last executing test programs: 1m20.834138551s ago: executing program 1 (id=398): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xfb, 0x0, 0xfe, 0x0, 0x400, 0xf6103, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x200000009, 0x7}, 0x40, 0x0, 0x5, 0x0, 0x7, 0xfffffffd, 0xfffb, 0x0, 0x4000, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write(r3, &(0x7f0000000300)="e4b2c388b24bb553109b37e4a5b2fff043e20d0a084f594addbf3ff76e0e2e45b2", 0x21) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xfffffee2) readv(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) splice(r5, 0x0, r7, 0x0, 0x807, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r3, r4}) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000200)={0x2, 0x6, 0x2, 0x8, 0x18, "3ae4082a9e1169a7ac73e22d79fa9bd9988ae7"}) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)=""/44, &(0x7f0000000040)=0x2c) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.804932314s ago: executing program 1 (id=410): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)='proc\x00', 0x10005c9, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) getsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket(0x10, 0x3, 0x0) 1m16.559583964s ago: executing program 1 (id=421): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, 0x0, 0x147) 1m16.346630735s ago: executing program 1 (id=423): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x0, &(0x7f0000000200), 0x1, 0xbe3, &(0x7f0000000c40)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0xfffffffffffffddf}, 0x28) (async) socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140), 0x0) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) 1m15.757807946s ago: executing program 1 (id=431): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pidfd_send_signal(r0, 0x21, 0x0, 0x0) 1m13.743402831s ago: executing program 1 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f00000004c0)=0x5) r0 = socket(0x2, 0x80805, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="bf", 0x1}], 0x1}, 0x800) (async) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="bf", 0x1}], 0x1}, 0x800) unshare(0x6a040000) socket$kcm(0x10, 0x6, 0x4) (async) socket$kcm(0x10, 0x6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x108) (async) creat(&(0x7f0000000200)='./file0\x00', 0x108) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x144, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x110, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff8c5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa487}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c0}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ac}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x144, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x110, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff8c5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa487}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c0}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ac}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m13.734563651s ago: executing program 32 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f00000004c0)=0x5) r0 = socket(0x2, 0x80805, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="bf", 0x1}], 0x1}, 0x800) (async) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="bf", 0x1}], 0x1}, 0x800) unshare(0x6a040000) socket$kcm(0x10, 0x6, 0x4) (async) socket$kcm(0x10, 0x6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x108) (async) creat(&(0x7f0000000200)='./file0\x00', 0x108) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x144, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x110, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff8c5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa487}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c0}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ac}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x144, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x110, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff8c5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa487}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c0}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ac}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.442296668s ago: executing program 3 (id=1531): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) creat(&(0x7f0000000080)='./bus\x00', 0x154) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=':\x00'], 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @cgroup_skb}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r3, 0xe, &(0x7f0000000300)={0x0, 0x1, 0xfffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = io_uring_setup(0x7b0c, &(0x7f0000000900)={0x0, 0x6bc3, 0x8, 0x1, 0x1060}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r7, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x80000000, [0x64b3d7eb, 0x4], 0xd3, 0x21, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @private1, @mcast2, @private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x653afb6a7eb5282b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1c8, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x587}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_TUPLE={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @empty}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @private2}}}, @CTA_TUPLE_PROTO, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0xac, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) connect$inet6(r8, &(0x7f0000000940)={0xa, 0x4e20, 0x7, @remote, 0x1}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 7.62574747s ago: executing program 3 (id=1543): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0xfffffffd, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 