last executing test programs: 6m9.890682472s ago: executing program 4 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0x100000001]}, &(0x7f0000000340), 0x0, 0x8) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0xb, 0x2, 0x40, 0x42, r3, 0x4}, 0xfd82) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1006, r4, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x12, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904", 0x10}], 0x1}, 0x4090) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x120, 0x178, 0xc, 0x120, 0x178, 0x218, 0x258, 0x258, 0x218, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0x0, 0x0, 0xff000000], [0xffffffff, 0xff], 'pim6reg0\x00', 'ip6gretap0\x00', {}, {}, 0x2e, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x80, 0x2e, 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x200, 0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xeb3d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 6m9.520720336s ago: executing program 4 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, &(0x7f00000014c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x0, 0x20, @loopback, @mcast2, 0x20, 0x80, 0x5, 0x1000}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @func={0xd, 0x0, 0x0, 0xc, 0x3}, @union={0xf, 0x1, 0x0, 0x5, 0x1, 0xfffffff7, [{0xc, 0x5, 0x2}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x61, 0x2e, 0x30]}}, &(0x7f00000004c0)=""/123, 0x51, 0x7b, 0x0, 0x3c775300, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0x8, 0xc, 0x4008, 0x1, 0xb5, '\x00', r7, r8, 0x0, 0x3, 0x2, 0x2}, 0x50) r9 = openat$cgroup_procs(r6, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) timer_settime(r5, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x1, @mcast1, 0xa}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}, 0xfff5}], 0x400000000000172, 0x4000000) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 6m8.104605943s ago: executing program 4 (id=1053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000680), 0x6e, 0x0}, 0x40) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) socket$kcm(0xa, 0x3, 0x3a) recvmsg(r0, 0x0, 0x40000002) 6m3.800630635s ago: executing program 4 (id=1064): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r2 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x2, 0x0) tgkill(r6, r6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r2, @ANYBLOB], 0x50) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 6m3.508586205s ago: executing program 4 (id=1067): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, &(0x7f00000014c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x0, 0x20, @loopback, @mcast2, 0x20, 0x80, 0x5, 0x1000}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @union={0xf, 0x1, 0x0, 0x5, 0x1, 0xfffffff7, [{0xc, 0x5, 0x2}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x61, 0x2e, 0x30]}}, &(0x7f00000004c0)=""/123, 0x45, 0x7b, 0x0, 0x3c775300, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0x8, 0xc, 0x4008, 0x1, 0xb5, '\x00', r5, r6, 0x0, 0x3, 0x2, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) timer_settime(r4, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x1, @mcast1, 0xa}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}, 0xfff5}], 0x400000000000172, 0x4000000) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x3c, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfd, {0x17, 0x1, 0x1, 0x0, 0x1, 0x1, 0x40, 0x4, 0x0, 0x5b2, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 6m3.033315347s ago: executing program 4 (id=1071): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x8, 0x20000f7}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='basic\x00', 0x100c3, &(0x7f0000000180)={@_ha_fsid={[0x0, 0xd]}, {0x7e7, 0x1000, 0x2, 0x5}}, 0xd898, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffe}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0500000000000000000006000000", @ANYRES32=r9, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf9a, 0x62}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x801) 6m3.010234638s ago: executing program 32 (id=1071): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x8, 0x20000f7}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='basic\x00', 0x100c3, &(0x7f0000000180)={@_ha_fsid={[0x0, 0xd]}, {0x7e7, 0x1000, 0x2, 0x5}}, 0xd898, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffe}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0500000000000000000006000000", @ANYRES32=r9, @ANYBLOB="0800050003d00000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xf9a, 0x62}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x801) 5m46.625518091s ago: executing program 2 (id=1166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="080088fb0200040001"], 0xfce) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/key-users\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x3, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffc}, @hopopts]}}}}}}}, 0x0) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffff1f, 0x70bd2a, 0x100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x61a}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x9, 0x6}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x10, 0x25, 0x1, 0x1, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 5m45.828606735s ago: executing program 2 (id=1169): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0xfffffffffffffffe, 0x800000, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x81901) r4 = fspick(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) fchown(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000040)='map=off', 0x0, r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100007000000000020"], 0x24, 0x1) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000001880)=""/4096, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="0500409e7caa8fb51a4707d084c6634f2ee10d6af52e6f9f50e2e6e4e6f48dfefa69f4028091b6f2d7fcf760f5e8b23633dde7f5cb8bf48b040d8a0f65f23ff58700d38c06523a28dde114627ff1947633dbc24377bafbd1b3ef208b40ac2078c2315267620d3e3c7f455ac0434aee7059846ffe48fb9c0ea3d89ea0d4ee899fc614652e3111bf42e2ff7966bbf4b43ab033d94e095b271f364dd3c5ed89509d3230742d9719c27f", @ANYRESOCT=r0, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767310000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) 5m45.468774859s ago: executing program 2 (id=1173): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x8000032, 0x43a1bd56, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000753bc97e740405d63e7ff00af4ca856307e1e15f1c8a819370f7e8b45e4799252c5dff231a30245f40631e675f4af9283c5e04201ef83bd72a60080264c93c175b07e99f6240dac8a68f2240c57ed03ca351acda204a27455e951dfb7977a65c46d4003fd32454c8fa98a7b931cd94adbeb062732973976cd2feeaac1537c14fc69ba79bd52ed3be38df8c59615b40eaa80a45db147a9000000000000"], 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) 5m45.404119084s ago: executing program 2 (id=1175): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2148c5, &(0x7f0000000040), 0x1, 0x2cf, &(0x7f0000000580)="$eJzs3c9r02AYwPFn7dZ2HVt7GIKC+KAXvYSt/gVFNhALyraK8yBkLtXS2I6mViridvPqX+AfMPTmSUG9yy7evIuXXQQvO6iVpYntuojtfjRz+35g5Nn75mneNm/Hk7Akm7eePygVHKNg1iSSUImIrMmWSHo78gx5y4gbx6TTmlwa+/757Pzi7WvZXG5mTnU2u3A5o6oT5949evLy/Ifa2M3XE2/jspG+s/kt82Xj1MbpzV8L/qtXRExdqlRq5pJt6XLRKRmqN2zLdCwtlh2rWtOO/oJdWVlpqFleHk+uVC3HUbPc0JLV0FpFa9WGmvfMYlkNw9DxZPfwj71o3xn5nzGRbCtOHPyAMGijQY3VataMBnbm1wcxKAAAcLSEVf/fLzpadLRc2VHf767/I9JH/S8SVP/jr/Lrc3NmNuxR4HBt1/9J7/u7E/U/AAAAAAAAAAAAAAAAAAAAAAD/gy2RVLPZTG01m+7S/4l7V4T7v4c9ThwOf7+z/0+m+cUh8S7cS4jYz+r5er61bPVnC1IUWyyZGhH54c4HTyuevZqbmVJXWt7bq17+aj0flbif70sH50+38rUzf1VGJNm5/YykZDI4PxOQX8/H5OKFZtzbsiWGpOTTXamILcvuvG7nP51WvXI915U/6q4HAAAAAMBxYOgfu47f3X5D/duGdPW3GtvnByTVPj8wE3R+oOv4eljODIf3vgEAAAAAOEmcxuOSadtW9V9Bot3ysfesAwyi+34d//kHfadHA7r8/4gZ7IfQGSR6XXlYRLyWN+EMdW9BZB8fb7SPvTyyez7HRGRHy+Tg5/yrF318PXsLvj7sfdKG9RcJAAAAwGHxi/4T85BMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOoF5vHuavv5d7j3VsLhrOuwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOht8BAAD//6dmDZc=") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x18000) symlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x11}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x21, 0x9, 0x6, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff, 0x100fffe00, 0xff000000], 0x4e20, 0x4e20, 0x4e21, 0x4e24, 0xdb, 0x8, 0x8, 0x0, 0x99}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 5m45.226592905s ago: executing program 2 (id=1177): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x200000, 0x0, 0x29}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) quotactl_fd$Q_GETQUOTA(r1, 0x435e85c7c3e68eec, r3, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40010040) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000580)="a8f208e902528788679a2ed80048453cd16b6ce4f1a2c14c11ef6581fdeffa8ff8b7b11703ab4488607e06563042112652993866528cb08b5e47fe6aeabb5dea5911122d444c150efae8b9a0a3e537d9b0d6f2eb2ca06aa0a32211d06968f54f82cf89df72e231824800377d98bef956fee89402dd90eb840d8c594dfa0840ba4329ca8393d95f5519653c5a42813791de092cf75a0e746a8d5609b538fe4380c61a14f22925886ccae9") r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x20080000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100001042abd8d000000000000000000", @ANYRES32=0x0, @ANYBLOB="cc81000000000000300012800b000100697036746e6c00002000028006000f000000000014000200fe8000000000000000000000000000171400030068"], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x800000000000264, 0x3}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000009, 0x10012, 0xffffffffffffffff, 0xffffd000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) 5m44.540724612s ago: executing program 2 (id=1182): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r2 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x2, 0x0) tgkill(r7, r7, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r2, @ANYBLOB], 0x50) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 5m44.540449852s ago: executing program 33 (id=1182): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r2 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet6(0xa, 0x2, 0x0) tgkill(r7, r7, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000040000000000eaff001e00009763df13003ec1cb3440cd6c64281fb0d28842873b6633916dcc8d8de3833ffafaa30ac26b9a2dbdb2048f6ea043353f2d940db158cdcd98ddcfeb65", @ANYRES32, @ANYRES32=r2, @ANYBLOB], 0x50) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 4m19.668719383s ago: executing program 3 (id=1657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4e, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/152, 0x98, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x1) getdents(0xffffffffffffffff, 0x0, 0x58) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x8000) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) 4m19.26846062s ago: executing program 3 (id=1660): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x19, &(0x7f0000001fc0)={0x19, 0x546d0581, 0xc}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x20000008b}, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x6, 0x1, 0x7ff, 0x8, 0x52, 0x3, 0x1}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0x8, @remote, 0x200}}, 0xe292, 0x6, 0x2, 0x87, 0x96, 0x8b3, 0x9}, &(0x7f0000000340)=0x9c) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r10 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000002000/0x4000)=nil) shmctl$SHM_INFO(r10, 0xe, &(0x7f00000000c0)=""/61) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="79610000f5ffffff00007e00000008000300d8f289920e6e195ef13a086f360338", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) 4m18.254365929s ago: executing program 3 (id=1662): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c401, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$eJzs3T1oO2UcB/DfXZKmtUWqLoL4AiKihVIHQXDRRaEgpYgIKlREnKQVaotb4+TioLNKJ5ciblZHcSkugmvVDnVxsDhYHHSIXC4NaZv0LZfkT+/zgfS5S57nnieQ7/MkhbsLoLRmI+K5iKhExFxE1CIi6a7wSP6Ybe9uT+2tRDSbL/+VtOrl+7mTdtMR0YiIZyKqJ69t7r5++M/+i49/vFF77Mvd16ZG9f4iJjtbR4cHLx1/sfTRN4tPbabt52baZff7KFLS47lqEnHvMDq7QyTVcY+Aq1j+4OtfstzfFxGPtvJfi7Qd2U/WJ36oxZOf92v76Z8/PzDKsQLFazZr2RrYaAKlk7a+AyfpfETk22k6P59/h/+1ksS7a+vvz72ztrH6ds/pozLyCQsYRJL9Ns9+gL/wXf3b6TP5/6OS5/9Knh7ySIGhmIk4eGV557ds+7i1ilvK4dZ7MC+y/M+9ufVEdPIPlMWF+a+NZ0zAaFj/obzkH26BG2ZX/qG8uvNfH/dggJGy/sMt1vkffqPny/IP5SX/UF5n8j/C83GBcevOPwBQLs36uM9ABsZl3PMPAAAAAAAAAAAAAAAAAABw3vbU3srJo1+doi8T+ONnEUfPR0T1dP/1dm9pq5xs/b3r7ySr1pHkzS510a3M3nh4oOEP7KuCz75euuaF3O/+vdj+r+unh4Zz3A9P7/a9tt3WakQjq7xQrZ7//Cftz9+l+h7/nksa1t66WgdFSc7sP/tqccfeukGb/3aK6/8mFvcjvs/mn4Ve818a97fK3vPPzAC3SZxol+/9O8joAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGKX/AwAA//+XFmn2") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs={0x0, 0x0, 0xfffffffb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2, 0x1444, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x2}, 0x10414a, 0x1, 0x6, 0x1, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m17.085185688s ago: executing program 3 (id=1665): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c401, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2, 0x1444, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x2}, 0x10414a, 0x1, 0x6, 0x1, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m16.601552041s ago: executing program 3 (id=1669): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01002c00e1d586ccee8924000000240000000600000004000000000000070000000000000000020000000000000000000000da00"/66], 0x0, 0x42, 0x0, 0x1}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000004000000000000400009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='/cpu -piKds'], 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r10], 0x54}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf250000fff0", @ANYRES32=r5, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r3, @ANYBLOB="1806d5fde802265a6af9210a895d907f8f5bcdc1b5c023945d2f880d335fe38400e64918b2ce318f45a50b5a89fb8eb95064cea56ceee059e09038b2d900026e69117b5fa207773bf27d34c197d1373e790555462e76ff227202c52316e7509d60c2a2ffa77b73947ab91b9476bc"], 0x28}}, 0x20040000) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x80000001) r11 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0xc}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x7f, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x4, 0x1c, 0xd, 0x1, 0x2, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) 4m16.108768145s ago: executing program 3 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000680), 0x6e, 0x0}, 0x40) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a319e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4m16.101802675s ago: executing program 34 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000680), 0x6e, 0x0}, 0x40) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a319e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 46.143219427s ago: executing program 6 (id=3529): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110a28bd7000fddbdf2509000000050008000200000008000300", @ANYRES32=r2], 0x2c}}, 0x48814) 46.072722162s ago: executing program 6 (id=3530): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x52000, &(0x7f0000000040)="0e16fd83b108103422a1523452ba5af5c6e69d766018c0cf4765163b7adeaac73e5248996d33", 0x26, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d04280700000000000000008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$packet(r3, &(0x7f0000000980)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) 46.038829654s ago: executing program 6 (id=3531): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x52000, &(0x7f0000000040)="0e16fd83b108103422a1523452ba5af5c6e69d766018c0cf4765163b7adeaac73e5248996d33", 0x26, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d04280700000000000000008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$packet(r3, &(0x7f0000000980)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) 45.828550648s ago: executing program 6 (id=3534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xc}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x1, 0xfffd, 0x4, 0x73}, {0x5, 0x2, 0x2, 0x2, 0xd012, 0x10000}, 0xff6, 0x3, 0x2ff}}, @TCA_TBF_PBURST={0x8, 0x7, 0x141d}, @TCA_TBF_BURST={0x8, 0x6, 0x100}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 44.161849082s ago: executing program 6 (id=3538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x30bd2c, 0x10000000, {0x0, 0x0, 0x0, 0x0, 0x8209, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x2, 0x6, {{0xb, 0x4, 0x1, 0x27, 0x2c, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @remote, {[@generic={0x89, 0x9, "2f7144285432db"}, @ra={0x94, 0x4, 0x3}, @generic={0x44, 0xa, "620d53ed54a90a52"}]}}}}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffeb4, 0xa00}]) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$nci(r5, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x5, {0x0, 0x9}}, 0x5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) r6 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = timerfd_create(0x0, 0x80000) timerfd_gettime(r7, &(0x7f0000000040)) fcntl$notify(r6, 0x402, 0x3d) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000000)=0x800) mkdirat(r8, &(0x7f0000002040)='./file0\x00', 0x5) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv2(r11, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) 43.193181708s ago: executing program 6 (id=3549): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) syz_io_uring_setup(0x890, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000300), 0x0) set_mempolicy(0x1, 0x0, 0xffffffff) set_mempolicy(0x1, 0x0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, &(0x7f0000001380)=0x42df, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x82, &(0x7f0000001480)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r1, @ANYRESDEC, @ANYBLOB="3d80fd76fd066f7c691f2212af", @ANYRES16, @ANYRES8=r0], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x300, 0x180, 0x98, 0x0, 0x300, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f0000000e00), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xff}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0xff, 'veth1_to_batadv\x00', 'hsr0\x00', {0xff}, {0xff}, 0x33, 0x5, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, 'm!'}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd3, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 'syzkaller1\x00', 'macvlan1\x00', {0xff}, {0xff}, 0xdf, 0x1, 0x74}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x2, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @private=0xfff, 0x0, 0xffffffff, 'vxcan1\x00', 'macsec0\x00', {}, {}, 0x11, 0x2, 0x20}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 26.578639445s ago: executing program 35 (id=3549): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) syz_io_uring_setup(0x890, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000300), 0x0) set_mempolicy(0x1, 0x0, 0xffffffff) set_mempolicy(0x1, 0x0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x3, &(0x7f0000001380)=0x42df, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x82, &(0x7f0000001480)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r1, @ANYRESDEC, @ANYBLOB="3d80fd76fd066f7c691f2212af", @ANYRES16, @ANYRES8=r0], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x300, 0x180, 0x98, 0x0, 0x300, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f0000000e00), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xff}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0xff, 'veth1_to_batadv\x00', 'hsr0\x00', {0xff}, {0xff}, 0x33, 0x5, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0xe, 'm!'