unregistering): Released all slaves [ 764.438257][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 764.908805][ T12] net_ratelimit: 4 callbacks suppressed [ 764.908843][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 764.928808][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 765.069167][T25257] random: crng reseeded on system resumption [ 765.155413][ T40] bond3 (unregistering): Released all slaves [ 765.719566][ T40] tipc: Left network mode [ 765.742907][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 765.757316][ T12] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 765.893785][ T40] hsr_slave_0: left promiscuous mode [ 765.903623][T25279] netlink: 'syz.8.6138': attribute type 11 has an invalid length. [ 765.911460][T25279] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6138'. [ 765.920747][ T40] hsr_slave_1: left promiscuous mode [ 765.930070][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.937921][ T40] batadv0: mtu less than device minimum [ 765.944426][ T40] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.955364][ T40] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.966469][ T40] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.977247][ T40] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 765.988091][ T40] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 766.009622][ T28] audit: type=1400 audit(2000000679.641:4005): avc: denied { write } for pid=25270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.035594][ T28] audit: type=1400 audit(2000000679.641:4006): avc: denied { write } for pid=25295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.057771][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.065420][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.081572][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.089343][ T40] batman_adv: batadv0: Interface deactivated: dummy0 [ 766.096098][ T40] batman_adv: batadv0: Removing interface: dummy0 [ 766.104793][ T40] veth1_macvtap: left promiscuous mode [ 766.110354][ T40] veth0_macvtap: left promiscuous mode [ 766.115912][ T40] veth1_vlan: left promiscuous mode [ 766.121310][ T40] veth0_vlan: left promiscuous mode [ 766.195057][ T40] team0 (unregistering): Port device team_slave_1 removed [ 766.206805][ T40] team0 (unregistering): Port device team_slave_0 removed [ 766.259923][T25309] FAULT_INJECTION: forcing a failure. [ 766.259923][T25309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.410110][T25318] ip6_vti0 speed is unknown, defaulting to 1000 [ 766.499852][T25309] CPU: 1 UID: 0 PID: 25309 Comm: syz.9.6146 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 766.499905][T25309] Tainted: [W]=WARN [ 766.499912][T25309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.500000][T25309] Call Trace: [ 766.500007][T25309] [ 766.500014][T25309] __dump_stack+0x1d/0x30 [ 766.500037][T25309] dump_stack_lvl+0x95/0xd0 [ 766.500054][T25309] dump_stack+0x15/0x1b [ 766.500069][T25309] should_fail_ex+0x263/0x280 [ 766.500159][T25309] should_fail+0xb/0x20 [ 766.500173][T25309] should_fail_usercopy+0x1a/0x20 [ 766.500191][T25309] _copy_from_user+0x1c/0xb0 [ 766.500276][T25309] tipc_ioctl+0x92/0x1e0 [ 766.500302][T25309] sock_do_ioctl+0x73/0x230 [ 766.500337][T25309] sock_ioctl+0x41b/0x610 [ 766.500373][T25309] ? mutex_lock+0x57/0x90 [ 766.500393][T25309] ? __pfx_sock_ioctl+0x10/0x10 [ 766.500414][T25309] __se_sys_ioctl+0xce/0x140 [ 766.500441][T25309] __x64_sys_ioctl+0x43/0x50 [ 766.500513][T25309] x64_sys_call+0x1563/0x3020 [ 766.500615][T25309] do_syscall_64+0x12c/0x3b0 [ 766.500648][T25309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.500668][T25309] RIP: 0033:0x7ff7bb27ce59 [ 766.500684][T25309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.500721][T25309] RSP: 002b:00007ff7b9cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.500740][T25309] RAX: ffffffffffffffda RBX: 00007ff7bb4f5fa0 RCX: 00007ff7bb27ce59 [ 766.500755][T25309] RDX: 0000200000000080 RSI: 00000000000089e1 RDI: 0000000000000003 [ 766.500770][T25309] RBP: 00007ff7b9cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 766.500784][T25309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.500798][T25309] R13: 00007ff7bb4f6038 R14: 00007ff7bb4f5fa0 R15: 00007ffd80368098 [ 766.500846][T25309] [ 766.816157][T25326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6148'. [ 766.838179][ T28] audit: type=1400 audit(2000000680.427:4007): avc: denied { write } for pid=25308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.877812][ T28] audit: type=1400 audit(2000000680.464:4008): avc: denied { write } for pid=25332 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 766.970761][T25338] random: crng reseeded on system resumption [ 767.340744][T25341] tap0: tun_chr_ioctl cmd 35108 [ 767.346006][T25346] ip6_vti0 speed is unknown, defaulting to 1000 [ 767.420913][T25351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6156'. [ 767.843669][T25360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6158'. [ 767.867336][T25148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 767.875809][T25148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.883501][T25148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 767.892086][T25148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.899663][T25148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 