7.498680897s ago: executing program 3 (id=1544): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4891}, 0x2004c800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r7, 0x5606, 0x9fd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fdlrfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000359b7e7fcf6d040999700213db11", @ANYRES32=0x0, @ANYBLOB="312000000000000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.748291082s ago: executing program 3 (id=1584): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = eventfd2(0x800000, 0x100001) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x8}, 0x143, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@sg0, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x200000000000002, 0x0, 0x100000, 0x80000000001ffffc, 0xfffffffffffffffc, 0x0, 0x3}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x6, 0x2, 0xa9, 0x7fffffffffffffff, 0x1000000000000, 0xfffffffffffffff5, 0x0, 0x7fff, 0x400005}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x4, 0x2, 0x1, 0xffffffffffffffff, 0x80000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delqdisc={0x6c, 0x25, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe0, 0xa}, {0x6, 0xfff3}, {0xf, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x2, 0x9940, 0x1, 0x3, 0x657c, 0x1}}, {0x6, 0x2, [0xff]}}]}, @TCA_RATE={0x6, 0x5, {0x39, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800db8d00000000000000000200200000000006"], 0x1c}}, 0x200e4840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r8, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fb, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) io_getevents(r8, 0xbc7e, 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)={r9, r10+60000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000001100)=""/4104, 0x58, 0x1008, 0xa, 0x5}, 0x28) 2.518148034s ago: executing program 2 (id=1606): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x9, 0x5}}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) creat(&(0x7f0000000080)='./bus\x00', 0x154) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003780)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x1c000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r3}, 0x38) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 2.496594915s ago: executing program 3 (id=1608): perf_event_open(0x0, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000200)="800034ca00000000", 0x8, 0x2004c080, &(0x7f0000000180)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1a) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wg1\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x0, 0x3, 0x20}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) r5 = syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0xc00000000000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, 0x0, 0x0) bind$inet(r7, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000001300)) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)) sendmmsg$inet(r7, 0x0, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x100, 0x1, &(0x7f0000000800)=[{0x0, 0x0, 0x5, 0x869b}], 0x1) 2.458828347s ago: executing program 2 (id=1609): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) (async) futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000048000), 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) (async) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_setup(0x261a, &(0x7f0000000080)={0x0, 0x295d, 0x80, 0x0, 0x21b, 0x0, r2}) 2.377690651s ago: executing program 2 (id=1611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}}}}]}, 0x38}}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 2.352898092s ago: executing program 3 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$pokeuser(0x6, r3, 0x3, 0x9f) 2.323182964s ago: executing program 5 (id=1614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x100}, {r3, 0x201}], 0x2, &(0x7f0000000200)={r4, r5+10000000}, &(0x7f0000000340)={[0x7]}, 0x8) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendto$inet(r6, &(0x7f0000001380)="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", 0x1000, 0x1, &(0x7f0000002380)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x2a}, 0x20) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.274988186s ago: executing program 2 (id=1617): r0 = syz_ublk_setup_io_uring(0x225, &(0x7f00000001c0)={0x0, 0x4461, 0x0, 0x3, 0x1c4}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) (async) r1 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op={0x0, 0xc}], 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000680)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe4IH\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\x96\x9ch\xbc\xedi\x99\xf8\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x40, r3, 0x1, 0x3, 0x23, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x2000000, 0x0) io_uring_setup(0xfdf, &(0x7f0000000440)={0x0, 0xa7a7, 0x10000, 0x1, 0x7d, 0x0, r0}) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000940)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/71, 0x47, 0x0, &(0x7f0000000880)=""/162, 0xa2}, &(0x7f00000009c0)=0x40) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2003}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) (async) socket$inet6(0xa, 0x5, 0x47) 2.258202737s ago: executing program 2 (id=1619): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x1018092, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f00004c8000/0x4000)=nil, 0x4000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) io_submit(0x0, 0x1, &(0x7f0000001300)=[0x0]) pwritev2(r1, &(0x7f0000000240), 0x0, 0x5a00, 0x0, 0x3) 2.165844261s ago: executing program 5 (id=1621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000004c0)={{r0, &(0x7f0000000000)='[+\x00', 0x109100, &(0x7f0000000040)={@_ha_fsid={[0x1, 0xfffffffe]}, {0x5, 0xf, 0x2}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}, 0x3, &(0x7f0000000440)=[{0x2, 0x2, &(0x7f0000000140)='!