}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd3, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 'syzkaller1\x00', 'macvlan1\x00', {0xff}, {0xff}, 0xdf, 0x1, 0x74}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x2, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @private=0xfff, 0x0, 0xffffffff, 'vxcan1\x00', 'macsec0\x00', {}, {}, 0x11, 0x2, 0x20}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 6.667050298s ago: executing program 5 (id=3749): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000c40), &(0x7f00000000c0)=0x8) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r1, 0x80000001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000040)={0x1d, r5}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000240)={0x1f, 0x251, @none, 0xfff7}, 0xe) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) 5.213829646s ago: executing program 8 (id=3757): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 4.959128224s ago: executing program 8 (id=3758): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d90200000000000000f0a4a8d2", "e1ffffff", "72392a24199b5d03"}, 0x28) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e610000", 0xdf}, {&(0x7f00000039c0)="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", 0xfe3}, {&(0x7f00000049c0)="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", 0x5af}], 0x3) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1fe0}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 4.877221979s ago: executing program 8 (id=3759): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x80000009, 0xb40b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) unshare(0x28000600) r0 = syz_open_dev$rtc(&(0x7f0000000380), 0x0, 0x189040) ioctl$RTC_RD_TIME(r0, 0x4008700c, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r1, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000040)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouser_xattr}, {@resgid}, {@acl}, {@inode_readahead_blks}]}, 0x0, 0x499, &(0x7f0000000ec0)="$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") r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x41, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000540)) r5 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000200)) 4.532724692s ago: executing program 8 (id=3764): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x52000, &(0x7f0000000040)="0e16fd83b108103422a1523452ba5af5c6e69d766018c0cf4765163b7adeaac73e5248996d33", 0x26, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d04280700000000000000008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$packet(r3, &(0x7f0000000980)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f00000004c0)="c4a5520041575a9646a5c0d8c17456ab8943fabe86c5dc1086a2566e6fb8ef39757aa1833bdaa3d7d0ae0fa84bec9a4ac5f8094ec6f68082afad22bcb5c2fcdefc3f87fb8b3d3041317ec5cc8e2df11718216f9d4d00dbba8738f0c901aa10179ec5e683213c050f8a05738851e30438cbc5a7b5607e0880f5c0eb5c31d9b8cf9b42d37f515a77fdaf68b0a02ce747e14ea0f38abd31d308", &(0x7f0000000680)=""/254, &(0x7f0000000780)="b562ae1340fb69b7fa661bd42b63ee34208b7686431c2b6a0dd5b46168ac592d2ba6381d419c2a60df9192ef723b1e5c0358d3aa577a2ffa1f3fc21613c28ad988a42e7e93e208d56547c934d73b2b124f4596f4ac4073aaa9735630a453924f9bbbdf1085927c490127ef9fb5b4d6f864f1e5b6f78d9f6306a96a95e4fc401b3d482d285e7d117d6224033254d2f1e25fd1423435860cb74b34533a3cb09f785a41a25655c49825f266214c5771f42c7d7e9b64949ec456267546879e98a0f78c270f26832d09cccd96e3b04460287b07a3e5a7f7a69e836291664a6319ced6b78651719bc3d450f2c95ae109f3740c25b989d3", 0x0, 0x2, r3}, 0x38) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r6 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, 0x0) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) io_uring_enter(r3, 0x1445, 0xcf94, 0x1, &(0x7f0000000000)={[0x7]}, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) 3.664830801s ago: executing program 0 (id=3767): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 3.664379941s ago: executing program 7 (id=3768): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000120001"], 0x4c}}, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xdb6d4b04508a3c99) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) fadvise64(r1, 0x8000080000000, 0x1007, 0x1) 3.629425994s ago: executing program 0 (id=3769): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x52000, &(0x7f0000000040)="0e16fd83b108103422a1523452ba5af5c6e69d766018c0cf4765163b7adeaac73e5248996d33", 0x26, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d04280700000000000000008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$packet(r3, &(0x7f0000000980)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f00000004c0)="c4a5520041575a9646a5c0d8c17456ab8943fabe86c5dc1086a2566e6fb8ef39757aa1833bdaa3d7d0ae0fa84bec9a4ac5f8094ec6f68082afad22bcb5c2fcdefc3f87fb8b3d3041317ec5cc8e2df11718216f9d4d00dbba8738f0c901aa10179ec5e683213c050f8a05738851e30438cbc5a7b5607e0880f5c0eb5c31d9b8cf9b42d37f515a77fdaf68b0a02ce747e14ea0f38abd31d308", &(0x7f0000000680)=""/254, &(0x7f0000000780)="b562ae1340fb69b7fa661bd42b63ee34208b7686431c2b6a0dd5b46168ac592d2ba6381d419c2a60df9192ef723b1e5c0358d3aa577a2ffa1f3fc21613c28ad988a42e7e93e208d56547c934d73b2b124f4596f4ac4073aaa9735630a453924f9bbbdf1085927c490127ef9fb5b4d6f864f1e5b6f78d9f6306a96a95e4fc401b3d482d285e7d117d6224033254d2f1e25fd1423435860cb74b34533a3cb09f785a41a25655c49825f266214c5771f42c7d7e9b64949ec456267546879e98a0f78c270f26832d09cccd96e3b04460287b07a3e5a7f7a69e836291664a6319ced6b78651719bc3d450f2c95ae109f3740c25b989d3", 0x0, 0x2, r3}, 0x38) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r6 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, 0x0) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) io_uring_enter(r3, 0x1445, 0xcf94, 0x1, &(0x7f0000000000)={[0x7]}, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) 3.628841614s ago: executing program 1 (id=3770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 3) 3.618039495s ago: executing program 5 (id=3771): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0000200627269646765"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.570250198s ago: executing program 7 (id=3772): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, &(0x7f00000014c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x0, 0x20, @loopback, @mcast2, 0x20, 0x80, 0x5, 0x1000}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @func={0xd, 0x0, 0x0, 0xc, 0x3}, @union={0xf, 0x1, 0x0, 0x5, 0x1, 0xfffffff7, [{0xc, 0x5, 0x2}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x61, 0x2e, 0x30]}}, &(0x7f00000004c0)=""/123, 0x50, 0x7b, 0x0, 0x3c775300, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0x8, 0xc, 0x4008, 0x1, 0xb5, '\x00', r7, r8, 0x0, 0x3, 0x2, 0x2}, 0x50) r9 = openat$cgroup_procs(r6, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) timer_settime(r5, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x1, @mcast1, 0xa}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}, 0xfff5}], 0x400000000000172, 0x4000000) futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1) 3.570045448s ago: executing program 1 (id=3773): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0xfffffffffffffffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844ba8cb89e14f00806", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fstat(r2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_bridge\x00', {}, 0x102}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e24, @multicast2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000a80)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/hibernate_compression_threads', 0x24000, 0x2) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r4) 3.54560168s ago: executing program 7 (id=3774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r7, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r8 = socket(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e21, 0x20000002, @mcast2, 0x4}, 0x1c) 3.510812982s ago: executing program 5 (id=3775): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket(0x18, 0x1, 0x2) getsockname$packet(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(r4, 0x406, r1) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 3.333038254s ago: executing program 0 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r0, 0x0, 0x40000002) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a319e"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.303524186s ago: executing program 8 (id=3777): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002940), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000020000001a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB="8d7188daa2591ac03828a4b1d64dfbe88b9064c65558db3adad444e6f400a934cb72a077272b4af76902ba096de10ead2c06db53b38151d203ada9d4e95689d8d9f41b3423304562d217a84cdeb835dc710c265bc7cab53d07f1f5b4dbfadd597753ee91bba56ca7a89319f49ff014d2"], 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x8, 0x6}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r5, 0x5, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'gretap0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000007000000000000ef04000000b707f2fffcffffff9500000000000000018900084400000018170000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', r8, 0x25, r5, 0x8, &(0x7f0000000480)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x2a5, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000540)=[{0x2, 0x2, 0x4, 0x5}, {0x0, 0x1, 0x2, 0x7}, {0x5, 0x4, 0xd, 0x5}, {0x2, 0x4, 0xc, 0x8}, {0x2, 0x2, 0xe, 0x1}, {0x1, 0x2, 0x8}], 0x10, 0xf3c3}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x3, 0x4eb, &(0x7f0000001500)="$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") r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendmsg$NFT_BATCH(r11, &(0x7f0000000d80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x1c0, 0x2, 0xa, 0x3b570b2791f3048e, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x7e, 0x6, "8f5d7add6388ac479bb0274ec4c5403d33626563c8526077cc04b3154a6b21c203469c0e76c647c9eb116423167e05c4b7b451c29044423d4f97abd3e86034b8e478b1707553b33642f0fe091b99d816841cfda3c30c7c1b5e4863c3d37c528ff1ca6611fa030005b1ba8a339da71dc91daa4e1c02b0246b403f"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xda, 0x6, "a4467d8358e793b0f7c71ad59eba468d4ddda177b096ec110a2422ee240bc6f7ab465fe1d88a1777c5c28f3934f150c28a83b5104285d344728d83c83ad98cd8a6156bb0b6520539899c488602172678157eb5fc551db5804c383946ffbdbe64a744ed42e722bcb84d2aed81a2d39de9f8cfdf0d0df6c10f259c4fac28fadb5cc09858479d05904d31a902c3a3f3841b8387b0256e414c447931615f92d683186db8d35f8e129ec8bf55a4fc69bc436ca5c6b6a69c673f339945ce264ab3b194c599465f0f4fb195f1d30f96b7cb6800000000000000"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xb4, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'tunl0\x00'}, {0x0, 0x1, 'geneve0\x00'}, {0x0, 0x1, 'dvmrp0\x00'}, {0x0, 0x1, 'batadv0\x00'}, {0x0, 0x1, 'bond_slave_0\x00'}, {0x0, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x29c}, 0x1, 0x0, 0x0, 0x40000}, 0x40008000) r13 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r13, 0x9000) write$cgroup_subtree(r13, &(0x7f00000006c0)=ANY=[@ANYBLOB="2b637075616363742000726c696d6974202b726c696d6974202b6d656d6f728af0e51979202d706572665f6576656e74202d6672656572657220d81c5a4beb"], 0x36) fallocate(r13, 0x0, 0x0, 0x8800000) r14 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x21) pwritev2(r14, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2.495926191s ago: executing program 5 (id=3778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(r7, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r8 = socket(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e21, 0x20000002, @mcast2, 0x4}, 0x1c) 2.20333429s ago: executing program 7 (id=3779): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 1.713254474s ago: executing program 0 (id=3780): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.608710621s ago: executing program 0 (id=3781): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.pending_reads\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) fchown(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000140)={0x1, 0x2, 0x3}) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000600)={0x4, 0x100009, 0x40000}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYBLOB="45231728737c32fe9df58e2117619f7f321fdbd8b709d0642cac5da79dbcc094ff6faa9416f7d7cf1e540de958b6ae1adf67857f0704457b5cab7dfcc2577bd4de24f973cdfa6f00fc7db1f806414774b2fbcbddba56f6ff8d85f78e6f3a60d5d1caeb98dacb18b2f4fb22db7bebbda0534f019e23e36616513d5d114e1449c02b91cbe7d7262f467a2cb45df8eca2e10e5834a54af8eacdf718a58157b709abe1540d14db99822e9b4d62c930bfee3a1be6c20badcccc86cceff430a22ca9ac4de7367ec78bcc8e09803c", @ANYRES32=r3, @ANYBLOB="0300000000000000070300000200000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB], 0x50) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000280)) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x64}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in=@empty, @in=@loopback}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000400)=0xe8) 1.454199741s ago: executing program 1 (id=3782): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000c40), &(0x7f00000000c0)=0x8) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r1, 0x80000001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000040)={0x1d, r5}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000240)={0x1f, 0x251, @none, 0xfff7}, 0xe) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) 1.137384263s ago: executing program 5 (id=3783): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x52000, &(0x7f0000000040)="0e16fd83b108103422a1523452ba5af5c6e69d766018c0cf4765163b7adeaac73e5248996d33", 0x26, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d04280700000000000000008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$packet(r3, &(0x7f0000000980)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f00000004c0)="c4a5520041575a9646a5c0d8c17456ab8943fabe86c5dc1086a2566e6fb8ef39757aa1833bdaa3d7d0ae0fa84bec9a4ac5f8094ec6f68082afad22bcb5c2fcdefc3f87fb8b3d3041317ec5cc8e2df11718216f9d4d00dbba8738f0c901aa10179ec5e683213c050f8a05738851e30438cbc5a7b5607e0880f5c0eb5c31d9b8cf9b42d37f515a77fdaf68b0a02ce747e14ea0f38abd31d308", &(0x7f0000000680)=""/254, &(0x7f0000000780)="b562ae1340fb69b7fa661bd42b63ee34208b7686431c2b6a0dd5b46168ac592d2ba6381d419c2a60df9192ef723b1e5c0358d3aa577a2ffa1f3fc21613c28ad988a42e7e93e208d56547c934d73b2b124f4596f4ac4073aaa9735630a453924f9bbbdf1085927c490127ef9fb5b4d6f864f1e5b6f78d9f6306a96a95e4fc401b3d482d285e7d117d6224033254d2f1e25fd1423435860cb74b34533a3cb09f785a41a25655c49825f266214c5771f42c7d7e9b64949ec456267546879e98a0f78c270f26832d09cccd96e3b04460287b07a3e5a7f7a69e836291664a6319ced6b78651719bc3d450f2c95ae109f3740c25b989d3", 0x0, 0x2, r3}, 0x38) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r6 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, 0x0) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) io_uring_enter(r3, 0x1445, 0xcf94, 0x1, &(0x7f0000000000)={[0x7]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) 1.048737059s ago: executing program 7 (id=3784): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) poll(0x0, 0x0, 0x9) r4 = syz_clone3(&(0x7f0000000300)={0x101080, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x40}, 0x0, 0x0, &(0x7f00000006c0)=""/251, &(0x7f0000000240)=[r1], 0x1}, 0x58) prlimit64(r4, 0xe, &(0x7f0000000280)={0x6, 0xb}, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x80000ff, @loopback, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4815}, 0x24000053) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 888.64727ms ago: executing program 1 (id=3785): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 699.876432ms ago: executing program 0 (id=3786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) get_robust_list(0x0, &(0x7f0000000600)=0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet(0x2, 0x2, 0x0) r3 = msgget$private(0x0, 0x3ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x1000) msgsnd(r3, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgrcv(r3, 0x0, 0x0, 0x3, 0x3000) msgsnd(r3, 0x0, 0x8, 0x800) msgsnd(r3, &(0x7f0000000680)={0x3, "17a8907dc648197e738a1bd973844cb887f0495c318a8d6e5a1b3962bd874d7faa48dc2c89d51d77ad464bda6b6bf8295c28c1c9f379797c7b0724b94f091a1fb948e20fd916414a1cf3740f6c08ae5380a3e3d611b6a8710b628a80fc41e4fbb74f5d9de00a020a69d0ea73f2bdb97f305da83c2a9961c636ad63c2690d13331b0de7c4c469b8d39900b52c9ecfed900ed0e0cfeeca6fd99563b83998947409"}, 0xa8, 0x800) 320.669808ms ago: executing program 1 (id=3787): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="80e68bd19a39d220d1"]) r1 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x20000000000032, 0x43a1bd75, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[0x0]) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES8], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r3, 0x1b23e000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 198.263297ms ago: executing program 1 (id=3788): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket(0x18, 0x1, 0x2) getsockname$packet(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(r4, 0x406, r1) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 68.334806ms ago: executing program 8 (id=3789): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000580)={r2, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000013c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="200000000000000084000000020000"], 0x20, 0x40004}], 0x1, 0x0) 39.264147ms ago: executing program 5 (id=3790): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mount$9p_virtio(0x0, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x840020, &(0x7f0000000580)=ANY=[@ANYBLOB="74727fe4000076696b7f69703230307b262b2c00"/29]) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000032) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000001140)=""/145, 0x91}], 0x3}, 0x10000}], 0x1, 0x0, 0x0) r7 = timerfd_create(0x8, 0x800) timerfd_settime(r7, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0xb}) 0s ago: executing program 7 (id=3791): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x52000, &(0x7f0000000040)="0e16fd83b108103422a1523452ba5af5c6e69d766018c0cf4765163b7adeaac73e5248996d33", 0x26, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d04280700000000000000008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$packet(r3, &(0x7f0000000980)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f00000004c0)="c4a5520041575a9646a5c0d8c17456ab8943fabe86c5dc1086a2566e6fb8ef39757aa1833bdaa3d7d0ae0fa84bec9a4ac5f8094ec6f68082afad22bcb5c2fcdefc3f87fb8b3d3041317ec5cc8e2df11718216f9d4d00dbba8738f0c901aa10179ec5e683213c050f8a05738851e30438cbc5a7b5607e0880f5c0eb5c31d9b8cf9b42d37f515a77fdaf68b0a02ce747e14ea0f38abd31d308", &(0x7f0000000680)=""/254, &(0x7f0000000780)="b562ae1340fb69b7fa661bd42b63ee34208b7686431c2b6a0dd5b46168ac592d2ba6381d419c2a60df9192ef723b1e5c0358d3aa577a2ffa1f3fc21613c28ad988a42e7e93e208d56547c934d73b2b124f4596f4ac4073aaa9735630a453924f9bbbdf1085927c490127ef9fb5b4d6f864f1e5b6f78d9f6306a96a95e4fc401b3d482d285e7d117d6224033254d2f1e25fd1423435860cb74b34533a3cb09f785a41a25655c49825f266214c5771f42c7d7e9b64949ec456267546879e98a0f78c270f26832d09cccd96e3b04460287b07a3e5a7f7a69e836291664a6319ced6b78651719bc3d450f2c95ae109f3740c25b989d3", 0x0, 0x2, r3}, 0x38) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r6 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, 0x0) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) io_uring_enter(r3, 0x1445, 0xcf94, 