767.908028][T25148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.915660][T25148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 767.924153][T25148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.962313][T25148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.974480][T25148] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.984940][T17744] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.992040][T17744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.018631][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.025736][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.153205][T25148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.275196][T25148] veth0_vlan: entered promiscuous mode [ 768.283991][T25148] veth1_vlan: entered promiscuous mode [ 768.303974][T25148] veth0_macvtap: entered promiscuous mode [ 768.313565][T25148] veth1_macvtap: entered promiscuous mode [ 768.326735][T25148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.340472][T25148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.353095][T13513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.363034][T13513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.372210][T13513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.381455][T13513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.521042][T25406] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6105'. [ 768.705990][T25422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6167'. [ 770.779532][T25447] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6171'. [ 771.658064][T25397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.761611][T25457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6176'. [ 771.833287][T25465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6180'. [ 771.846586][T25468] ================================================================== [ 771.850495][ T28] audit: type=1400 audit(2000000685.103:4009): avc: denied { open } for pid=25458 comm="syz.2.6177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 771.854681][T25468] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 771.881085][T25468] [ 771.883397][T25468] write to 0xffffffff893d42c0 of 4 bytes by task 25467 on cpu 0: [ 771.891102][T25468] avc_ss_reset+0x20c/0x240 [ 771.895599][T25468] security_set_bools+0x300/0x340 [ 771.900636][T25468] sel_commit_bools_write+0x1e9/0x270 [ 771.906001][T25468] vfs_writev+0x42b/0x900 [ 771.910319][T25468] do_writev+0xe9/0x210 [ 771.914457][T25468] __x64_sys_writev+0x45/0x50 [ 771.919125][T25468] x64_sys_call+0x1c0c/0x3020 [ 771.923790][T25468] do_syscall_64+0x12c/0x3b0 [ 771.928371][T25468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.934249][T25468] [ 771.936556][T25468] read to 0xffffffff893d42c0 of 4 bytes by task 25468 on cpu 1: [ 771.944170][T25468] avc_policy_seqno+0x15/0x30 [ 771.948837][T25468] selinux_file_permission+0x1ca/0x320 [ 771.954292][T25468] security_file_permission+0x3a/0x70 [ 771.959649][T25468] kernel_read+0x7e/0x170 [ 771.963970][T25468] load_elf_binary+0x238/0x1a20 [ 771.968905][T25468] bprm_execve+0x466/0x9a0 [ 771.973309][T25468] kernel_execve+0x5ea/0x630 [ 771.977888][T25468] call_usermodehelper_exec_async+0x196/0x250 [ 771.983946][T25468] ret_from_fork+0x146/0x330 [ 771.988527][T25468] ret_from_fork_asm+0x1a/0x30 [ 771.993280][T25468] [ 771.995583][T25468] value changed: 0x00000001 -> 0x00000002 [ 772.001282][T25468] [ 772.003588][T25468] Reported by Kernel Concurrency Sanitizer on: [ 772.009739][T25468] CPU: 1 UID: 0 PID: 25468 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 772.020932][T25468] Tainted: [W]=WARN [ 772.024719][T25468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.034762][T25468] ================================================================== [ 772.219142][T25470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=25470 comm=syz.0.6175 [ 772.434604][ T28] audit: type=1400 audit(2000000685.103:4010): avc: denied { perfmon } for pid=25458 comm="syz.2.6177" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 772.456524][ T28] audit: type=1400 audit(2000000685.103:4011): avc: denied { kernel } for pid=25458 comm="syz.2.6177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 772.581237][T25475] ip6_vti0 speed is unknown, defaulting to 1000 [ 772.591490][ T28] audit: type=1400 audit(2000000685.374:4012): avc: denied { create } for pid=25454 comm="syz.0.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 772.682022][ T28] audit: type=1400 audit(2000000685.384:4013): avc: denied { prog_load } for pid=25454 comm="syz.0.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 772.772649][ T28] audit: type=1400 audit(2000000685.384:4014): avc: denied { bpf } for pid=25454 comm="syz.0.6175" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 772.861306][ T28] audit: type=1400 audit(2000000685.393:4015): avc: denied { ioctl } for pid=25454 comm="syz.0.6175" path="socket:[86587]" dev="sockfs" ino=86587 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 772.936758][ T28] audit: type=1400 audit(2000000685.393:4016): avc: denied { setopt } for pid=25454 comm="syz.0.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 773.002130][ T28] audit: type=1400 audit(2000000685.393:4017): avc: denied { create } for pid=25454 comm="syz.0.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.056543][ T28] audit: type=1400 audit(2000000685.393:4018): avc: denied { write } for pid=25454 comm="syz.0.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1