}\xa4\x00', &(0x7f00000001c0)="31fdc8c4", 0x4, 0x18}, {0x3, 0xfffffbee, &(0x7f0000000200)=']/-#\x00', &(0x7f0000000240)="fe0f780b7d333f0502c139ac337eed9dd8e6f0777d0a0752efd4b5840c8b08d3e721a371613a3e6e718992d1e30fa07702e2f7e992fe2e2b0cb27d563fa007b0425880dd8ae7ee603f0b7a3ee458374b62379c164f5eb9eae00b00f7907966526b5fa0c5f7e9fc22dba9f4b4856f67ab921e2dc9ed897bab58c61b644c697d839f1a752582c268fe894bd87d33ee09dc442a50ed", 0x94, 0xa}, {0x2, 0x5, &(0x7f0000000300)='-/\x00', &(0x7f0000000340)="ba0ab7c869b4cc58d6086f1cf9364db243532b91eda42d63add1b9f5f418b08c8f0f580420348c4575501008c7aa18e975f5f88cdd61fa4526085d230dd6ad502b84412ff59d2fc3d8972cd5dab9e7fa5d22013ad1b416227adcf1f29aa8816354334f9961cc8b4ece89687ac3ff9d789486455068eb5c85049f1e8d899e03350ab5c2a3d7b083a971dffee407a4ff5603d0b0d6cd73e43ec5c23ed5dce3e0ea7d3981b1fe1c767a49c682d201d75453922e9407caec81b6454654fe740b6a18bb9ddb56fc8d4340f2e78fd159aa8c8ccf6ba30a0b166ba65cd57814dabff45809bd65ad7d33238f900c7396a399ce6edf2977a9d1a709", 0xf7, 0x20}]}) 2.121754074s ago: executing program 5 (id=1623): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x68) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x200, 0x0, 0x0, 0x5}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000540)={r3, 0x1, 0xff80}, 0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x1, 0x80, 0x7, 0x6, 0x2, 0x1d7, 0x6, {r4, @in6={{0xa, 0x4e21, 0x2, @mcast1, 0xaee}}, 0x8d2, 0x4, 0x8, 0xfffffffb, 0x2}}, &(0x7f0000000740)=0xb0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x55}, [@call={0x6f}], {0x95, 0x0, 0xa}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) (async) getsockopt(r7, 0x1, 0x7, &(0x7f00000000c0)=""/135, &(0x7f0000000180)=0x87) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4403b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xff) (async) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000500)={@dev, @broadcast, 0x0}, &(0x7f0000000540)=0xc) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x67, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x1b, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000001a040000000000000f00000009700f00c000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000004e0c000000ae0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000002000000090000008500000006000000180000000f00000000000000f3ffffff180000000200000000000000020000001853000003000000000000000000000095000000000000009c8733cc3c0d746ceaeb70a278c8aef03b8559df0ea51d5e23d31fffd06be3a80eeaf80090bdac636422f3b55715f7fd89ac5550685d448796472ddbd37e5b407f48972d9b96b2fa8d93b3f2553cffcd56d9e0ddea65f55ca47e82b36ed8708cf10561d9787d624f5f79c285e8000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', r8, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600)=[{0x2, 0x1, 0xf, 0x4}, {0x1, 0x3, 0xd, 0x4}, {0x1, 0x3, 0x6, 0xa}, {0x3, 0x5, 0x2, 0x4}, {0x0, 0x3, 0xd, 0x4}, {0x2, 0x4, 0x4, 0x8}], 0x10, 0x10001}, 0x94) 2.018551728s ago: executing program 5 (id=1624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setrlimit(0x2, &(0x7f00000001c0)={0x8, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b8, 0x10, 0x80080000, 0x200}, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x2cc8, 0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000680)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) 1.98652155s ago: executing program 5 (id=1626): socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0xc) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(0xffffffffffffffff, r3) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.022200119s ago: executing program 5 (id=1639): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000780)={{0xd0f, 0x6, 0x9, 0x3, 0xa6}, &(0x7f0000000540)=[{}, {}, {}]}) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) 550.382032ms ago: executing program 2 (id=1646): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000937fed)=""/3, &(0x7f0000000040)=0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000002380)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") r8 = dup(r2) r9 = syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES16=r9], 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0xc0) lseek(r0, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a88000000090a01040000000000000000070000000900010073797a30000000000c000b40005c0011800b00010074756e6e656c00004c0002000240000000010800014000000001080002400000000d0800014000000000080002400000000c0800034000000000080003400000000008000240000000110800024000000002140000001000010000000000000000000084000a"], 0xb0}}, 0x0) 402.757999ms ago: executing program 4 (id=1648): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010029bd70000401007080200000000000030010"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 342.766563ms ago: executing program 0 (id=1650): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="020afb090900000027bd7000fcdbdf25010018007f800000010009000000000005001a000000000000000000000000000000000000000000000000000000000000000001000004107c148a057575e9886bed30ee8b11b9388ebde162401eb73815b2389853d0bd38c7a94df7f4756cb19643c50f3a3cae533b85f2fa1734c4fd8e7aa5f7be7552564d4db5bbc20ea6551a915210040dd3"], 0x48}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40080) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000f80)={0x5, 0x1, 0x0, 'queue1\x00', 0x6}) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x803) (async) listen(0xffffffffffffffff, 0x7d4165c9) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x8, 0xffff, 0x46a, 0x101, 0x2000000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc242, 0x0) 304.163365ms ago: executing program 4 (id=1651): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) socket$inet6_icmp(0xa, 0x2, 0x3a) 234.250738ms ago: executing program 0 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x6a}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc5e8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x700}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1c5}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4, 0x10001, 0x1, 0x152fb66a, 0x5598, 0x5, 0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x565}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2a1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x29b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffffff1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4b3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x10d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x43a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3a1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3c12, 0x7, 0x1, 0x1000, 0x1, 0xffffffff]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6d2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x382}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4050}, 0x815) r3 = socket(0x10, 0x5, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @remote, 0x8}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x4024094) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r3) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000680)={@local, @broadcast, 0x0}, &(0x7f00000006c0)=0xc) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x7, 0x30, 0x4, 0xfffffffa, {{0x49, 0x4, 0x3, 0x3, 0x124, 0x67, 0x0, 0x48, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0xf, 0x1e, [@multicast1, @private=0xa010102, @broadcast]}, @cipso={0x86, 0x4c, 0xfffffffffffffffc, [{0x1, 0x10, "d29948e3469a85028fe5ea081089"}, {0x6, 0x12, "1f4ed6d4da4859ef8f6799da9228b78a"}, {0x5, 0xb, "a5b18f662d756ae061"}, {0x5, 0xf, "7d4232f86a9be515095508f38b"}, {0x6, 0xa, "4b1ca60a570110ac"}]}, @end, @rr={0x7, 0xf, 0x72, [@multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x43}]}, @noop, @timestamp_prespec={0x44, 0x4c, 0xa5, 0x3, 0xa, [{@multicast2, 0x3}, {@remote, 0x8}, {@remote, 0x7fffffff}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x521}, {@rand_addr=0x64010100, 0x4}, {@remote, 0xffffffff}, {@empty}, {@loopback, 0x7fff}]}, @ssrr={0x89, 0xb, 0xd2, [@rand_addr=0x64010100, @local]}, @lsrr={0x83, 0x27, 0xa9, [@empty, @remote, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x44}, @remote, @remote, @private=0xa010102, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x50, 0x1, 0x3, [{@remote, 0x1000000}, {@remote, 0x80000001}, {@private=0xa010100, 0x2}]}, @rr={0x7, 0x7, 0x6a, [@multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000940)={'wg1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x2cc, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x260, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe3e4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x77}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc0000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':&-]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}]}, @ETHTOOL_A_BITSET_MASK={0xef, 0x5, "e18de2a11f7323a91bd40d1da122a2ec6f31d86f00e8544360512da92c188c9247ea7c31a31e854da5bf1e52612562b611c74df7b6bde8330aaf0545503ded6f891329e357be3110094775fd3de5b674ea655e52b94e8b4ecfa3276e43a639816bb055013bee58d33f9445ece6f252accbf3100315b7c5b1ece73185c90304375aea0bdcf4d2a6788960ff262314b5595ea0f4310291aa64950ef75fd7ac5a12d8f0c73ed801f551fef0a906b2a41daacbaf98cf39454cb078aa72df4658f4856c26d5a6ee0b0f0f5218c9069267925bc6905d1012b52680ec913515b5d8bdfa447e646abee550497a5052"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4776}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x540}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdfb}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!$}@!!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!^[*]\x1a(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x11}, 0x80) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000e80)={&(0x7f0000000d40), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r13, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x40000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xe}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xb7db}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004890}, 0x4000001) (async) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000ec0)={0x0, 0x6, 0x0, 0x8, 0x1}, &(0x7f0000000f00)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r14, 0x84, 0x13, &(0x7f0000000f40)={r15, 0xa}, &(0x7f0000000f80)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x20, &(0x7f0000001200)={&(0x7f0000001140)=""/82, 0x52, 0x0, &(0x7f00000011c0)=""/46, 0x2e}}, 0x10) r17 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000001280)='./file0\x00', 0x0, 0x8}, 0x18) (async) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x12, 0x0, 0x1, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', r12, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x20, 0x12, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff84e}, [@jmp={0x5, 0x0, 0x9, 0xa, 0x3, 0x80, 0xffffffffffffffec}, @ringbuf_query, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000001080)='syzkaller\x00', 0x5, 0x4, &(0x7f00000010c0)=""/4, 0x40f00, 0x2, '\x00', r10, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100)={0x2, 0xa, 0x8, 0x2951}, 0x10, r16, r17, 0x0, &(0x7f00000013c0)=[r14, r18, r19], 0x0, 0x10, 0x6}, 0x94) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, r20, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r14, 0x40a85323, &(0x7f0000001600)={{0x6, 0x9}, 'port0\x00', 0x10, 0x1, 0x0, 0x4, 0x0, 0xfffffffd, 0x5, 0x0, 0x8}) 228.830378ms ago: executing program 