0x1, &(0x7f0000000000)={[0x7]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) kernel console output (not intermixed with test programs): 12334][T12875] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 558.627760][T12875] EXT4-fs (loop7): 1 truncate cleaned up [ 558.633430][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 558.633446][ C1] EXT4-fs (loop7): initial error at time 1775765741: ext4_mb_generate_buddy:1317 [ 558.633492][ C1] EXT4-fs (loop7): last error at time 1775765741: ext4_mb_generate_buddy:1317 [ 558.660484][T12875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.697256][T12875] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.2919: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 558.729522][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.115803][T12886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.364681][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.376153][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.442397][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.452116][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.461661][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.470971][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.480113][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.489580][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 559.549035][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 559.549129][ T28] audit: type=1326 audit(1775765742.773:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.580335][ T28] audit: type=1326 audit(1775765742.773:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.606839][ T28] audit: type=1326 audit(1775765742.803:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.708205][ T28] audit: type=1326 audit(1775765742.803:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.733518][ T28] audit: type=1326 audit(1775765742.833:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.757433][ T28] audit: type=1326 audit(1775765742.833:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.781244][ T28] audit: type=1326 audit(1775765742.833:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.805285][ T28] audit: type=1326 audit(1775765742.933:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.829067][ T28] audit: type=1326 audit(1775765742.933:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.852832][ T28] audit: type=1326 audit(1775765742.963:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bd0b4c819 code=0x7ffc0000 [ 559.947440][T12904] bond16: entered allmulticast mode [ 559.964846][T12904] macvlan2: entered promiscuous mode [ 559.970280][T12904] macvlan2: entered allmulticast mode [ 559.977104][T12904] bond16: (slave macvlan2): Opening slave failed [ 560.102339][T12916] netlink: 'syz.7.2934': attribute type 1 has an invalid length. [ 560.127918][T12916] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 560.138114][T12916] __nla_validate_parse: 39 callbacks suppressed [ 560.138128][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2934'. [ 560.155226][T12916] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 560.170819][T12916] bond1 (unregistering): Released all slaves [ 560.230371][T12925] loop6: detected capacity change from 0 to 512 [ 560.240616][T12925] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 560.246923][T12924] netlink: 'syz.7.2936': attribute type 1 has an invalid length. [ 560.251698][T12925] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 560.274622][T12925] EXT4-fs (loop6): 1 truncate cleaned up [ 560.278962][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2936'. [ 560.280364][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 560.280394][ C1] EXT4-fs (loop6): initial error at time 1775765743: ext4_mb_generate_buddy:1317 [ 560.280413][ C1] EXT4-fs (loop6): last error at time 1775765743: ext4_mb_generate_buddy:1317 [ 560.280868][T12925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.350328][T12925] EXT4-fs error (device loop6): ext4_check_all_de:659: inode #12: block 7: comm syz.6.2937: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 560.458388][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.120411][T12958] netlink: 'syz.5.2948': attribute type 1 has an invalid length. [ 561.136207][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2948'. [ 561.146208][T12958] bond5 (unregistering): Released all slaves [ 561.348965][T12970] loop5: detected capacity change from 0 to 128 [ 561.377003][T12970] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 561.426066][T12970] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.308990][ T7423] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.628848][T12997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.840458][T13032] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 568.893734][T13046] hub 8-0:1.0: USB hub found [ 568.898617][T13046] hub 8-0:1.0: 8 ports detected [ 569.215967][T13043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.484566][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2975'. [ 569.496362][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2975'. [ 569.507969][T13050] ip6gretap0: entered promiscuous mode [ 569.514651][T13050] syz_tun: entered promiscuous mode [ 569.520322][T13050] debugfs: 'hsr1' already exists in 'hsr' [ 569.526389][T13050] Cannot create hsr debugfs directory [ 569.708304][T13053] loop7: detected capacity change from 0 to 764 [ 569.718167][T13053] rock: directory entry would overflow storage [ 569.724449][T13053] rock: sig=0x4654, size=5, remaining=4 [ 569.730601][T13061] loop6: detected capacity change from 0 to 1024 [ 570.200800][T13061] EXT4-fs: Ignoring removed orlov option [ 570.213479][T13061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.631517][T13080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.892703][T13087] loop5: detected capacity change from 0 to 128 [ 570.916364][T13087] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 570.931011][T13087] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.944307][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.083117][T13092] loop6: detected capacity change from 0 to 764 [ 572.067551][T13092] rock: directory entry would overflow storage [ 572.083407][T13092] rock: sig=0x4654, size=5, remaining=4 [ 572.627083][ T7423] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.976260][T13104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.320639][T13109] loop6: detected capacity change from 0 to 764 [ 573.336731][T13109] rock: directory entry would overflow storage [ 573.351736][T13109] rock: sig=0x4654, size=5, remaining=4 [ 573.459020][T13109] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2991'. [ 573.692972][T13118] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2995'. [ 573.713296][T13118] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2995'. [ 573.834370][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2994'. [ 574.390807][T13125] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2996'. [ 574.539080][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2997'. [ 575.431301][T13143] loop7: detected capacity change from 0 to 1024 [ 575.468257][T13143] EXT4-fs: Ignoring removed orlov option [ 575.509031][T13145] syzkaller0: entered promiscuous mode [ 575.538444][T13145] syzkaller0: entered allmulticast mode [ 575.544483][T13143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.660552][T13149] loop5: detected capacity change from 0 to 764 [ 575.679492][T13149] rock: directory entry would overflow storage [ 575.691235][T13149] rock: sig=0x4654, size=5, remaining=4 [ 575.749622][T13154] netlink: 592 bytes leftover after parsing attributes in process `syz.6.3004'. [ 575.773379][T13155] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3003'. [ 576.070788][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3005'. [ 576.505843][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.565405][T13163] syzkaller0: entered promiscuous mode [ 576.576278][T13163] syzkaller0: entered allmulticast mode [ 577.604042][T13175] tipc: Enabled bearer , priority 0 [ 577.616489][T13172] tipc: Disabling bearer [ 578.079495][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'. [ 578.292758][T13189] netlink: 'syz.7.3016': attribute type 1 has an invalid length. [ 578.349011][T13191] syzkaller0: entered promiscuous mode [ 578.354718][T13191] syzkaller0: entered allmulticast mode [ 578.379693][T13197] siw: device registration error -23 [ 578.418042][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3016'. [ 578.429855][T13189] bond1 (unregistering): Released all slaves [ 578.684255][T13201] loop7: detected capacity change from 0 to 1024 [ 578.713645][T13201] EXT4-fs: Ignoring removed orlov option [ 578.771899][T13201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.827307][ T3312] syz_tun (unregistering): left promiscuous mode [ 578.941530][T13202] lo speed is unknown, defaulting to 1000 [ 579.272452][T13202] chnl_net:caif_netlink_parms(): no params data found [ 579.408618][ T1900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.500938][ T1900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.893520][ T1900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.921688][ T1900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.968724][T13202] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.986072][T13202] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.005692][T13202] bridge_slave_0: entered allmulticast mode [ 580.012504][T13202] bridge_slave_0: entered promiscuous mode [ 580.019399][T13202] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.026713][T13202] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.033975][T13202] bridge_slave_1: entered allmulticast mode [ 580.040643][T13202] bridge_slave_1: entered promiscuous mode [ 580.059090][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.085886][ T1900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.104196][ T1900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.117166][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.137934][T13202] team0: Port device team_slave_0 added [ 580.145073][T13202] team0: Port device team_slave_1 added [ 580.164279][ T1900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.175124][ T1900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.189371][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.196946][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.223601][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.238798][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.246378][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.273970][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.317428][T13202] hsr_slave_0: entered promiscuous mode [ 580.325034][T13202] hsr_slave_1: entered promiscuous mode [ 580.331920][T13202] debugfs: 'hsr0' already exists in 'hsr' [ 580.338129][T13202] Cannot create hsr debugfs directory [ 580.395568][ T1900] bridge_slave_1: left allmulticast mode [ 580.410086][ T1900] bridge_slave_1: left promiscuous mode [ 580.421905][ T1900] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.438125][ T1900] bridge_slave_0: left allmulticast mode [ 580.450277][ T1900] bridge_slave_0: left promiscuous mode [ 580.458521][ T1900] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.541865][ T1900] ip6gretap0 (unregistering): left promiscuous mode [ 580.556515][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 580.556530][ T28] audit: type=1400 audit(1775765765.776:1665): avc: denied { create } for pid=13232 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 580.614463][ T28] audit: type=1400 audit(1775765765.776:1666): avc: denied { write } for pid=13232 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=15014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 580.668815][ T28] audit: type=1400 audit(1775765765.776:1667): avc: denied { append } for pid=13232 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=15014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 580.719676][ T28] audit: type=1400 audit(1775765765.856:1668): avc: denied { unlink } for pid=13243 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=15014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 580.744915][ T1900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.755052][ T1900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.764728][ T1900] bond0 (unregistering): Released all slaves [ 580.772280][ T1900] bond1 (unregistering): Released all slaves [ 580.781758][ T1900] bond2 (unregistering): Released all slaves [ 580.790707][ T1900] bond3 (unregistering): Released all slaves [ 580.799077][ T1900] bond4 (unregistering): Released all slaves [ 580.808290][ T1900] bond5 (unregistering): Released all slaves [ 580.818412][ T1900] bond6 (unregistering): Released all slaves [ 580.827248][ T1900] bond7 (unregistering): Released all slaves [ 580.836212][ T1900] bond8 (unregistering): Released all slaves [ 580.845122][ T1900] bond9 (unregistering): Released all slaves [ 580.910921][ T1900] tipc: Left network mode [ 580.938802][ T1900] hsr_slave_0: left promiscuous mode [ 580.956508][ T1900] hsr_slave_1: left promiscuous mode [ 580.965572][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.977801][ T1900] veth1_macvtap: left promiscuous mode [ 580.987340][ T1900] veth0_macvtap: left promiscuous mode [ 580.994954][ T1900] veth1_vlan: left promiscuous mode [ 580.999801][T13257] loop5: detected capacity change from 0 to 512 [ 581.000384][ T1900] veth0_vlan: left promiscuous mode [ 581.013019][T13257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 581.039478][T13257] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 581.045819][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3028'. [ 581.064659][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3028'. [ 581.069813][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 581.080052][ C1] EXT4-fs (loop5): initial error at time 1775765766: ext4_mb_generate_buddy:1317 [ 581.089162][ C1] EXT4-fs (loop5): last error at time 1775765766: ext4_mb_generate_buddy:1317 [ 581.100411][T13257] EXT4-fs (loop5): 1 truncate cleaned up [ 581.106594][T13257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.125073][T13257] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.3029: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 581.145109][ T1900] team0 (unregistering): Port device macvlan1 removed [ 581.164951][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.174599][ T1900] team0 (unregistering): Port device team_slave_1 removed [ 581.186237][ T1900] team0 (unregistering): Port device team_slave_0 removed [ 581.214050][T13265] loop5: detected capacity change from 0 to 764 [ 581.230410][T13265] iso9660: Unknown parameter '' [ 581.251720][ T28] audit: type=1400 audit(1775765766.486:1669): avc: denied { sys_module } for pid=13262 comm="syz.1.3030" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 581.330302][T13263] syzkaller0: entered promiscuous mode [ 581.335848][T13263] syzkaller0: entered allmulticast mode [ 581.382837][T13265] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3031'. [ 581.440975][T13279] syzkaller0: entered promiscuous mode [ 581.446783][T13279] syzkaller0: entered allmulticast mode [ 581.490970][ T28] audit: type=1400 audit(1775765766.736:1670): avc: denied { create } for pid=13290 comm="syz.5.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 581.611829][ T28] audit: type=1400 audit(1775765766.736:1671): avc: denied { write } for pid=13290 comm="syz.5.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 581.631907][T13202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 581.641432][T13202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 581.654267][T13202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 582.085195][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3035'. [ 582.193376][T13307] loop7: detected capacity change from 0 to 1024 [ 582.216879][T13307] EXT4-fs: Ignoring removed orlov option [ 582.287592][T13307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.432559][T13202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 582.445833][T13317] loop5: detected capacity change from 0 to 764 [ 582.561623][ T1900] IPVS: stop unused estimator thread 0... [ 582.577198][T13317] rock: directory entry would overflow storage [ 582.597746][T13317] rock: sig=0x4654, size=5, remaining=4 [ 582.614173][T13202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.640340][T13202] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.670138][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.677246][ T6446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.737422][T13202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.781136][T13202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.818582][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.825726][ T6446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.874273][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3042'. [ 582.901798][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3042'. [ 583.094150][T13202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.558530][T13359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.618683][ T28] audit: type=1400 audit(1775765768.848:1672): avc: denied { create } for pid=13367 comm="syz.6.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 583.644132][T13202] veth0_vlan: entered promiscuous mode [ 583.655104][T13202] veth1_vlan: entered promiscuous mode [ 583.662396][ T28] audit: type=1400 audit(1775765768.858:1673): avc: denied { connect } for pid=13367 comm="syz.6.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 583.692757][T13202] veth0_macvtap: entered promiscuous mode [ 583.700219][T13202] veth1_macvtap: entered promiscuous mode [ 583.706091][ T28] audit: type=1400 audit(1775765768.858:1674): avc: denied { write } for pid=13367 comm="syz.6.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 583.762214][T13202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.965238][T13202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.014061][ T4764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.038031][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.108581][ T4764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.338276][T13384] syzkaller0: entered promiscuous mode [ 584.348839][T13384] syzkaller0: entered allmulticast mode [ 584.366959][ T4764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.382978][ T4764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.652309][T13397] siw: device registration error -23 [ 584.818497][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3048'. [ 585.331709][T13404] loop5: detected capacity change from 0 to 764 [ 585.341795][T13404] rock: directory entry would overflow storage [ 585.352619][T13404] rock: sig=0x4654, size=5, remaining=4 [ 586.408153][T13420] hub 8-0:1.0: USB hub found [ 586.413097][T13420] hub 8-0:1.0: 8 ports detected [ 586.434417][T13422] hub 8-0:1.0: USB hub found [ 586.439537][T13422] hub 8-0:1.0: 8 ports detected [ 586.674590][T13425] loop5: detected capacity change from 0 to 1024 [ 586.697547][T13425] EXT4-fs: Ignoring removed orlov option [ 586.912514][T13425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.755823][T13455] loop6: detected capacity change from 0 to 764 [ 587.790047][T13455] rock: directory entry would overflow storage [ 587.816597][T13455] rock: sig=0x4654, size=5, remaining=4 [ 587.960813][T13459] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3062'. [ 588.102145][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3063'. [ 588.458758][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.476426][T13465] syzkaller0: entered promiscuous mode [ 588.484066][T13465] syzkaller0: entered allmulticast mode [ 588.527609][T13467] loop5: detected capacity change from 0 to 764 [ 588.542475][T13467] rock: directory entry would overflow storage [ 588.549864][T13467] rock: sig=0x4654, size=5, remaining=4 [ 588.801906][T13480] hub 8-0:1.0: USB hub found [ 588.806825][T13480] hub 8-0:1.0: 8 ports detected [ 589.559756][T13492] loop5: detected capacity change from 0 to 764 [ 589.585069][T13492] rock: directory entry would overflow storage [ 589.604914][T13492] rock: sig=0x4654, size=5, remaining=4 [ 589.743410][T13497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3074'. [ 589.851313][T13502] netlink: 'syz.5.3077': attribute type 1 has an invalid length. [ 589.892522][T13504] siw: device registration error -23 [ 589.961271][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3077'. [ 589.993131][T13502] bond5 (unregistering): Released all slaves [ 590.309678][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3080'. [ 590.318861][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3080'. [ 590.330660][T13509] ip6gretap0: entered promiscuous mode [ 590.337324][T13509] syz_tun: entered promiscuous mode [ 590.342786][T13509] debugfs: 'hsr1' already exists in 'hsr' [ 590.348759][T13509] Cannot create hsr debugfs directory [ 590.616743][T13521] loop6: detected capacity change from 0 to 128 [ 590.635484][T13521] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 590.657947][T13521] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.824156][T13525] hub 8-0:1.0: USB hub found [ 590.829144][T13525] hub 8-0:1.0: 8 ports detected [ 592.316010][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3088'. [ 592.334252][T13536] netlink: 'syz.5.3088': attribute type 7 has an invalid length. [ 592.341976][T13536] netlink: 'syz.5.3088': attribute type 8 has an invalid length. [ 592.364200][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3088'. [ 592.767563][ T7807] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 592.937569][T13540] bond3: entered allmulticast mode [ 593.056811][T13544] macvlan2: entered promiscuous mode [ 593.062187][T13544] macvlan2: entered allmulticast mode [ 593.068478][T13544] bond3: (slave macvlan2): Opening slave failed [ 593.424546][T13555] syzkaller0: entered promiscuous mode [ 593.442629][T13555] syzkaller0: entered allmulticast mode [ 593.649063][T13565] netlink: 'syz.7.3096': attribute type 1 has an invalid length. [ 593.692690][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3096'. [ 593.707471][T13565] bond1 (unregistering): Released all slaves [ 593.721637][T13568] syzkaller0: entered promiscuous mode [ 593.727493][T13568] syzkaller0: entered allmulticast mode [ 593.839791][ T9745] IPVS: starting estimator thread 0... [ 593.842329][T13574] loop7: detected capacity change from 0 to 128 [ 593.949978][T13574] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.962087][T13573] IPVS: using max 2352 ests per chain, 117600 per kthread [ 593.974698][T13574] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.393685][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'. [ 595.974063][ T28] audit: type=1400 audit(1775765782.289:1675): avc: denied { ioctl } for pid=13592 comm="syz.1.3104" path="socket:[37497]" dev="sockfs" ino=37497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 596.004217][T13598] netlink: 'syz.6.3103': attribute type 12 has an invalid length. [ 596.011009][ T28] audit: type=1400 audit(1775765782.289:1676): avc: denied { bind } for pid=13592 comm="syz.1.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 596.031583][T13598] netlink: 'syz.6.3103': attribute type 29 has an invalid length. [ 596.056596][T13598] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3103'. [ 596.062610][ T28] audit: type=1400 audit(1775765782.289:1677): avc: denied { read } for pid=13592 comm="syz.1.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 596.086828][ T9485] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.266361][T13610] loop5: detected capacity change from 0 to 764 [ 596.283501][T13611] netlink: 'syz.7.3108': attribute type 1 has an invalid length. [ 596.296555][T13610] rock: directory entry would overflow storage [ 596.322791][T13610] rock: sig=0x4654, size=5, remaining=4 [ 596.335081][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3108'. [ 596.714944][T13611] bond1 (unregistering): Released all slaves [ 596.746967][T13617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.828490][T13629] loop7: detected capacity change from 0 to 128 [ 596.924832][T13629] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.941652][T13629] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.411989][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3113'. [ 597.917769][T13649] loop5: detected capacity change from 0 to 128 [ 597.932477][T13649] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 598.365897][T13649] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.310275][ T9485] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.331235][T13662] netlink: 'syz.6.3121': attribute type 12 has an invalid length. [ 599.526336][T13662] netlink: 'syz.6.3121': attribute type 29 has an invalid length. [ 599.534893][T13662] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3121'. [ 599.566116][T13664] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.070148][T13670] macvlan2: entered promiscuous mode [ 600.077846][T13670] macvlan2: entered allmulticast mode [ 600.149414][T13673] netlink: 'syz.0.3125': attribute type 1 has an invalid length. [ 600.201461][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'. [ 600.230845][T13673] hsr_slave_1 (unregistering): left promiscuous mode [ 600.349400][T13675] lo speed is unknown, defaulting to 1000 [ 600.371289][ T3313] syz_tun (unregistering): left promiscuous mode [ 600.416844][ T7423] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 600.649177][T13675] chnl_net:caif_netlink_parms(): no params data found [ 600.708719][T13703] siw: device registration error -23 [ 600.749321][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3129'. [ 600.990935][T13675] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.021856][T13675] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.056681][T13675] bridge_slave_0: entered allmulticast mode [ 601.084642][T13675] bridge_slave_0: entered promiscuous mode [ 601.117012][T13675] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.178028][T13675] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.216853][T13675] bridge_slave_1: entered allmulticast mode [ 601.249741][T13675] bridge_slave_1: entered promiscuous mode [ 601.303612][T13675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.316925][T13675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.341930][T13675] team0: Port device team_slave_0 added [ 601.349765][T13675] team0: Port device team_slave_1 added [ 601.385292][T13675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.399764][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.459063][T13675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.574713][T13675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.581901][T13675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.608088][T13675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.635980][T13675] hsr_slave_0: entered promiscuous mode [ 601.648611][T13675] hsr_slave_1: entered promiscuous mode [ 601.654524][T13675] debugfs: 'hsr0' already exists in 'hsr' [ 601.660315][T13675] Cannot create hsr debugfs directory [ 602.120921][T13722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3134'. [ 602.296767][T13735] syzkaller0: entered promiscuous mode [ 602.302538][T13735] syzkaller0: entered allmulticast mode [ 602.355819][T13737] siw: device registration error -23 [ 602.932420][T13744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.096493][T13749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.230305][T13675] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 603.276090][T13675] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.305123][T13675] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.338569][T13675] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.420059][T13675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.434400][T13675] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.445074][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.452217][ T6446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.470692][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.477930][ T6446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.616545][T13675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.675813][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3141'. [ 603.689342][T13675] veth0_vlan: entered promiscuous mode [ 603.699321][T13675] veth1_vlan: entered promiscuous mode [ 603.724986][T13675] veth0_macvtap: entered promiscuous mode [ 603.736947][T13675] veth1_macvtap: entered promiscuous mode [ 603.752361][T13675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.763660][T13675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.776853][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.789301][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.817468][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.883693][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.457185][T13793] syzkaller0: entered promiscuous mode [ 604.463418][T13793] syzkaller0: entered allmulticast mode [ 604.802541][T13802] bond1: entered allmulticast mode [ 605.021782][T13806] loop6: detected capacity change from 0 to 128 [ 605.117248][T13806] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 605.118189][T13812] netlink: 'syz.5.3152': attribute type 12 has an invalid length. [ 605.138945][T13812] netlink: 'syz.5.3152': attribute type 29 has an invalid length. [ 605.146986][T13812] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3152'. [ 605.157913][T13806] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.147946][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3156'. [ 606.903647][T13848] bond1: entered allmulticast mode [ 607.212352][ T7807] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.232160][T13855] syzkaller0: entered promiscuous mode [ 607.246780][T13855] syzkaller0: entered allmulticast mode [ 607.261765][T13859] loop6: detected capacity change from 0 to 764 [ 607.272460][T13859] rock: directory entry would overflow storage [ 607.275913][T13857] macvlan2: entered promiscuous mode [ 607.284294][T13857] macvlan2: entered allmulticast mode [ 607.291013][T13859] rock: sig=0x4654, size=5, remaining=4 [ 607.492056][T13874] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3172'. [ 607.512511][T13872] hub 8-0:1.0: USB hub found [ 607.517374][T13872] hub 8-0:1.0: 8 ports detected [ 607.541274][T13874] netlink: 372 bytes leftover after parsing attributes in process `syz.6.3172'. [ 607.918187][T13880] bond2: entered allmulticast mode [ 608.010160][T13870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3171'. [ 608.893149][T13892] syzkaller0: entered promiscuous mode [ 608.912618][T13892] syzkaller0: entered allmulticast mode [ 609.902058][T13912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.768981][T13926] loop6: detected capacity change from 0 to 764 [ 610.783062][T13926] rock: directory entry would overflow storage [ 610.789981][T13926] rock: sig=0x4654, size=5, remaining=4 [ 610.899566][T13926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3189'. [ 610.991388][T13932] syzkaller0: entered promiscuous mode [ 610.997397][T13932] syzkaller0: entered allmulticast mode [ 611.100254][T13936] hub 8-0:1.0: USB hub found [ 611.105111][T13936] hub 8-0:1.0: 8 ports detected [ 612.154498][T13941] siw: device registration error -23 [ 613.358294][T13955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.115955][T13974] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 614.179539][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3205'. [ 614.197542][T13974] bond0: (slave bond_slave_1): Releasing backup interface [ 614.392645][T13985] macvlan2: entered promiscuous mode [ 614.404520][T13985] macvlan2: entered allmulticast mode [ 615.079625][T13997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.184038][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3212'. [ 615.795358][T14005] siw: device registration error -23 [ 616.618690][T14027] netlink: 'syz.7.3221': attribute type 1 has an invalid length. [ 616.670765][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3221'. [ 616.681124][T14027] bond3 (unregistering): Released all slaves [ 617.139392][T14032] netlink: 'syz.7.3222': attribute type 1 has an invalid length. [ 617.164564][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3222'. [ 617.195351][T14032] bond3 (unregistering): Released all slaves [ 617.494529][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3229'. [ 617.609013][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3226'. [ 618.008668][T14055] bond2: entered allmulticast mode [ 618.033123][T14055] macvlan2: entered promiscuous mode [ 618.038439][T14055] macvlan2: entered allmulticast mode [ 618.066168][T14055] bond2: (slave macvlan2): Opening slave failed [ 618.163059][T14058] syzkaller0: entered promiscuous mode [ 618.173049][T14058] syzkaller0: entered allmulticast mode [ 618.516862][T14079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.780407][T14084] loop7: detected capacity change from 0 to 764 [ 618.864971][T14084] rock: directory entry would overflow storage [ 618.871582][T14084] rock: sig=0x4654, size=5, remaining=4 [ 618.941993][T14090] syzkaller0: entered promiscuous mode [ 618.960008][T14090] syzkaller0: entered allmulticast mode [ 619.020783][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3239'. [ 619.245814][T14093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.638170][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3247'. [ 620.085064][T14118] syzkaller0: entered promiscuous mode [ 620.100338][T14118] syzkaller0: entered allmulticast mode [ 620.370427][T14133] netlink: 'syz.5.3253': attribute type 1 has an invalid length. [ 620.403651][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3253'. [ 620.431407][T14133] bond5 (unregistering): Released all slaves [ 620.575180][T14140] hub 8-0:1.0: USB hub found [ 620.579939][T14140] hub 8-0:1.0: 8 ports detected [ 621.004447][T14151] loop5: detected capacity change from 0 to 764 [ 621.032916][T14151] rock: directory entry would overflow storage [ 621.039088][T14151] rock: sig=0x4654, size=5, remaining=4 [ 621.148080][T14156] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3258'. [ 621.395766][T14160] syzkaller0: entered promiscuous mode [ 621.429785][T14160] syzkaller0: entered allmulticast mode [ 621.796360][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3264'. [ 623.050340][T14195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.508428][T14200] bond3: entered allmulticast mode [ 623.565755][T14203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3272'. [ 623.808010][T14207] loop6: detected capacity change from 0 to 764 [ 623.898044][ T9742] IPVS: starting estimator thread 0... [ 623.919413][T14207] rock: directory entry would overflow storage [ 623.925817][T14207] rock: sig=0x4654, size=5, remaining=4 [ 624.135688][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3274'. [ 624.168417][T14215] IPVS: using max 2400 ests per chain, 120000 per kthread [ 624.201559][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'. [ 625.653726][T14264] syzkaller0: entered promiscuous mode [ 625.663179][T14264] syzkaller0: entered allmulticast mode [ 625.938888][T14272] hub 8-0:1.0: USB hub found [ 625.943742][T14272] hub 8-0:1.0: 8 ports detected [ 626.047976][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'. [ 627.017961][T14289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.647874][T14294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.072524][T14306] netlink: 372 bytes leftover after parsing attributes in process `syz.5.3300'. [ 629.455975][T14312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.768157][T14317] bond4: entered allmulticast mode [ 629.994496][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3304'. [ 630.140913][T14333] loop6: detected capacity change from 0 to 764 [ 630.169849][T14333] rock: directory entry would overflow storage [ 630.176561][T14333] rock: sig=0x4654, size=5, remaining=4 [ 630.248112][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3308'. [ 630.377538][T14347] syzkaller0: entered promiscuous mode [ 630.403384][T14347] syzkaller0: entered allmulticast mode [ 630.526872][T14344] bond5: entered allmulticast mode [ 630.852992][T14355] loop7: detected capacity change from 0 to 128 [ 630.880255][T14355] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 630.916219][T14355] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.268858][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3318'. [ 632.384637][T14385] tipc: Enabling of bearer rejected, failed to enable media [ 632.385175][T14387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 632.393631][T14385] syzkaller0: entered promiscuous mode [ 632.409325][T14385] syzkaller0: entered allmulticast mode [ 632.533208][T14390] bond6: entered allmulticast mode [ 632.651378][T14393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3326'. [ 632.973210][ T9485] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.061324][T14400] loop6: detected capacity change from 0 to 764 [ 633.072480][T14400] rock: directory entry would overflow storage [ 633.099379][T14400] rock: sig=0x4654, size=5, remaining=4 [ 633.238101][T14400] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3330'. [ 633.317496][T14408] loop6: detected capacity change from 0 to 764 [ 633.331398][T14408] iso9660: Unknown parameter '' [ 633.645140][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3333'. [ 633.774056][T14423] netlink: 'syz.1.3336': attribute type 12 has an invalid length. [ 633.782109][T14423] netlink: 'syz.1.3336': attribute type 29 has an invalid length. [ 633.790377][T14423] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3336'. [ 633.894176][T14429] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.956944][T14435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.980869][T14435] FAULT_INJECTION: forcing a failure. [ 633.980869][T14435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.010577][T14435] CPU: 1 UID: 0 PID: 14435 Comm: syz.6.3341 Not tainted syzkaller #0 PREEMPT(full) [ 634.010614][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 634.010675][T14435] Call Trace: [ 634.010680][T14435] [ 634.010688][T14435] __dump_stack+0x1d/0x30 [ 634.010719][T14435] dump_stack_lvl+0x95/0xd0 [ 634.010886][T14435] dump_stack+0x15/0x1b [ 634.010904][T14435] should_fail_ex+0x263/0x280 [ 634.010935][T14435] should_fail+0xb/0x20 [ 634.010954][T14435] should_fail_usercopy+0x1a/0x20 [ 634.011054][T14435] _copy_from_iter+0xcf/0xea0 [ 634.011160][T14435] ? lockref_put_return+0xf7/0x130 [ 634.011210][T14435] ? __rcu_read_unlock+0x4e/0x70 [ 634.011229][T14435] copy_page_from_iter+0x178/0x2a0 [ 634.011331][T14435] tun_get_user+0xbbd/0x27c0 [ 634.011358][T14435] ? ref_tracker_alloc+0x1eb/0x2f0 [ 634.011391][T14435] tun_chr_write_iter+0x15e/0x210 [ 634.011418][T14435] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 