4 (id=1653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c000280080001"], 0xec}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 223.392368ms ago: executing program 0 (id=1654): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async, rerun: 32) r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) (async) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x22c6c3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030306ae2591030303030303030372c666f776e65723c", @ANYRESDEC=r1, @ANYBLOB=',audit,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000140)=""/130, 0x82, 0x2) (async) pread64(r4, &(0x7f0000002100)=""/171, 0xab, 0x9a) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x161) write$P9_RLERRORu(r6, 0x0, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r8 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000003c0)={0x3000000c}) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) (async) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r9, 0x1) 122.310053ms ago: executing program 4 (id=1655): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8a00) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001045}, 0x80) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000180)=0x90000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_open_pts(r0, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0xa2f5f000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000200)={0x0, 0x5}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7800, 0x80, 0xff, 0xa2, {{0x28, 0x4, 0x1, 0x4, 0xa0, 0x68, 0x0, 0x2, 0x2f, 0x0, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x45, 0x2, [{0x6, 0x7, "066168921f"}, {0x0, 0x8, "972be55529dd"}, {0x0, 0x10, "4b40c39e39c6ef639cac348c8e9b"}, {0x7, 0xe, "0de89e406e4511e480967c40"}, {0x0, 0xd, "328184432347fa0cdb1259"}, {0x7, 0x5, "069763"}]}, @cipso={0x86, 0x2c, 0x0, [{0x6, 0xb, "732e8dfc0b0ea8d99d"}, {0x1, 0xb, "6055fed4715bb547c5"}, {0x0, 0x10, "1b072b0d04b9bd99786ded6dbf60"}]}, @ssrr={0x89, 0xf, 0xd0, [@multicast2, @broadcast, @broadcast]}, @rr={0x7, 0xb, 0xe3, [@multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', r2, 0x0, 0x40, 0xe, 0x200, {{0x26, 0x4, 0x0, 0xb, 0x98, 0x68, 0x0, 0x7b, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x44, 0x5a, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x3b7f}, {@rand_addr=0x64010102, 0x330}, {@multicast1, 0x2}, {@remote, 0x6}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x4}, {@local, 0x6}, {@private=0xa010101, 0x20}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x23, 0xa2, [@multicast2, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, @local, @empty, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0xce, [@rand_addr=0x64010102, @multicast1]}, @end, @noop, @rr={0x7, 0x7, 0x7a, [@local]}]}}}}}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000440)=0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40010) keyctl$join(0x1, &(0x7f00000005c0)={'syz', 0x2}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x888020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@noxattr}, {@directio}, {@directio}, {@nodevmap}, {@cache_fscache}, {@version_9p2000}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*\'\'$'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x63, 0x37, 0x66, 0x3, 0x31, 0x34, 0x39], 0x2d, [0x5b, 0x62, 0x61, 0x62], 0x2d, [0x34, 0x35, 0x37, 0x39], 0x2d, [0x39, 0x33, 0x10, 0x32], 0x2d, [0x30, 0x36, 0x64, 0x7, 0x39, 0x39, 0x35, 0x39]}}}, {@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'syz'}}, {@seclabel}, {@appraise_type}, {@hash}, {@obj_user={'obj_user', 0x3d, 'syztnl1\x00'}}]}}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x7, &(0x7f00000007c0)=[{0x9, 0x1, 0xfd, 0x3}, {0x1, 0xb, 0x93, 0x5b05}, {0x8ea, 0x6, 0x0, 0xff}, {0x300, 0x4, 0x2, 0x3}, {0x2, 0x8, 0x9, 0x7}, {0x8d, 0x6, 0x85, 0x9}, {0x5, 0x3, 0x7, 0x1000000}]}) flock(r1, 0x6) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000940)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1, 0x4e20, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0xe0, 0x2f, r3, r6}, {0x4, 0x8, 0x6, 0xe, 0x5, 0x5638, 0x0, 0x6}, {0x8, 0xb, 0x5, 0x401}, 0x9, 0x6e6bbf, 0x1, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x7a}, 0x2, @in=@multicast1, 0x0, 0x1, 0x1, 0x5, 0x3, 0x59c, 0x7}}, 0xe8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000b00)={0xffffffffffffd969, 0xfffffffffffffffa, 0x4, 0xbee, 0x5, 0x0, [{0x0, 0x800000000000000, 0x5, '\x00', 0x2080}, {0x3ff, 0x2, 0x80, '\x00', 0x9e2b08c1d1942266}, {0xf9, 0x9d4, 0x7f, '\x00', 0x2180}, {0x9, 0x2d341eac, 0x2, '\x00', 0x802}, {0x2, 0x1, 0xb, '\x00', 0x200}]}) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000c40)={r1}) socket$netlink(0x10, 0x3, 0xb) shmdt(0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000c80)=0xfffffffffffffffe, 0x4) io_uring_enter(r0, 0x7dca, 0x194a, 0x8, &(0x7f0000000cc0)={[0x6]}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000d00), 0x400001, 0x0) 121.689783ms ago: executing program 0 (id=1656): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xa8, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9da8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2800000000}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc803}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x108, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xd2, 0x8, "ea530ff6d57561c13f76d1c8c4679adb710b01d1a1a0b77082e08cb22db5dfcee2c443c181a2099ad56acb1b572348774fa8741043d83eae2e91f9a4cbd40e74a0835aa8b614293ce5c4e8fef806f310322eb64fe765d19ff0ecea9a84cc3ddd8732ee1b17ec6aeb2674b10d75fa92efd5af4d244e2dd4fb3ce5dfd4130baa3d87b96ea393ae9d270885f13076613307abe9a9349d769ae593dd4400960b8e4a353237833bf650911f29d44363ee8b91df5b5e7714f9a797cabd696dcb0a3f8f67bf0feae524e9d61ea85147b218"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c0, 0x9, 0xa, 0xc05, 0x0, 0x0, {}, [@NFTA_SET_EXPRESSIONS={0x148, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x93}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8a}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8981}]}}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x60}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1c}]}, @NFT_MSG_DELRULE={0x110, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x77, 0x7, 0x1, 0x0, "fe60a12893b26e95224b5de084d7d95ffe045bd01f50cc4209827f079d88a93b11a35518554108ca67dbfc361ab094e83648521156094057bceb283b6e4d28e3f2e258a9fa7edd57b843eed95f6a12e48a5a464b0326a9d5475c045f7d2c7b7c9c0c9dafe5b9e21ec4e83b6968b6cd5f503bd0"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x42, 0x7, 0x1, 0x0, "af962ae615ec95f14022f734c948353403bd35dbefb3fbc7763271247fb0e194fda9a964d822c6126be6b1dbfbca30a6ef112813d91dc334626c9620eb8d"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8d}]}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_USERDATA={0x4e, 0x7, 0x1, 0x0, "18076585d5e7d7b5c70488c397fca31473d79dcc68610f3010ccf2b83e1ee5bd98a4656ddb606b435556f399f8860f6882cdfd0d19c035d4807636af21c9ba27974aa56f028703667d89"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELRULE={0x9c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6a05}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}]}]}], {0x14}}, 0x610}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x44000) 117.709283ms ago: executing program 0 (id=1657): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) syz_clone3(&(0x7f0000000200)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x39}, 0x0, 0x5e, 0x0, 0x0}, 0xab) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 88.139645ms ago: executing program 4 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = dup2(r4, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x49, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x1, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0xa1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x5050) 2.512699ms ago: executing program 0 (id=1659): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x20000000000001bb, &(0x7f00000000c0)=ANY=[@ANYBLOB="2500000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r1, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000140)={0x8001, 0x5, 0x0, 0x5, 0x15, "2ea98072973aefba56a9f8e8f77f20fbf5974a"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x10, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 0s ago: executing program 4 (id=1660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10080414018aea1e000300000008001b00000000000800290041010000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) kernel console output (not intermixed with test programs): 666794][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.673957][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.687168][ T5238] bridge_slave_0: entered allmulticast mode [ 83.710707][ T5238] bridge_slave_0: entered promiscuous mode [ 83.719237][ T5235] loop4: detected capacity change from 0 to 512 [ 83.725486][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.740041][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.761507][ T5238] bridge_slave_1: entered allmulticast mode [ 83.783002][ T5238] bridge_slave_1: entered promiscuous mode [ 83.818996][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.831894][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.842553][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.890206][ T5235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.905150][ T5238] team0: Port device team_slave_0 added [ 83.916193][ T5238] team0: Port device team_slave_1 added [ 83.943476][ T5235] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.959402][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.966431][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.992464][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.003733][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.010665][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.036601][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.058459][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.064627][ T5238] hsr_slave_0: entered promiscuous mode [ 84.119353][ T5238] hsr_slave_1: entered promiscuous mode [ 84.125683][ T5238] debugfs: 'hsr0' already exists in 'hsr' [ 84.131561][ T5238] Cannot create hsr debugfs directory [ 84.163374][ T3292] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 84.186074][ T5265] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.207893][ T5265] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.227335][ T3292] CPU: 1 UID: 0 PID: 3292 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 84.227374][ T3292] Tainted: [W]=WARN [ 84.227382][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.227395][ T3292] Call Trace: [ 84.227402][ T3292] [ 84.227482][ T3292] __dump_stack+0x1d/0x30 [ 84.227509][ T3292] dump_stack_lvl+0x95/0xd0 [ 84.227531][ T3292] dump_stack+0x15/0x1b [ 84.227573][ T3292] dump_header+0x80/0x240 [ 84.227598][ T3292] oom_kill_process+0x295/0x350 [ 84.227629][ T3292] out_of_memory+0x97d/0xb80 [ 84.227678][ T3292] try_charge_memcg+0x62f/0xa10 [ 84.227704][ T3292] ? radix_tree_lookup+0xfa/0x140 [ 84.227818][ T3292] charge_memcg+0x6d/0x120 [ 84.227843][ T3292] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 84.227869][ T3292] __swap_cache_prepare_and_add+0x69/0x4a0 [ 84.227898][ T3292] ? alloc_pages_mpol+0x217/0x260 [ 84.227943][ T3292] swap_cache_alloc_folio+0xa2/0x120 [ 84.227965][ T3292] swap_cluster_readahead+0x25f/0x3c0 [ 84.227992][ T3292] swapin_readahead+0xde/0x840 [ 84.228014][ T3292] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 84.228082][ T3292] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 84.228106][ T3292] ? __rcu_read_unlock+0x4e/0x70 [ 84.228125][ T3292] ? swap_cache_get_folio+0x1e0/0x1f0 [ 84.228189][ T3292] do_swap_page+0x31e/0x2180 [ 84.228210][ T3292] ? __schedule+0x936/0xd20 [ 84.228234][ T3292] ? __rcu_read_lock+0x36/0x50 [ 84.228251][ T3292] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 84.228313][ T3292] handle_mm_fault+0xb2e/0x2e70 [ 84.228337][ T3292] ? vma_start_read+0x1c7/0x2c0 [ 84.228425][ T3292] do_user_addr_fault+0x62f/0x1050 [ 84.228546][ T3292] ? trace_page_fault_user+0x1f/0xa0 [ 84.228621][ T3292] exc_page_fault+0x62/0xa0 [ 84.228649][ T3292] asm_exc_page_fault+0x26/0x30 [ 84.228667][ T3292] RIP: 0033:0x7f0755c67f57 [ 84.228684][ T3292] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 84.228716][ T3292] RSP: 002b:00007ffe9344c7c0 EFLAGS: 00010202 [ 84.228813][ T3292] RAX: 0000000000000000 RBX: 00005555572e9500 RCX: 00007f0755c67f57 [ 84.228827][ T3292] RDX: 00007ffe9344c800 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.228839][ T3292] RBP: 00007ffe9344c86c R08: 0000000000000000 R09: 0000000000000000 [ 84.228877][ T3292] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 84.228889][ T3292] R13: 00000000000927c0 R14: 000000000001388e R15: 00007ffe9344c8c0 [ 84.228906][ T3292] [ 84.482062][ T3292] memory: usage 307200kB, limit 307200kB, failcnt 2994 [ 84.527086][ T3292] memory+swap: usage 266260kB, limit 9007199254740988kB, failcnt 0 [ 84.559793][ T3292] kmem: usage 236116kB, limit 9007199254740988kB, failcnt 0 [ 84.586900][ T3292] Memory cgroup stats for /syz0: [ 84.587260][ T3292] cache 0 [ 84.598589][ T3292] rss 36864 [ 84.619639][ T3292] shmem 0 [ 84.632794][ T3292] mapped_file 0 [ 84.664042][ T3292] dirty 0 [ 84.673244][ T3292] writeback 8192 [ 84.682188][ T3292] workingset_refault_anon 120 [ 84.688539][ T3292] workingset_refault_file 675 [ 84.693307][ T3292] swap 94208 [ 84.696658][ T3292] swapcached 4993024 [ 84.701560][ T5238] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.708762][ T3292] pgpgin 39347 [ 84.712783][ T3292] pgpgout 39323 [ 84.716357][ T3292] pgfault 30215 [ 84.722038][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.730035][ T5238] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.736777][ T3292] pgmajfault 56 [ 84.740472][ T3292] inactive_anon 8192 [ 84.747920][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.755364][ T3292] active_anon 90112 [ 84.759228][ T3292] inactive_file 0 [ 84.763553][ T3292] active_file 0 [ 84.767217][ T5238] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.774091][ T3292] unevictable 0 [ 84.779650][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.787435][ T5238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.794379][ T3292] hierarchical_memory_limit 314572800 [ 84.799887][ T3292] hierarchical_memsw_limit 9223372036854771712 [ 84.808264][ T5238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.822060][ T3292] total_cache 0 [ 84.827849][ T3292] total_rss 36864 [ 84.836923][ T3292] total_shmem 0 [ 84.847018][ T3292] total_mapped_file 0 [ 84.859322][ T3292] total_dirty 0 [ 84.866112][ T3292] total_writeback 8192 [ 84.870851][ T5296] EXT4-fs: journaled quota format not specified [ 84.875113][ T3292] total_workingset_refault_anon 120 [ 84.882731][ T3292] total_workingset_refault_file 675 [ 84.897972][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.904718][ T3292] total_swap 94208 [ 84.908647][ T3292] total_swapcached 4993024 [ 84.917748][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.920337][ T3292] total_pgpgin 39347 [ 84.927261][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.935477][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.937178][ T3292] total_pgpgout 39323 [ 84.953975][ T3292] total_pgfault 30215 [ 84.957053][ T5238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.961611][ T3292] total_pgmajfault 56 [ 84.969271][ T5238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.981076][ T3292] total_inactive_anon 8192 [ 84.988359][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.993580][ T3292] total_active_anon 90112 [ 84.995528][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.001883][ T3292] total_inactive_file 0 [ 85.011652][ T3292] total_active_file 0 [ 85.015701][ T3292] total_unevictable 0 [ 85.019772][ T3292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.446,pid=5257,uid=0 [ 85.028789][ T5297] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 85.048851][ T3292] Memory cgroup out of memory: OOM victim 5257 (syz.0.446) is already exiting. Skip killing the task [ 85.088589][ T3293] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.226766][ T5307] lo speed is unknown, defaulting to 1000 [ 85.248226][ T5308] lo speed is unknown, defaulting to 1000 [ 85.282043][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.326696][ T5327] netlink: 'syz.4.460': attribute type 3 has an invalid length. [ 85.339493][ T5315] lo speed is unknown, defaulting to 1000 [ 85.356468][ T5328] ------------[ cut here ]------------ [ 85.361961][ T5328] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.0.458/5328 [ 85.371615][ T5328] Modules linked in: [ 85.375520][ T5328] CPU: 1 UID: 0 PID: 5328 Comm: syz.0.458 Tainted: G W syzkaller #0 PREEMPT(full) [ 85.386348][ T5328] Tainted: [W]=WARN [ 85.390154][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.400208][ T5328] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 85.405868][ T5328] Code: 8b 05 c1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 7e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 70 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 85.425478][ T5328] RSP: 0018:ffffc90000f13d98 EFLAGS: 00010093 [ 85.431552][ T5328] RAX: ffffffff813b1682 RBX: ffff888102060000 RCX: ffff888102060000 [ 