634.011478][T14435] vfs_write+0x5a6/0x9f0 [ 634.011499][T14435] ksys_write+0xdc/0x1a0 [ 634.011515][T14435] __x64_sys_write+0x40/0x50 [ 634.011531][T14435] x64_sys_call+0x27e1/0x3020 [ 634.011627][T14435] do_syscall_64+0x12c/0x370 [ 634.011650][T14435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.011669][T14435] RIP: 0033:0x7f79d58dd04e [ 634.011683][T14435] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 634.011699][T14435] RSP: 002b:00007f79d4376fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 634.011717][T14435] RAX: ffffffffffffffda RBX: 00007f79d43776c0 RCX: 00007f79d58dd04e [ 634.011773][T14435] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8 [ 634.011788][T14435] RBP: 00007f79d4377090 R08: 0000000000000000 R09: 0000000000000000 [ 634.011837][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.011848][T14435] R13: 00007f79d5b96038 R14: 00007f79d5b95fa0 R15: 00007fff409ccf88 [ 634.011864][T14435] [ 634.244169][T14436] loop7: detected capacity change from 0 to 764 [ 634.253644][T14436] rock: directory entry would overflow storage [ 634.260577][T14436] rock: sig=0x4654, size=5, remaining=4 [ 634.276803][T14427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3338'. [ 634.302668][T14441] syzkaller0: entered promiscuous mode [ 634.313327][T14441] syzkaller0: entered allmulticast mode [ 634.339876][T14436] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3328'. [ 634.468091][T14450] loop7: detected capacity change from 0 to 764 [ 634.477903][T14450] iso9660: Unknown parameter '' [ 634.535364][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3345'. [ 634.624946][T14456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 634.850580][T14460] netlink: 'syz.7.3348': attribute type 12 has an invalid length. [ 634.905847][T14460] netlink: 'syz.7.3348': attribute type 29 has an invalid length. [ 634.924944][T14460] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3348'. [ 635.294506][T14481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.534937][T14494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.774029][T14499] netlink: 'syz.6.3363': attribute type 12 has an invalid length. [ 635.782056][T14499] netlink: 'syz.6.3363': attribute type 29 has an invalid length. [ 635.790847][T14499] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3363'. [ 635.907082][T14511] loop5: detected capacity change from 0 to 764 [ 635.914849][T14511] FAULT_INJECTION: forcing a failure. [ 635.914849][T14511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.927941][T14511] CPU: 1 UID: 0 PID: 14511 Comm: syz.5.3366 Not tainted syzkaller #0 PREEMPT(full) [ 635.928020][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 635.928031][T14511] Call Trace: [ 635.928036][T14511] [ 635.928042][T14511] __dump_stack+0x1d/0x30 [ 635.928066][T14511] dump_stack_lvl+0x95/0xd0 [ 635.928089][T14511] dump_stack+0x15/0x1b [ 635.928115][T14511] should_fail_ex+0x263/0x280 [ 635.928142][T14511] should_fail+0xb/0x20 [ 635.928196][T14511] should_fail_usercopy+0x1a/0x20 [ 635.928256][T14511] _copy_from_user+0x1c/0xb0 [ 635.928284][T14511] __sys_connect+0xd0/0x2a0 [ 635.928360][T14511] __x64_sys_connect+0x3f/0x50 [ 635.928389][T14511] x64_sys_call+0x2df0/0x3020 [ 635.928415][T14511] do_syscall_64+0x12c/0x370 [ 635.928481][T14511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.928501][T14511] RIP: 0033:0x7f8516d9c819 [ 635.928519][T14511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.928636][T14511] RSP: 002b:00007f85157ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 635.928657][T14511] RAX: ffffffffffffffda RBX: 00007f8517016090 RCX: 00007f8516d9c819 [ 635.928672][T14511] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000006 [ 635.928686][T14511] RBP: 00007f85157ce090 R08: 0000000000000000 R09: 0000000000000000 [ 635.928699][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.928767][T14511] R13: 00007f8517016128 R14: 00007f8517016090 R15: 00007ffebe3669b8 [ 635.928787][T14511] [ 636.127610][T14519] syzkaller0: entered promiscuous mode [ 636.139335][T14519] syzkaller0: entered allmulticast mode [ 636.249389][T14521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 636.304882][T14529] FAULT_INJECTION: forcing a failure. [ 636.304882][T14529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.319222][T14529] CPU: 0 UID: 0 PID: 14529 Comm: syz.0.3373 Not tainted syzkaller #0 PREEMPT(full) [ 636.319249][T14529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 636.319259][T14529] Call Trace: [ 636.319265][T14529] [ 636.319271][T14529] __dump_stack+0x1d/0x30 [ 636.319293][T14529] dump_stack_lvl+0x95/0xd0 [ 636.319322][T14529] dump_stack+0x15/0x1b [ 636.319341][T14529] should_fail_ex+0x263/0x280 [ 636.319435][T14529] should_fail+0xb/0x20 [ 636.319459][T14529] should_fail_usercopy+0x1a/0x20 [ 636.319484][T14529] _copy_from_user+0x1c/0xb0 [ 636.319526][T14529] do_handle_open+0x6d/0x790 [ 636.319543][T14529] __x64_sys_open_by_handle_at+0x44/0x50 [ 636.319559][T14529] x64_sys_call+0x153d/0x3020 [ 636.319654][T14529] do_syscall_64+0x12c/0x370 [ 636.319670][T14529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.319752][T14529] RIP: 0033:0x7f8d2e93c819 [ 636.319761][T14529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.319771][T14529] RSP: 002b:00007f8d2d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 636.319852][T14529] RAX: ffffffffffffffda RBX: 00007f8d2ebb5fa0 RCX: 00007f8d2e93c819 [ 636.319860][T14529] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 636.319909][T14529] RBP: 00007f8d2d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 636.319916][T14529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.319923][T14529] R13: 00007f8d2ebb6038 R14: 00007f8d2ebb5fa0 R15: 00007ffe50c221c8 [ 636.319934][T14529] [ 636.512502][T14535] netlink: 'syz.0.3376': attribute type 12 has an invalid length. [ 636.520452][T14535] netlink: 'syz.0.3376': attribute type 29 has an invalid length. [ 636.529000][T14535] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3376'. [ 636.832347][T14549] hub 8-0:1.0: USB hub found [ 636.837061][T14549] hub 8-0:1.0: 8 ports detected [ 636.939459][T14555] syzkaller0: entered promiscuous mode [ 636.995348][T14555] syzkaller0: entered allmulticast mode [ 637.128532][T14560] loop7: detected capacity change from 0 to 764 [ 637.151063][T14560] iso9660: Unknown parameter '' [ 637.300343][T14570] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.493297][T14580] FAULT_INJECTION: forcing a failure. [ 637.493297][T14580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.525391][T14580] CPU: 1 UID: 0 PID: 14580 Comm: syz.1.3390 Not tainted syzkaller #0 PREEMPT(full) [ 637.525416][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 637.525428][T14580] Call Trace: [ 637.525434][T14580] [ 637.525443][T14580] __dump_stack+0x1d/0x30 [ 637.525465][T14580] dump_stack_lvl+0x95/0xd0 [ 637.525484][T14580] dump_stack+0x15/0x1b [ 637.525503][T14580] should_fail_ex+0x263/0x280 [ 637.525640][T14580] should_fail+0xb/0x20 [ 637.525665][T14580] should_fail_usercopy+0x1a/0x20 [ 637.525694][T14580] _copy_from_user+0x1c/0xb0 [ 637.525723][T14580] ___sys_sendmsg+0xc1/0x1e0 [ 637.525777][T14580] __x64_sys_sendmsg+0xd4/0x160 [ 637.525796][T14580] x64_sys_call+0x194c/0x3020 [ 637.525863][T14580] do_syscall_64+0x12c/0x370 [ 637.525891][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.525914][T14580] RIP: 0033:0x7fa6aaa9c819 [ 637.525931][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.526066][T14580] RSP: 002b:00007fa6a94f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.526088][T14580] RAX: ffffffffffffffda RBX: 00007fa6aad15fa0 RCX: 00007fa6aaa9c819 [ 637.526100][T14580] RDX: 0000000000000000 RSI: 0000200000002240 RDI: 0000000000000003 [ 637.526111][T14580] RBP: 00007fa6a94f7090 R08: 0000000000000000 R09: 0000000000000000 [ 637.526158][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.526171][T14580] R13: 00007fa6aad16038 R14: 00007fa6aad15fa0 R15: 00007fffba197368 [ 637.526187][T14580] [ 637.704351][T14584] loop7: detected capacity change from 0 to 764 [ 637.745252][T14588] netlink: 'syz.1.3393': attribute type 1 has an invalid length. [ 637.762448][T14584] rock: directory entry would overflow storage [ 637.777685][T14584] rock: sig=0x4654, size=5, remaining=4 [ 637.797353][T14588] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 637.812837][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'. [ 637.823656][T14588] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 637.833807][T14588] bond1 (unregistering): Released all slaves [ 637.845922][T14584] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3392'. [ 637.951578][ T28] audit: type=1400 audit(1775765829.188:1678): avc: denied { mount } for pid=14599 comm="syz.1.3397" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 638.450616][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3402'. [ 638.586477][T14620] hub 8-0:1.0: USB hub found [ 638.591330][T14620] hub 8-0:1.0: 8 ports detected [ 638.646596][T14622] FAULT_INJECTION: forcing a failure. [ 638.646596][T14622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.663173][T14622] CPU: 1 UID: 0 PID: 14622 Comm: syz.0.3403 Not tainted syzkaller #0 PREEMPT(full) [ 638.663226][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 638.663239][T14622] Call Trace: [ 638.663246][T14622] [ 638.663254][T14622] __dump_stack+0x1d/0x30 [ 638.663281][T14622] dump_stack_lvl+0x95/0xd0 [ 638.663312][T14622] dump_stack+0x15/0x1b [ 638.663329][T14622] should_fail_ex+0x263/0x280 [ 638.663395][T14622] should_fail+0xb/0x20 [ 638.663425][T14622] should_fail_usercopy+0x1a/0x20 [ 638.663449][T14622] _copy_from_user+0x1c/0xb0 [ 638.663474][T14622] ___sys_sendmsg+0xc1/0x1e0 [ 638.663498][T14622] __x64_sys_sendmsg+0xd4/0x160 [ 638.663623][T14622] x64_sys_call+0x194c/0x3020 [ 638.663649][T14622] do_syscall_64+0x12c/0x370 [ 638.663676][T14622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.663697][T14622] RIP: 0033:0x7f8d2e93c819 [ 638.663776][T14622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.663792][T14622] RSP: 002b:00007f8d2d38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.663838][T14622] RAX: ffffffffffffffda RBX: 00007f8d2ebb5fa0 RCX: 00007f8d2e93c819 [ 638.663853][T14622] RDX: 0000000020040044 RSI: 0000200000000200 RDI: 0000000000000004 [ 638.663868][T14622] RBP: 00007f8d2d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 638.663882][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.663954][T14622] R13: 00007f8d2ebb6038 R14: 00007f8d2ebb5fa0 R15: 00007ffe50c221c8 [ 638.663974][T14622] [ 639.025813][T14634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.082386][T14636] syzkaller0: entered promiscuous mode [ 639.097999][T14636] syzkaller0: entered allmulticast mode [ 639.292417][T14641] can0: slcan on ptm0. [ 639.305220][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3411'. [ 639.325526][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3411'. [ 639.430817][T14640] can0 (unregistered): slcan off ptm0. [ 639.711711][T14678] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3413'. [ 639.721028][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3413'. [ 639.892136][T14687] FAULT_INJECTION: forcing a failure. [ 639.892136][T14687] name failslab, interval 1, probability 0, space 0, times 0 [ 639.905082][T14687] CPU: 0 UID: 0 PID: 14687 Comm: syz.0.3417 Not tainted syzkaller #0 PREEMPT(full) [ 639.905109][T14687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 639.905187][T14687] Call Trace: [ 639.905194][T14687] [ 639.905202][T14687] __dump_stack+0x1d/0x30 [ 639.905228][T14687] dump_stack_lvl+0x95/0xd0 [ 639.905256][T14687] dump_stack+0x15/0x1b [ 639.905340][T14687] should_fail_ex+0x263/0x280 [ 639.905362][T14687] should_failslab+0x8c/0xb0 [ 639.905422][T14687] kmem_cache_alloc_noprof+0x66/0x400 [ 639.905532][T14687] ? do_getname+0x2e/0x1c0 [ 639.905562][T14687] do_getname+0x2e/0x1c0 [ 639.905586][T14687] getname_flags+0x1d/0x30 [ 639.905659][T14687] do_sys_openat2+0x60/0x130 [ 639.905682][T14687] __x64_sys_openat+0xf2/0x120 [ 639.905721][T14687] x64_sys_call+0x1e39/0x3020 [ 639.905749][T14687] do_syscall_64+0x12c/0x370 [ 639.905777][T14687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.905799][T14687] RIP: 0033:0x7f8d2e8fd04e [ 639.905815][T14687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 639.905874][T14687] RSP: 002b:00007f8d2d38eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 639.905936][T14687] RAX: ffffffffffffffda RBX: 00007f8d2d38f6c0 RCX: 00007f8d2e8fd04e [ 639.905951][T14687] RDX: 0000000000000002 RSI: 00007f8d2d38ef90 RDI: ffffffffffffff9c [ 639.905965][T14687] RBP: 00007f8d2d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 639.905977][T14687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.906040][T14687] R13: 00007f8d2ebb6038 R14: 00007f8d2ebb5fa0 R15: 00007ffe50c221c8 [ 639.906059][T14687] [ 640.450423][T14695] SELinux: security policydb version 18 (MLS) not backwards compatible [ 640.480166][T14695] SELinux: failed to load policy [ 640.528201][T14698] syzkaller0: entered promiscuous mode [ 640.534413][T14698] syzkaller0: entered allmulticast mode [ 640.587577][T14702] syzkaller0: entered promiscuous mode [ 640.593307][T14702] syzkaller0: entered allmulticast mode [ 640.696142][T14704] hub 8-0:1.0: USB hub found [ 640.701035][T14704] hub 8-0:1.0: 8 ports detected [ 640.971750][T14716] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3425'. [ 641.005531][T14716] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3425'. [ 641.109558][T14714] bond7: entered allmulticast mode [ 641.121852][T14717] macvlan2: entered promiscuous mode [ 641.127156][T14717] macvlan2: entered allmulticast mode [ 641.135800][T14720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 641.156110][T14722] loop7: detected capacity change from 0 to 1024 [ 641.165920][T14722] EXT4-fs: Ignoring removed bh option [ 641.190198][T14722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.240354][ T28] audit: type=1400 audit(1775765832.509:1679): avc: denied { map } for pid=14721 comm="syz.7.3428" path="/379/file1/memory.events.local" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 641.453918][T14734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3432'. [ 642.303384][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.337052][T14767] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3437'. [ 642.361757][T14767] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3437'. [ 642.436639][T14773] loop7: detected capacity change from 0 to 2048 [ 642.442617][T14771] bond4: entered allmulticast mode [ 642.549916][T14771] macvlan2: entered promiscuous mode [ 642.562330][T14773] loop7: detected capacity change from 0 to 2048 [ 642.568898][T14771] macvlan2: entered allmulticast mode [ 642.659940][T14773] loop7: detected capacity change from 0 to 2048 [ 642.685958][T14786] netlink: 372 bytes leftover after parsing attributes in process `syz.6.3444'. [ 642.722912][T14773] loop7: detected capacity change from 0 to 2048 [ 642.792045][ T28] audit: type=1400 audit(1775765834.060:1680): avc: denied { watch } for pid=14787 comm="syz.6.3445" path="/427/file0" dev="tmpfs" ino=2254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 642.816782][T14773] loop7: detected capacity change from 0 to 2048 [ 642.852283][ T28] audit: type=1400 audit(1775765834.060:1681): avc: denied { watch_reads } for pid=14787 comm="syz.6.3445" path="/427/file0" dev="tmpfs" ino=2254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 642.908843][T14773] loop7: detected capacity change from 0 to 2048 [ 642.970977][T14773] loop7: detected capacity change from 0 to 2048 [ 643.045178][T14773] loop7: detected capacity change from 0 to 2048 [ 643.097202][T14773] loop7: detected capacity change from 0 to 2048 [ 643.330257][T14808] netlink: 'syz.7.3447': attribute type 12 has an invalid length. [ 643.350358][T14808] netlink: 'syz.7.3447': attribute type 29 has an invalid length. [ 643.412428][T14812] syzkaller0: entered promiscuous mode [ 643.418013][T14812] syzkaller0: entered allmulticast mode [ 643.446025][T14810] netlink: 'syz.1.3448': attribute type 12 has an invalid length. [ 643.458838][T14810] netlink: 'syz.1.3448': attribute type 29 has an invalid length. [ 643.689235][T14831] hub 8-0:1.0: USB hub found [ 643.694393][T14831] hub 8-0:1.0: 8 ports detected [ 643.709460][T14831] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 643.718109][T14831] macvlan1: entered allmulticast mode [ 643.727459][T14831] veth1_vlan: entered allmulticast mode [ 643.738172][T14831] team0: Port device macvlan1 added [ 645.477353][T14847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.575291][T14855] FAULT_INJECTION: forcing a failure. [ 645.575291][T14855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.613714][T14853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.620667][T14855] CPU: 0 UID: 0 PID: 14855 Comm: syz.7.3455 Not tainted syzkaller #0 PREEMPT(full) [ 645.620724][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.620736][T14855] Call Trace: [ 645.620742][T14855] [ 645.620750][T14855] __dump_stack+0x1d/0x30 [ 645.620777][T14855] dump_stack_lvl+0x95/0xd0 [ 645.620799][T14855] dump_stack+0x15/0x1b [ 645.620875][T14855] should_fail_ex+0x263/0x280 [ 645.620902][T14855] should_fail+0xb/0x20 [ 645.620925][T14855] should_fail_usercopy+0x1a/0x20 [ 645.620960][T14855] _copy_from_user+0x1c/0xb0 [ 645.620990][T14855] ucma_write+0xd8/0x260 [ 645.621014][T14855] ? __pfx_ucma_write+0x10/0x10 [ 645.621036][T14855] vfs_write+0x269/0x9f0 [ 645.621124][T14855] ? __rcu_read_unlock+0x4e/0x70 [ 645.621144][T14855] ? __fget_files+0x184/0x1c0 [ 645.621170][T14855] ksys_write+0xdc/0x1a0 [ 645.621190][T14855] __x64_sys_write+0x40/0x50 [ 645.621228][T14855] x64_sys_call+0x27e1/0x3020 [ 645.621253][T14855] do_syscall_64+0x12c/0x370 [ 645.621345][T14855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.621366][T14855] RIP: 0033:0x7f0cc437c819 [ 645.621382][T14855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.621398][T14855] RSP: 002b:00007f0cc2dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.621418][T14855] RAX: ffffffffffffffda RBX: 00007f0cc45f5fa0 RCX: 00007f0cc437c819 [ 645.621497][T14855] RDX: 000000000000000c RSI: 0000200000000080 RDI: 0000000000000003 [ 645.621524][T14855] RBP: 00007f0cc2dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 645.621581][T14855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.621594][T14855] R13: 00007f0cc45f6038 R14: 00007f0cc45f5fa0 R15: 00007fffa5e23368 [ 645.621612][T14855] [ 645.670461][ T28] audit: type=1326 audit(1775765836.941:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.7.3456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cc437c819 code=0x0 [ 645.888698][T14859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 645.905204][T14861] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.928015][T14859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.941551][T14859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.163128][T14869] set_capacity_and_notify: 5 callbacks suppressed [ 646.163146][T14869] loop5: detected capacity change from 0 to 512 [ 646.176696][T14869] EXT4-fs: Ignoring removed nobh option [ 646.191220][T14869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.208209][T14869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.289292][T14876] loop5: detected capacity change from 0 to 764 [ 646.305632][T14876] rock: directory entry would overflow storage [ 646.312256][T14876] rock: sig=0x4654, size=5, remaining=4 [ 646.389363][T14876] __nla_validate_parse: 5 callbacks suppressed [ 646.389376][T14876] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3462'. [ 646.630632][T14892] siw: device registration error -23 [ 646.728579][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3468'. [ 647.178966][T14911] loop5: detected capacity change from 0 to 764 [ 647.198204][T14911] rock: directory entry would overflow storage [ 647.217822][T14911] rock: sig=0x4654, size=5, remaining=4 [ 647.307348][T14911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3473'. [ 647.390517][T14915] bridge0: port 3(ipvlan2) entered blocking state [ 647.397228][T14915] bridge0: port 3(ipvlan2) entered disabled state [ 647.404823][T14918] loop5: detected capacity change from 0 to 128 [ 647.411769][T14915] ipvlan2: entered allmulticast mode [ 647.419307][T14915] bridge0: entered allmulticast mode [ 647.425083][T14915] ipvlan2: left allmulticast mode [ 647.430395][T14915] bridge0: left allmulticast mode [ 647.553094][T14924] tipc: Enabled bearer , priority 0 [ 647.581532][T14924] tipc: Resetting bearer [ 647.598739][T14923] tipc: Disabling bearer [ 647.756599][ T28] audit: type=1400 audit(1775765840.018:1683): avc: denied { write } for pid=14928 comm="syz.7.3479" path="socket:[42741]" dev="sockfs" ino=42741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 647.787551][T14926] tmpfs: Cannot disable swap on remount [ 647.962073][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 647.989788][T14938] netlink: 'syz.1.3481': attribute type 30 has an invalid length. [ 648.029494][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.056454][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.065338][ T30] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.087638][ T30] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.301260][T14943] hub 8-0:1.0: USB hub found [ 648.306001][T14943] hub 8-0:1.0: 8 ports detected [ 649.001831][T14954] loop7: detected capacity change from 0 to 4096 [ 649.061289][T14954] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 649.420525][T14958] siw: device registration error -23 [ 649.889553][T14951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3485'. [ 650.580067][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3487'. [ 650.705329][T14967] tipc: Enabled bearer , priority 0 [ 650.788658][T14967] tipc: Resetting bearer [ 650.852427][T14966] tipc: Disabling bearer [ 650.889210][T14972] netlink: 'syz.0.3491': attribute type 1 has an invalid length. [ 651.045963][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'. [ 651.078504][T14972] bond8 (unregistering): Released all slaves [ 651.125315][T14981] tipc: Enabled bearer , priority 0 [ 651.140539][T14981] syzkaller0: entered promiscuous mode [ 651.154858][T14981] syzkaller0: entered allmulticast mode [ 651.171567][T14981] syzkaller0: mtu greater than device maximum [ 651.214894][T14980] tipc: Resetting bearer [ 651.232763][T14980] tipc: Disabling bearer [ 651.492816][T14987] siw: device registration error -23 [ 651.631133][T14993] loop5: detected capacity change from 0 to 764 [ 651.649295][T14993] rock: directory entry would overflow storage [ 651.656237][T14993] rock: sig=0x4654, size=5, remaining=4 [ 651.721620][T14993] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3498'. [ 651.782468][T14997] program syz.5.3500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.848062][T15003] tipc: Enabling of bearer rejected, failed to enable media [ 651.972832][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 652.000543][T15017] hub 8-0:1.0: USB hub found [ 652.005342][T15017] hub 8-0:1.0: 8 ports detected [ 652.131365][T15013] hsr_slave_1 (unregistering): left promiscuous mode [ 652.445748][T15032] FAULT_INJECTION: forcing a failure. [ 652.445748][T15032] name failslab, interval 1, probability 0, space 0, times 0 [ 652.468142][T15034] FAULT_INJECTION: forcing a failure. [ 652.468142][T15034] name failslab, interval 1, probability 0, space 0, times 0 [ 652.480762][T15034] CPU: 1 UID: 0 PID: 15034 Comm: syz.0.3515 Not tainted syzkaller #0 PREEMPT(full) [ 652.480823][T15034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 652.480836][T15034] Call Trace: [ 652.480843][T15034] [ 652.480875][T15034] __dump_stack+0x1d/0x30 [ 652.480897][T15034] dump_stack_lvl+0x95/0xd0 [ 652.480937][T15034] dump_stack+0x15/0x1b [ 652.481088][T15034] should_fail_ex+0x263/0x280 [ 652.481112][T15034] should_failslab+0x8c/0xb0 [ 652.481183][T15034] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 652.481264][T15034] ? netlink_realloc_groups+0xf1/0x210 [ 652.481284][T15034] krealloc_node_align_noprof+0x123/0x2f0 [ 652.481312][T15034] netlink_realloc_groups+0xf1/0x210 [ 652.481379][T15034] netlink_bind+0x16a/0x930 [ 652.481395][T15034] __sys_bind+0x1d0/0x290 [ 652.481420][T15034] __x64_sys_bind+0x3f/0x50 [ 652.481480][T15034] x64_sys_call+0x2b30/0x3020 [ 652.481502][T15034] do_syscall_64+0x12c/0x370 [ 652.481549][T15034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.481572][T15034] RIP: 0033:0x7f8d2e93c819 [ 652.481588][T15034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.481607][T15034] RSP: 002b:00007f8d2d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 652.481680][T15034] RAX: ffffffffffffffda RBX: 00007f8d2ebb5fa0 RCX: 00007f8d2e93c819 [ 652.481695][T15034] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 652.481708][T15034] RBP: 00007f8d2d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 652.481722][T15034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.481736][T15034] R13: 00007f8d2ebb6038 R14: 00007f8d2ebb5fa0 R15: 00007ffe50c221c8 [ 652.481755][T15034] [ 652.489853][T15032] CPU: 0 UID: 0 PID: 15032 Comm: syz.7.3514 Not tainted syzkaller #0 PREEMPT(full) [ 652.489879][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 652.489890][T15032] Call Trace: [ 652.489897][T15032] [ 652.489904][T15032] __dump_stack+0x1d/0x30 [ 652.489929][T15032] dump_stack_lvl+0x95/0xd0 [ 652.489949][T15032] dump_stack+0x15/0x1b [ 652.489969][T15032] should_fail_ex+0x263/0x280 [ 652.489994][T15032] should_failslab+0x8c/0xb0 [ 652.490015][T15032] kmem_cache_alloc_noprof+0x66/0x400 [ 652.490042][T15032] ? mas_alloc_nodes+0x1a2/0x210 [ 652.490066][T15032] mas_alloc_nodes+0x1a2/0x210 [ 652.490087][T15032] mas_preallocate+0x2ca/0x510 [ 652.490110][T15032] __split_vma+0x240/0x640 [ 652.490130][T15032] ? mas_find+0x5d5/0x700 [ 652.490152][T15032] vms_gather_munmap_vmas+0x2bc/0x850 [ 652.490184][T15032] do_vmi_align_munmap+0x1e1/0x400 [ 652.490220][T15032] do_vmi_munmap+0x1da/0x220 [ 652.490248][T15032] __vm_munmap+0x1a8/0x290 [ 652.490269][T15032] __x64_sys_munmap+0x36/0x50 [ 652.490295][T15032] x64_sys_call+0x9c0/0x3020 [ 652.490318][T15032] do_syscall_64+0x12c/0x370 [ 652.490343][T15032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.490362][T15032] RIP: 0033:0x7f0cc437c647 [ 652.490377][T15032] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.490394][T15032] RSP: 002b:00007f0cc2dcdd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 652.490413][T15032] RAX: ffffffffffffffda RBX: 00007f0cbc000000 RCX: 00007f0cc437c647 [ 652.490426][T15032] RDX: 0000000000000000 RSI: 0000000001251000 RDI: 00007f0cbadaf000 [ 652.490438][T15032] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 652.490450][T15032] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 652.490462][T15032] R13: 0000000000001000 R14: 00007f0cc0000000 R15: 0000000001251000 [ 652.490479][T15032] [ 652.867173][T15023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3510'. [ 652.909199][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3508'. [ 652.928622][T15039] tipc: Started in network mode [ 652.933532][T15015] netlink: 'syz.6.3508': attribute type 1 has an invalid length. [ 652.935130][T15039] tipc: Node identity ae9941200b6, cluster identity 4711 [ 652.941472][T15015] netlink: 568 bytes leftover after parsing attributes in process `syz.6.3508'. [ 653.064060][T15039] tipc: Enabled bearer , priority 0 [ 653.083246][T15049] syzkaller0: entered promiscuous mode [ 653.103099][T15049] syzkaller0: entered allmulticast mode [ 653.112820][T15039] tipc: Resetting bearer [ 653.129848][T15036] tipc: Resetting bearer [ 653.142218][T15036] tipc: Disabling bearer [ 653.250306][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3521'. [ 653.284876][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3521'. [ 653.481338][T15040] loop7: detected capacity change from 0 to 512 [ 653.515873][T15040] EXT4-fs: Ignoring removed nobh option [ 653.549308][T15040] ext4: Unknown parameter 'fowner' [ 654.096673][ T28] audit: type=1400 audit(1775765848.373:1684): avc: denied { append } for pid=15066 comm="syz.5.3525" name="file0" dev="tmpfs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 654.182863][T15067] loop5: detected capacity change from 0 to 512 [ 654.222967][T15067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.486558][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3530'. [ 654.505353][T15081] netlink: 'syz.6.3530': attribute type 30 has an invalid length. [ 654.559688][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3531'. [ 654.583149][T15083] netlink: 'syz.6.3531': attribute type 30 has an invalid length. [ 654.677348][ T4764] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.686266][ T4764] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.722363][ T4764] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.731825][ T4764] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.744590][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.458919][T15110] bond5 (unregistering): Released all slaves [ 656.513555][T15115] bond1: entered allmulticast mode [ 656.541514][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'. [ 656.581106][T15115] macvlan2: entered promiscuous mode [ 656.582820][ T28] audit: type=1400 audit(1775765850.854:1685): avc: denied { bind } for pid=15109 comm="syz.6.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 656.586830][T15115] macvlan2: entered allmulticast mode [ 656.641725][T15124] netlink: 'syz.5.3542': attribute type 30 has an invalid length. [ 656.661171][ T7699] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.664731][T15126] loop7: detected capacity change from 0 to 512 [ 656.682214][ T7699] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.691114][ T7699] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.700212][ T7699] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.709913][T15126] EXT4-fs: Ignoring removed oldalloc option [ 656.727470][T15126] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 656.749815][T15126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 656.758319][T15126] System zones: 1-12 [ 656.777896][T15126] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.3543: corrupted in-inode xattr: e_value size too large [ 656.797957][T15131] loop5: detected capacity change from 0 to 128 [ 656.805127][T15126] fserror_report: 2 callbacks suppressed [ 656.805142][T15126] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 656.812153][T15126] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.3543: couldn't read orphan inode 15 (err -117) [ 656.833103][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 656.833123][ C1] EXT4-fs (loop7): initial error at time 1775765851: ext4_iget_extra_inode:5040: inode 15 [ 656.833152][ C1] EXT4-fs (loop7): last error at time 1775765851: ext4_iget_extra_inode:5040: inode 15 [ 656.862034][T15126] loop7: lost filesystem error report for type 5 error -117 [ 656.864313][T15126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.886145][T15126] netlink: 'syz.7.3543': attribute type 1 has an invalid length. [ 656.894391][T15126] __nla_validate_parse: 1 callbacks suppressed [ 656.894405][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3543'. [ 656.964835][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.989276][ T28] audit: type=1326 audit(1775765851.265:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8516d9c819 code=0x7ffc0000 [ 657.014542][ T28] audit: type=1326 audit(1775765851.265:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8516d9c819 code=0x7ffc0000 [ 657.015519][T15131] tipc: Enabled bearer , priority 0 [ 657.038455][ T28] audit: type=1326 audit(1775765851.265:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f8516d9c819 code=0x7ffc0000 [ 657.202558][T15140] syzkaller0: entered promiscuous mode [ 657.209352][T15140] syzkaller0: entered allmulticast mode [ 657.227731][ T28] audit: type=1326 audit(1775765851.295:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8516d9c819 code=0x7ffc0000 [ 657.252345][ T28] audit: type=1326 audit(1775765851.295:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8516d9c819 code=0x7ffc0000 [ 657.276534][ T28] audit: type=1326 audit(1775765851.295:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8516d5d04e code=0x7ffc0000 [ 657.324909][ T28] audit: type=1326 audit(1775765851.295:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8516d5d04e code=0x7ffc0000 [ 657.352285][ T28] audit: type=1326 audit(1775765851.295:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15128 comm="syz.5.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8516d5d04e code=0x7ffc0000 [ 657.437956][T15128] tipc: Resetting bearer [ 657.451591][T15128] tipc: Disabling bearer [ 657.866227][T15155] bond5: entered allmulticast mode [ 657.917430][T15155] macvlan4: entered promiscuous mode [ 657.929541][T15155] macvlan4: entered allmulticast mode [ 658.138895][T15159] sch_tbf: peakrate 12 is lower than or equals to rate 996173156578218475 ! [ 658.333571][T15159] syzkaller0: entered promiscuous mode [ 658.367776][T15159] syzkaller0: entered allmulticast mode [ 659.948286][T15182] syz_tun: entered allmulticast mode [ 660.526239][T15187] hub 8-0:1.0: USB hub found [ 660.531258][T15187] hub 8-0:1.0: 8 ports detected [ 661.135512][T15193] netlink: 'syz.0.3566': attribute type 1 has an invalid length. [ 661.174696][T15193] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 661.201085][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 661.231414][T15193] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 661.279408][T15193] bond8 (unregistering): Released all slaves [ 661.454013][T15200] siw: device registration error -23 [ 662.234718][T15210] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3572'. [ 662.310568][T15212] syzkaller0: entered promiscuous mode [ 662.316157][T15212] syzkaller0: entered allmulticast mode [ 662.630964][T15217] xt_hashlimit: size too large, truncated to 1048576 [ 662.680737][T15222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3574'. [ 662.898948][T15228] hub 8-0:1.0: USB hub found [ 662.903966][T15228] hub 8-0:1.0: 8 ports detected [ 663.051041][T15230] netlink: 'syz.5.3579': attribute type 1 has an invalid length. [ 663.160559][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3579'. [ 663.226261][T15235] bond6 (unregistering): Released all slaves [ 663.288026][T15239] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3582'. [ 663.297193][T15239] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3582'. [ 663.465321][T15245] FAULT_INJECTION: forcing a failure. [ 663.465321][T15245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.479075][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.0.3586 Not tainted syzkaller #0 PREEMPT(full) [ 663.479117][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 663.479129][T15245] Call Trace: [ 663.479136][T15245] [ 663.479143][T15245] __dump_stack+0x1d/0x30 [ 663.479166][T15245] dump_stack_lvl+0x95/0xd0 [ 663.479186][T15245] dump_stack+0x15/0x1b [ 663.479268][T15245] should_fail_ex+0x263/0x280 [ 663.479318][T15245] should_fail+0xb/0x20 [ 663.479340][T15245] should_fail_usercopy+0x1a/0x20 [ 663.479409][T15245] strncpy_from_user+0x27/0x250 [ 663.479437][T15245] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 663.479462][T15245] do_getname+0x59/0x1c0 [ 663.479484][T15245] getname_flags+0x1d/0x30 [ 663.479576][T15245] do_sys_openat2+0x60/0x130 [ 663.479663][T15245] __x64_sys_openat+0xf2/0x120 [ 663.479757][T15245] x64_sys_call+0x1e39/0x3020 [ 663.479782][T15245] do_syscall_64+0x12c/0x370 [ 663.479809][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.479831][T15245] RIP: 0033:0x7f8d2e8fd04e [ 663.479846][T15245] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 663.479910][T15245] RSP: 002b:00007f8d2d38ef18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.479975][T15245] RAX: ffffffffffffffda RBX: 00007f8d2d38f6c0 RCX: 00007f8d2e8fd04e [ 663.480055][T15245] RDX: 0000000000000000 RSI: 00007f8d2e9d2328 RDI: ffffffffffffff9c [ 663.480069][T15245] RBP: 00007f8d2d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 663.480084][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.480097][T15245] R13: 00007f8d2ebb6038 R14: 00007f8d2ebb5fa0 R15: 00007ffe50c221c8 [ 663.480117][T15245] [ 663.484508][ T9745] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 664.636551][ T9745] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 665.442129][T15267] syzkaller0: entered promiscuous mode [ 665.457684][T15267] syzkaller0: entered allmulticast mode [ 665.600229][T15274] netlink: 'syz.1.3594': attribute type 1 has an invalid length. [ 665.631307][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 665.651923][T15274] bond2 (unregistering): Released all slaves [ 665.841155][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 665.862112][T15282] loop5: detected capacity change from 0 to 1024 [ 665.872660][T15282] EXT4-fs: inline encryption not supported [ 665.884117][T15280] netlink: 'syz.1.3596': attribute type 30 has an invalid length. [ 665.901366][T15282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 665.913658][T15282] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.936418][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 666.035395][T15292] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3601'. [ 666.118179][T15298] loop5: detected capacity change from 0 to 1024 [ 666.125765][T15298] EXT4-fs: Ignoring removed orlov option [ 666.159542][T15298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.280711][T15310] netlink: 'syz.7.3607': attribute type 1 has an invalid length. [ 666.295691][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3607'. [ 666.308350][T15310] bond3 (unregistering): Released all slaves [ 666.816102][T15320] tipc: Enabled bearer , priority 0 [ 666.857096][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 666.971739][T15319] tipc: Disabling bearer [ 667.021858][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.168591][T15331] FAULT_INJECTION: forcing a failure. [ 667.168591][T15331] name failslab, interval 1, probability 0, space 0, times 0 [ 667.188786][T15333] netlink: 'syz.1.3615': attribute type 30 has an invalid length. [ 667.216807][T15331] CPU: 0 UID: 0 PID: 15331 Comm: syz.0.3614 Not tainted syzkaller #0 PREEMPT(full) [ 667.216835][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 667.216846][T15331] Call Trace: [ 667.216852][T15331] [ 667.216859][T15331] __dump_stack+0x1d/0x30 [ 667.216893][T15331] dump_stack_lvl+0x95/0xd0 [ 667.216914][T15331] dump_stack+0x15/0x1b [ 667.216934][T15331] should_fail_ex+0x263/0x280 [ 667.216961][T15331] should_failslab+0x8c/0xb0 [ 667.217012][T15331] kmem_cache_alloc_noprof+0x66/0x400 [ 667.217035][T15331] ? do_getname+0x2e/0x1c0 [ 667.217057][T15331] do_getname+0x2e/0x1c0 [ 667.217097][T15331] getname_flags+0x1d/0x30 [ 667.217119][T15331] do_sys_openat2+0x60/0x130 [ 667.217146][T15331] __se_sys_openat2+0x193/0x1f0 [ 667.217188][T15331] __x64_sys_openat2+0x55/0x70 [ 667.217211][T15331] x64_sys_call+0x2170/0x3020 [ 667.217233][T15331] do_syscall_64+0x12c/0x370 [ 667.217257][T15331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.217339][T15331] RIP: 0033:0x7f8d2e93c819 [ 667.217352][T15331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.217367][T15331] RSP: 002b:00007f8d2d38f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 667.217387][T15331] RAX: ffffffffffffffda RBX: 00007f8d2ebb5fa0 RCX: 00007f8d2e93c819 [ 667.217438][T15331] RDX: 0000200000000140 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 667.217450][T15331] RBP: 00007f8d2d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 667.217461][T15331] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 667.217485][T15331] R13: 00007f8d2ebb6038 R14: 00007f8d2ebb5fa0 R15: 00007ffe50c221c8 [ 667.217503][T15331] [ 667.509526][T15339] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 667.548439][T15339] __nla_validate_parse: 2 callbacks suppressed [ 667.548455][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3618'. [ 667.554137][T15329] loop5: detected capacity change from 0 to 512 [ 667.572858][T15339] bond8 (unregistering): Released all slaves [ 667.634430][T15329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.649976][T15329] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.693237][T15347] rdma_op ffff888146462980 conn xmit_rdma 0000000000000000 [ 667.724786][T15329] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3611'. [ 667.724826][T15329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3611'. [ 667.724907][T15329] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3611'. [ 667.724958][T15329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3611'. [ 667.725046][T15329] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3611'. [ 667.775097][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.785411][T15349] bond8: entered allmulticast mode [ 667.799119][T15352] loop5: detected capacity change from 0 to 512 [ 667.809696][T15352] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 667.815440][T15352] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 667.815844][T15352] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3621: bad orphan inode 4 [ 667.815933][T15352] loop5: lost filesystem error report for type 5 error -117 [ 667.816140][T15352] EXT4-fs (loop5): 1 orphan inode deleted [ 667.817010][T15352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.819796][T15349] macvlan3: entered promiscuous mode [ 667.819813][T15349] macvlan3: entered allmulticast mode [ 668.743669][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.750867][T15361] netlink: 'syz.1.3623': attribute type 1 has an invalid length. [ 668.814423][T15364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43971 sclass=netlink_route_socket pid=15364 comm=syz.1.3623 [ 668.956034][T15367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.146582][T15370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3625'. [ 669.270575][T15375] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 669.452491][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 669.474189][T15387] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 669.482117][T15388] netlink: 'syz.1.3630': attribute type 30 has an invalid length. [ 669.513565][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 669.548658][T15387] bond9 (unregistering): Released all slaves [ 669.908242][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3632'. [ 670.794733][T15405] xt_hashlimit: overflow, try lower: 6/0 [ 670.990007][T15413] bond3: entered allmulticast mode [ 671.009499][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 671.009515][ T28] audit: type=1400 audit(1775765868.287:1730): avc: denied { listen } for pid=15407 comm="syz.0.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 671.051495][T15413] macvlan3: entered promiscuous mode [ 671.065999][T15413] macvlan3: entered allmulticast mode [ 671.682778][T15429] netlink: 'syz.7.3642': attribute type 64 has an invalid length. [ 671.693474][ T28] audit: type=1400 audit(1775765868.968:1731): avc: denied { watch watch_reads } for pid=15428 comm="syz.7.3642" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 671.775082][T15431] netlink: 'syz.5.3643': attribute type 1 has an invalid length. [ 671.835768][T15431] bond6 (unregistering): Released all slaves [ 671.850775][T15433] loop7: detected capacity change from 0 to 2048 [ 671.884421][T15433] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 671.960931][T15433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.198214][T15453] loop5: detected capacity change from 0 to 1024 [ 674.019520][ T28] audit: type=1400 audit(1775765871.299:1732): avc: denied { mounton } for pid=15436 comm="syz.5.3646" path="/file0" dev="bpf" ino=44638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 674.106849][T15453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.188043][T15453] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.484227][ T7807] syz_tun (unregistering): left promiscuous mode [ 674.552331][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.670089][T15457] lo speed is unknown, defaulting to 1000 [ 674.846366][T15457] chnl_net:caif_netlink_parms(): no params data found [ 674.941330][T15478] __nla_validate_parse: 3 callbacks suppressed [ 674.941420][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3651'. [ 675.289855][T15457] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.318133][T15457] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.340483][T15457] bridge_slave_0: entered allmulticast mode [ 675.356374][T15457] bridge_slave_0: entered promiscuous mode [ 675.372282][T15457] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.388110][T15457] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.478532][T15487] hub 8-0:1.0: USB hub found [ 675.483307][T15487] hub 8-0:1.0: 8 ports detected [ 675.902580][T15457] bridge_slave_1: entered allmulticast mode [ 675.909097][T15457] bridge_slave_1: entered promiscuous mode [ 675.942332][T15457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.965603][T15457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.004977][T15457] team0: Port device team_slave_0 added [ 676.011859][T15457] team0: Port device team_slave_1 added [ 676.052402][T15457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.059633][T15457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.122664][T15457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.134150][T15457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.141084][T15457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.167282][T15457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.194176][T15457] hsr_slave_0: entered promiscuous mode [ 676.200470][T15457] hsr_slave_1: entered promiscuous mode [ 676.212592][T15457] debugfs: 'hsr0' already exists in 'hsr' [ 676.218343][T15457] Cannot create hsr debugfs directory [ 676.263222][ T28] audit: type=1400 audit(1775765873.550:1733): avc: denied { create } for pid=15492 comm="syz.0.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 676.304098][ T28] audit: type=1400 audit(1775765873.580:1734): avc: denied { connect } for pid=15492 comm="syz.0.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 676.362260][ T28] audit: type=1400 audit(1775765873.590:1735): avc: denied { read } for pid=15492 comm="syz.0.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 676.390210][T15457] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 676.397317][ T28] audit: type=1400 audit(1775765873.640:1736): avc: denied { create } for pid=15495 comm="syz.0.3656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 676.419791][T15457] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 676.427239][T15496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=15496 comm=syz.0.3656 [ 676.440598][T15496] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3656'. [ 676.444572][T15457] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 676.469006][T15457] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 676.493762][ T28] audit: type=1400 audit(1775765873.780:1737): avc: denied { write } for pid=15495 comm="syz.0.3656" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 676.556102][T15505] netlink: 'syz.5.3657': attribute type 1 has an invalid length. [ 676.567927][T15507] netlink: 372 bytes leftover after parsing attributes in process `syz.0.3658'. [ 676.601655][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3657'. [ 676.631125][T15505] bond6 (unregistering): Released all slaves [ 676.732747][T15457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.753156][T15457] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.761103][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.768205][ T6446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.021596][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3660'. [ 678.422052][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.429126][ T6446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.459066][T15517] bond6: entered allmulticast mode [ 678.500965][T15457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.650454][T15536] lo speed is unknown, defaulting to 1000 [ 678.827083][T15457] veth0_vlan: entered promiscuous mode [ 678.857969][T15457] veth1_vlan: entered promiscuous mode [ 678.892037][T15457] veth0_macvtap: entered promiscuous mode [ 678.906085][T15457] veth1_macvtap: entered promiscuous mode [ 678.928949][T15457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.950338][T15457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.974586][ T6446] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.997098][ T6446] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.032915][ T6446] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.057366][ T6446] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.822024][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 680.831160][T15569] netlink: 'syz.0.3671': attribute type 30 has an invalid length. [ 680.850465][ T6446] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.859345][ T6446] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.050404][ T6446] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.067809][ T6446] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.463838][T15576] tipc: Enabled bearer , priority 0 [ 681.566239][T15577] syzkaller0: entered promiscuous mode [ 681.573873][T15577] syzkaller0: entered allmulticast mode [ 681.591883][T15577] tipc: Resetting bearer [ 681.632885][T15580] tipc: Resetting bearer [ 681.654760][T15580] tipc: Disabling bearer [ 681.664433][ T28] audit: type=1400 audit(1775765879.950:1738): avc: denied { accept } for pid=15586 comm="syz.5.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 681.842007][T15604] loop7: detected capacity change from 0 to 2048 [ 681.859066][T15604] /dev/loop7: Can't open blockdev [ 681.938033][T15608] netlink: 'syz.7.3683': attribute type 1 has an invalid length. [ 681.955457][T15608] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3683'. [ 681.965030][T15608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 681.979942][T15608] vlan2: entered promiscuous mode [ 681.985053][T15608] bond3: entered promiscuous mode [ 682.749820][ T28] audit: type=1400 audit(1775765882.039:1739): avc: denied { write } for pid=15625 comm="syz.0.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 682.820971][T15633] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3693'. [ 682.830406][T15633] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3693'. [ 682.903841][T15638] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.915157][T15638] bridge_slave_1: left allmulticast mode [ 682.923132][T15638] bridge_slave_1: left promiscuous mode [ 682.931385][T15638] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.022936][T15638] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 683.105844][T15645] netlink: 'syz.7.3698': attribute type 1 has an invalid length. [ 683.141479][T15646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.158001][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3698'. [ 683.172737][T15645] bond4 (unregistering): Released all slaves [ 683.627932][T15653] loop7: detected capacity change from 0 to 2048 [ 683.717541][T15653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.735135][T15653] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.799464][ T28] audit: type=1400 audit(1775765883.050:1740): avc: denied { create } for pid=15650 comm="syz.7.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 683.979427][T15660] bond9: entered allmulticast mode [ 684.014794][T15659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3700'. [ 684.231452][ T28] audit: type=1400 audit(1775765883.520:1741): avc: denied { ioctl } for pid=15662 comm="syz.8.3701" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 684.539496][T15678] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3705'. [ 684.561401][T15678] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3705'. [ 685.426283][T15684] loop8: detected capacity change from 0 to 2048 [ 685.485696][ T9485] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.064820][T15684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.081199][T15684] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.099998][T15683] EXT4-fs (loop8): shut down requested (0) [ 687.438609][T15697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.462606][T15457] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.478659][T15696] syzkaller0: entered promiscuous mode [ 687.485378][T15699] netlink: 'syz.7.3709': attribute type 1 has an invalid length. [ 687.494087][T15696] syzkaller0: entered allmulticast mode [ 687.536875][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3709'. [ 687.563461][ T9742] IPVS: starting estimator thread 0... [ 687.570305][T15699] bond4 (unregistering): Released all slaves [ 687.577068][T15711] 9p: Bad value for 'wfdno' [ 687.582773][T15707] loop8: detected capacity change from 0 to 1764 [ 687.584093][T15712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3717'. [ 687.603698][T15711] netlink: 'syz.1.3716': attribute type 2 has an invalid length. [ 687.606897][T15712] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3717'. [ 687.612664][T15711] netlink: 199792 bytes leftover after parsing attributes in process `syz.1.3716'. [ 687.683961][T15717] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3720'. [ 687.696547][T15710] IPVS: using max 2400 ests per chain, 120000 per kthread [ 687.737053][T15721] loop5: detected capacity change from 0 to 1024 [ 687.754025][T15721] EXT4-fs: Ignoring removed orlov option [ 687.769399][T15721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.821689][T15726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15726 comm=syz.7.3720 [ 688.721278][T15738] FAULT_INJECTION: forcing a failure. [ 688.721278][T15738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.876340][T15738] CPU: 0 UID: 0 PID: 15738 Comm: syz.8.3724 Not tainted syzkaller #0 PREEMPT(full) [ 688.876365][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 688.876377][T15738] Call Trace: [ 688.876383][T15738] [ 688.876392][T15738] __dump_stack+0x1d/0x30 [ 688.876481][T15738] dump_stack_lvl+0x95/0xd0 [ 688.876502][T15738] dump_stack+0x15/0x1b [ 688.876563][T15738] should_fail_ex+0x263/0x280 [ 688.876658][T15738] should_fail+0xb/0x20 [ 688.876682][T15738] should_fail_usercopy+0x1a/0x20 [ 688.876711][T15738] _copy_from_iter+0xcf/0xea0 [ 688.876790][T15738] ? __alloc_skb+0x4f6/0x690 [ 688.876820][T15738] ? __alloc_skb+0x200/0x690 [ 688.876849][T15738] netlink_sendmsg+0x4ae/0x6f0 [ 688.876896][T15738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.876964][T15738] ____sys_sendmsg+0x563/0x5b0 [ 688.876982][T15738] ___sys_sendmsg+0x195/0x1e0 [ 688.877005][T15738] __x64_sys_sendmsg+0xd4/0x160 [ 688.877046][T15738] x64_sys_call+0x194c/0x3020 [ 688.877070][T15738] do_syscall_64+0x12c/0x370 [ 688.877097][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.877180][T15738] RIP: 0033:0x7fcfbeeec819 [ 688.877196][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.877213][T15738] RSP: 002b:00007fcfbd93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.877231][T15738] RAX: ffffffffffffffda RBX: 00007fcfbf165fa0 RCX: 00007fcfbeeec819 [ 688.877243][T15738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 688.877296][T15738] RBP: 00007fcfbd93f090 R08: 0000000000000000 R09: 0000000000000000 [ 688.877308][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.877319][T15738] R13: 00007fcfbf166038 R14: 00007fcfbf165fa0 R15: 00007ffc29a4e2d8 [ 688.877336][T15738] [ 689.416394][T15740] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3725'. [ 689.684201][T15744] loop8: detected capacity change from 0 to 512 [ 689.733970][T15744] FAT-fs (loop8): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 689.881703][T15744] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 689.898689][T15753] netlink: 'syz.7.3730': attribute type 1 has an invalid length. [ 689.930891][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3730'. [ 689.931829][T15744] vhci_hcd vhci_hcd.4: default hub control req: 4018 v0005 i0001 l0 [ 689.967626][T15753] bond4 (unregistering): Released all slaves [ 690.041796][ T28] audit: type=1326 audit(1775765890.325:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 690.082322][ T28] audit: type=1326 audit(1775765890.325:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 690.145412][ T28] audit: type=1326 audit(1775765890.335:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 690.195373][ T28] audit: type=1326 audit(1775765890.335:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 690.276890][ T28] audit: type=1326 audit(1775765890.335:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 690.309087][ T28] audit: type=1326 audit(1775765890.335:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 690.882792][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.285775][ T28] audit: type=1326 audit(1775765890.335:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 691.309516][ T28] audit: type=1326 audit(1775765890.335:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 691.401877][T15776] 9p: Bad value for 'rfdno' [ 691.409834][T15776] netlink: 'syz.5.3735': attribute type 2 has an invalid length. [ 691.417828][T15776] netlink: 199792 bytes leftover after parsing attributes in process `syz.5.3735'. [ 691.565147][ T28] audit: type=1326 audit(1775765890.365:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 691.588865][ T28] audit: type=1326 audit(1775765890.365:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15758 comm="syz.1.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6aaa9c819 code=0x7ffc0000 [ 692.887680][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3741'. [ 693.258113][T15802] netlink: 'syz.0.3743': attribute type 12 has an invalid length. [ 693.280608][T15802] netlink: 'syz.0.3743': attribute type 29 has an invalid length. [ 693.289033][T15802] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3743'. [ 693.375582][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3746'. [ 693.393768][T15807] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3746'. [ 693.489780][T15809] hub 8-0:1.0: USB hub found [ 693.494569][T15809] hub 8-0:1.0: 8 ports detected [ 694.403431][T15835] hub 8-0:1.0: USB hub found [ 694.408165][T15835] hub 8-0:1.0: 8 ports detected [ 695.382993][T15839] netlink: 'syz.0.3756': attribute type 12 has an invalid length. [ 695.414545][T15839] netlink: 'syz.0.3756': attribute type 29 has an invalid length. [ 695.445365][T15839] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3756'. [ 695.582407][T15842] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3757'. [ 695.595033][T15842] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3757'. [ 695.828337][T15848] loop8: detected capacity change from 0 to 512 [ 695.860152][T15848] ext4: Unknown parameter 'nouser_xattr' [ 696.071622][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3764'. [ 696.080961][T15860] netlink: 'syz.8.3764': attribute type 30 has an invalid length. [ 696.152654][ T7699] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.164445][ T7699] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.173703][ T7699] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.182567][ T7699] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.537477][T15864] hub 8-0:1.0: USB hub found [ 696.542264][T15864] hub 8-0:1.0: 8 ports detected [ 696.713885][T15860] loop8: detected capacity change from 0 to 512 [ 696.781748][T15860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 696.811799][T15860] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.3764: invalid block [ 696.825086][T15860] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 696.826465][T15860] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3764: invalid indirect mapped block 4294967295 (level 1) [ 696.837048][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 696.837100][ C1] EXT4-fs (loop8): initial error at time 1775765897: ext4_get_branch:178: inode 11: block 4294967295 [ 696.837460][ C1] EXT4-fs (loop8): last error at time 1775765897: ext4_get_branch:178: inode 11: block 4294967295 [ 696.886394][T15860] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 696.895425][T15860] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3764: invalid indirect mapped block 4294967295 (level 1) [ 696.920284][T15860] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 696.923288][T15860] EXT4-fs (loop8): 2 truncates cleaned up [ 696.948687][T15860] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.980568][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3769'. [ 696.988127][T15883] netlink: 'syz.5.3771': attribute type 12 has an invalid length. [ 696.995192][T15878] netlink: 'syz.0.3769': attribute type 30 has an invalid length. [ 697.011551][T15883] netlink: 'syz.5.3771': attribute type 29 has an invalid length. [ 697.019862][T15883] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3771'. [ 697.507078][T15894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.589737][T15457] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.209572][T15911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.227654][T15919] hub 8-0:1.0: USB hub found [ 699.232486][T15919] hub 8-0:1.0: 8 ports detected [ 699.526623][T15928] __nla_validate_parse: 1 callbacks suppressed [ 699.526637][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3783'. [ 699.551718][T15928] netlink: 'syz.5.3783': attribute type 30 has an invalid length. [ 699.553671][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 699.553685][ T28] audit: type=1400 audit(1775765899.849:1813): avc: denied { read } for pid=15921 comm="syz.8.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 699.660170][T15933] loop8: detected capacity change from 0 to 512 [ 699.718323][T15933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.731956][T15933] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.188346][ T28] audit: type=1400 audit(1775765900.480:1814): avc: denied { map } for pid=15921 comm="syz.8.3777" path="/32/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 700.212511][ T28] audit: type=1400 audit(1775765900.510:1815): avc: denied { execute } for pid=15921 comm="syz.8.3777" path="/32/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 700.215317][T15928] loop5: detected capacity change from 0 to 512 [ 700.272828][T15928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 700.274767][T15945] 9p: Bad value for 'wfdno' [ 700.292365][T15945] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3787'. [ 700.305668][T15928] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3783: invalid block [ 700.318572][T15928] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 700.319897][T15928] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3783: invalid indirect mapped block 4294967295 (level 1) [ 700.320279][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 700.320559][ C1] EXT4-fs (loop5): initial error at time 1775765900: ext4_get_branch:178: inode 11: block 4294967295 [ 700.321327][ C1] EXT4-fs (loop5): last error at time 1775765900: ext4_get_branch:178: inode 11: block 4294967295 [ 700.374520][T15928] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 700.375629][T15928] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3783: invalid indirect mapped block 4294967295 (level 1) [ 700.400079][T15928] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 700.417399][T15928] EXT4-fs (loop5): 2 truncates cleaned up [ 700.442257][T15928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.551824][T15457] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.571098][ T7423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.572866][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3791'. [ 700.589431][T15951] netlink: 'syz.7.3791': attribute type 30 has an invalid length. [ 700.649393][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3788'. [ 700.705426][T15956] loop7: detected capacity change from 0 to 512 [ 700.732303][T12214] ================================================================== [ 700.736256][T15956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 700.740442][T12214] BUG: KCSAN: data-race in __d_drop / fast_dput [ 700.740472][T12214] [ 700.740477][T12214] write to 0xffff8881138c6850 of 8 bytes by task 3000 on cpu 0: [ 700.740492][T12214] __d_drop+0x14d/0x240 [ 700.740515][T12214] __dentry_kill+0x122/0x460 [ 700.740533][T12214] finish_dput+0x2b/0x200 [ 700.740556][T12214] dput+0x52/0x60 [ 700.740579][T12214] step_into_slowpath+0x38c/0x4c0 [ 700.740602][T12214] path_lookupat+0x330/0x500 [ 700.740625][T12214] filename_lookup+0x32a/0x390 [ 700.740647][T12214] do_readlinkat+0x74/0x2f0 [ 700.740673][T12214] __x64_sys_readlink+0x47/0x60 [ 700.740697][T12214] x64_sys_call+0x2b51/0x3020 [ 700.740722][T12214] do_syscall_64+0x12c/0x370 [ 700.740742][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.740762][T12214] [ 700.740768][T12214] read to 0xffff8881138c6850 of 8 bytes by task 12214 on cpu 1: [ 700.740784][T12214] fast_dput+0x5f/0x2c0 [ 700.740807][T12214] dput+0x24/0x60 [ 700.740825][T12214] filename_unlinkat+0x217/0x410 [ 700.740856][T12214] __se_sys_unlink+0x2b/0xe0 [ 700.740877][T12214] __x64_sys_unlink+0x1f/0x30 [ 700.740896][T12214] x64_sys_call+0x2eb6/0x3020 [ 700.740921][T12214] do_syscall_64+0x12c/0x370 [ 700.740944][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.740965][T12214] [ 700.740969][T12214] value changed: 0xffff888237754120 -> 0x0000000000000000 [ 700.740982][T12214] [ 700.740987][T12214] Reported by Kernel Concurrency Sanitizer on: [ 700.740998][T12214] CPU: 1 UID: 0 PID: 12214 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 700.741023][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 700.741036][T12214] ================================================================== [ 700.790588][T15962] loop8: detected capacity change from 0 to 764 [ 700.842471][T15963] siw: device registration error -23 [ 700.987666][T15956] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3791: invalid block [ 701.016864][T15962] rock: directory entry would overflow storage [ 701.023562][T15962] rock: sig=0x4654, size=5, remaining=4 [ 701.035111][T15956] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 701.036111][T15956] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3791: invalid indirect mapped block 4294967295 (level 1) [ 701.045440][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 701.045490][ C0] EXT4-fs (loop7): initial error at time 1775765902: ext4_get_branch:178: inode 11: block 4294967295 [ 701.045901][ C0] EXT4-fs (loop7): last error at time 1775765902: ext4_get_branch:178: inode 11: block 4294967295 [ 701.089692][T15963] syz_tun (unregistering): left promiscuous mode [ 701.089700][T15956] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 701.097944][T15956] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3791: invalid indirect mapped block 4294967295 (level 1) [ 701.123559][T15956] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 701.125738][T15956] EXT4-fs (loop7): 2 truncates cleaned up [ 701.148835][T15956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.163350][T14947] syz_tun (unregistering): left allmulticast mode [ 701.181628][T15956] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.210944][T15956] syz_tun (unregistering): left promiscuous mode [ 701.275354][ T7699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.285696][ T7699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.394743][ T7699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.405088][ T7699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.462875][ T7699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.473239][ T7699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.542837][ T7699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.553196][ T7699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.631150][ T7699] bridge_slave_1: left allmulticast mode [ 701.636939][ T7699] bridge_slave_1: left promiscuous mode [ 701.642878][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.650577][ T7699] bridge_slave_0: left allmulticast mode [ 701.656204][ T7699] bridge_slave_0: left promiscuous mode [ 701.661889][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.752835][ T7699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.762643][ T7699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.772410][ T7699] bond0 (unregistering): Released all slaves [ 701.780138][ T7699] bond1 (unregistering): Released all slaves [ 701.788205][ T7699] bond2 (unregistering): Released all slaves [ 701.796494][ T7699] bond3 (unregistering): Released all slaves [ 701.804534][ T7699] bond4 (unregistering): Released all slaves [ 701.812494][ T7699] bond5 (unregistering): Released all slaves [ 701.820959][ T7699] bond6 (unregistering): Released all slaves [ 701.832127][ T7699] bond7 (unregistering): Released all slaves [ 701.841928][ T7699] bond8 (unregistering): Released all slaves [ 701.850184][ T7699] bond9 (unregistering): Released all slaves [ 701.903587][ T7699] tipc: Left network mode [ 701.914018][ T7699] hsr_slave_0: left promiscuous mode [ 701.920525][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.927894][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.935708][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.944747][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.955281][ T7699] veth1_macvtap: left promiscuous mode [ 701.960912][ T7699] veth0_macvtap: left promiscuous mode [ 701.966386][ T7699] veth1_vlan: left promiscuous mode [ 701.971636][ T7699] veth0_vlan: left promiscuous mode [ 702.025600][ T7699] team0 (unregistering): Port device team_slave_1 removed [ 702.035296][ T7699] team0 (unregistering): Port device team_slave_0 removed [ 702.273962][ T7699] IPVS: stop unused estimator thread 0... [ 702.341583][ T7699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.352014][ T7699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.411767][ T7699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.422192][ T7699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.461642][ T7699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.472014][ T7699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.502545][ T7699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.512923][ T7699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.588975][ T7699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.599395][ T7699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.685224][ T7699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.695752][ T7699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.722903][ T7699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.733520][ T7699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.781815][ T7699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.792833][ T7699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.854222][ T7699] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.871190][ T7699] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.922209][ T7699] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.932636][ T7699] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.971541][ T7699] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.981874][ T7699] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.031926][ T7699] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.042344][ T7699] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.122661][ T7699] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.133203][ T7699] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.181963][ T7699] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.192655][ T7699] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.250391][ T7699] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.260952][ T7699] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.321737][ T7699] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 703.332135][ T7699] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.444996][ T7699] bridge_slave_1: left allmulticast mode [ 703.451055][ T7699] bridge_slave_1: left promiscuous mode [ 703.456819][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.465042][ T7699] bridge_slave_0: left allmulticast mode [ 703.471172][ T7699] bridge_slave_0: left promiscuous mode [ 703.476839][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.485979][ T7699] bridge_slave_1: left allmulticast mode [ 703.491826][ T7699] bridge_slave_1: left promiscuous mode [ 703.497442][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.505435][ T7699] bridge_slave_0: left allmulticast mode [ 703.511168][ T7699] bridge_slave_0: left promiscuous mode [ 703.516852][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.525715][ T7699] bridge_slave_1: left allmulticast mode [ 703.531437][ T7699] bridge_slave_1: left promiscuous mode [ 703.537025][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.544744][ T7699] bridge_slave_0: left allmulticast mode [ 703.550575][ T7699] bridge_slave_0: left promiscuous mode [ 703.556301][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.564514][ T7699] bridge_slave_0: left allmulticast mode [ 703.570181][ T7699] bridge_slave_0: left promiscuous mode [ 703.575951][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.674510][ T7699] ip6gretap0 (unregistering): left promiscuous mode [ 703.780370][ T7699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.790341][ T7699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.800212][ T7699] bond0 (unregistering): Released all slaves [ 703.807522][ T7699] bond1 (unregistering): Released all slaves [ 703.815783][ T7699] bond2 (unregistering): Released all slaves [ 703.823881][ T7699] bond3 (unregistering): Released all slaves [ 703.862031][ T7699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.871389][ T7699] bond0 (unregistering): Released all slaves [ 703.880173][ T7699] bond1 (unregistering): Released all slaves [ 703.888129][ T7699] bond2 (unregistering): Released all slaves [ 703.897469][ T7699] bond3 (unregistering): Released all slaves [ 703.907217][ T7699] ip6gretap0 (unregistering): left promiscuous mode [ 703.941648][ T7699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.951447][ T7699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.960862][ T7699] bond0 (unregistering): Released all slaves [ 703.967981][ T7699] bond1 (unregistering): Released all slaves [ 703.975955][ T7699] bond2 (unregistering): Released all slaves [ 703.983858][ T7699] bond3 (unregistering): Released all slaves [ 703.991687][ T7699] bond4 (unregistering): Released all slaves [ 704.001413][ T7699] bond5 (unregistering): Released all slaves [ 704.009476][ T7699] bond6 (unregistering): Released all slaves [ 704.090471][ T7699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.100468][ T7699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.110466][ T7699] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 704.120269][ T7699] bond0 (unregistering): Released all slaves [ 704.158285][ T7699] tipc: Left network mode [ 704.162932][ T7699] tipc: Left network mode [ 704.173552][ T7699] hsr_slave_0: left promiscuous mode [ 704.180754][ T7699] hsr_slave_1: left promiscuous mode [ 704.190233][ T7699] hsr_slave_0: left promiscuous mode [ 704.195908][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.204106][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.211749][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.219256][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.230323][ T7699] hsr_slave_0: left promiscuous mode [ 704.236062][ T7699] hsr_slave_1: left promiscuous mode [ 704.244403][ T7699] hsr_slave_0: left promiscuous mode [ 704.250241][ T7699] hsr_slave_1: left promiscuous mode [ 704.255914][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.263525][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.271260][ T7699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.278774][ T7699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.297417][ T7699] veth1_macvtap: left promiscuous mode [ 704.302948][ T7699] veth0_macvtap: left promiscuous mode [ 704.308748][ T7699] veth1_vlan: left promiscuous mode [ 704.313948][ T7699] veth0_vlan: left promiscuous mode [ 704.319737][ T7699] veth1_macvtap: left promiscuous mode [ 704.325264][ T7699] veth0_macvtap: left promiscuous mode [ 704.331033][ T7699] veth1_vlan: left allmulticast mode [ 704.336314][ T7699] veth1_vlan: left promiscuous mode [ 704.341617][ T7699] veth0_vlan: left promiscuous mode [ 704.347275][ T7699] veth1_macvtap: left promiscuous mode [ 704.352785][ T7699] veth0_macvtap: left promiscuous mode [ 704.358312][ T7699] veth1_vlan: left promiscuous mode [ 704.363529][ T7699] veth0_vlan: left promiscuous mode [ 704.369308][ T7699] veth1_macvtap: left promiscuous mode [ 704.374761][ T7699] veth0_macvtap: left promiscuous mode [ 704.380335][ T7699] veth1_vlan: left promiscuous mode [ 704.385543][ T7699] veth0_vlan: left promiscuous mode [ 704.517399][ T7699] team0 (unregistering): Port device team_slave_1 removed [ 704.528944][ T7699] team0 (unregistering): Port device team_slave_0 removed [ 704.564259][ T7699] team0 (unregistering): Port device macvlan1 removed [ 704.584622][ T7699] team0 (unregistering): Port device team_slave_1 removed [ 704.595117][ T7699] team0 (unregistering): Port device team_slave_0 removed [ 704.647065][ T7699] team0 (unregistering): Port device team_slave_1 removed [ 704.656302][ T7699] team0 (unregistering): Port device team_slave_0 removed [ 704.707568][ T7699] team0 (unregistering): Port device team_slave_1 removed [ 704.716952][ T7699] team0 (unregistering): Port device team_slave_0 removed [ 705.426246][ T7699] IPVS: stop unused estimator thread 0... [ 705.433145][ T7699] IPVS: stop unused estimator thread 0... [ 705.439388][ T7699] IPVS: stop unused estimator thread 0... [ 705.445713][ T7699] IPVS: stop unused estimator thread 0...