85.439529][ T5328] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 85.447502][ T5328] RBP: 0000000000000080 R08: ffff888102060af8 R09: 0000000000000000 [ 85.455499][ T5328] R10: ffffc90000f13db0 R11: 0001c90000f13db0 R12: ffff888102060000 [ 85.463474][ T5328] R13: ffff888102060828 R14: ffff888105192d10 R15: 0000000000000080 [ 85.471508][ T5328] FS: 0000000000000000(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000 [ 85.480447][ T5328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.487032][ T5328] CR2: 00007ffe9344c628 CR3: 000000010d7f8000 CR4: 00000000003506f0 [ 85.495011][ T5328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.503065][ T5328] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 85.511044][ T5328] Call Trace: [ 85.514323][ T5328] [ 85.517259][ T5328] ? kill_orphaned_pgrp+0x70/0x360 [ 85.522434][ T5328] do_exit+0xc13/0x1530 [ 85.526683][ T5328] do_group_exit+0x138/0x140 [ 85.531298][ T5328] __x64_sys_exit_group+0x1f/0x20 [ 85.536413][ T5328] x64_sys_call+0x3008/0x3020 [ 85.541168][ T5328] do_syscall_64+0x12c/0x3b0 [ 85.545799][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.551701][ T5328] RIP: 0033:0x7f0755cacdd9 [ 85.556120][ T5328] Code: Unable to access opcode bytes at 0x7f0755cacdaf. [ 85.563137][ T5328] RSP: 002b:00007f07546fe978 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 85.571552][ T5328] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f0755cacdd9 [ 85.579582][ T5328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 85.587553][ T5328] RBP: 00007f0755d42d69 R08: 0000000000000000 R09: 000000000000000b [ 85.595529][ T5328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.603552][ T5328] R13: 00007f0755f26038 R14: 00007f0755f25fa0 R15: 00007ffe9344c4c8 [ 85.611547][ T5328] [ 85.614570][ T5328] ---[ end trace 0000000000000000 ]--- [ 85.627999][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 85.656553][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 85.665808][ T5307] lo speed is unknown, defaulting to 1000 [ 85.677040][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 85.761158][ T5307] lo speed is unknown, defaulting to 1000 [ 85.763548][ T5238] veth0_vlan: entered promiscuous mode [ 85.769654][ T5327] infiniband syz0: set active [ 85.775115][ T5238] veth1_vlan: entered promiscuous mode [ 85.782679][ T5327] infiniband syz0: added xfrm0 [ 85.787514][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 85.796892][ T5327] RDS/IB: syz0: added [ 85.801347][ T5327] smc: adding ib device syz0 with port count 1 [ 85.807944][ T5327] smc: ib device syz0 port 1 has no pnetid [ 85.830208][ T3373] xfrm0 speed is unknown, defaulting to 1000 [ 85.841779][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 85.852806][ T5238] veth0_macvtap: entered promiscuous mode [ 85.869467][ T5238] veth1_macvtap: entered promiscuous mode [ 85.885224][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.895798][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 85.897213][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.912896][ T4294] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.922051][ T4294] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.933697][ T4294] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.942944][ T4294] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.951839][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.032275][ T5348] set_capacity_and_notify: 3 callbacks suppressed [ 86.032291][ T5348] loop3: detected capacity change from 0 to 128 [ 86.033666][ T5350] loop5: detected capacity change from 0 to 128 [ 86.053927][ T3284] udevd[3284]: incorrect jbd checksum on /dev/loop3 [ 86.055120][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.076365][ T5350] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.094030][ T5350] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.118424][ T5350] EXT4-fs warning (device loop5): ext4_group_extend:1861: can't shrink FS - resize aborted [ 86.153242][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.160473][ T5238] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.194145][ T5360] xt_HMARK: spi-set and port-set can't be combined [ 86.202366][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 86.210757][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.265447][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.306824][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.346838][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.387786][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.428166][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.471182][ T5327] xfrm0 speed is unknown, defaulting to 1000 [ 86.512003][ T5356] lo speed is unknown, defaulting to 1000 [ 86.525770][ T5307] lo speed is unknown, defaulting to 1000 [ 86.689498][ T5365] lo speed is unknown, defaulting to 1000 [ 86.714780][ T5365] xfrm0 speed is unknown, defaulting to 1000 [ 86.741826][ T5370] loop3: detected capacity change from 0 to 512 [ 86.766901][ T5370] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.798177][ T5370] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 86.826460][ T5370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 86.845525][ T5370] System zones: 0-2, 18-18, 34-34 [ 86.867542][ T5370] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.468: bad orphan inode 15 [ 86.926616][ T5370] loop3: lost filesystem error report for type 5 error -117 [ 86.926808][ T5370] ext4_test_bit(bit=14, block=18) = 1 [ 86.934169][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 86.934189][ C0] EXT4-fs (loop3): initial error at time 1777125691: ext4_orphan_get:1423 [ 86.934215][ C0] EXT4-fs (loop3): last error at time 1777125691: ext4_orphan_get:1423 [ 87.014311][ T5370] is_bad_inode(inode)=0 [ 87.030561][ T5370] NEXT_ORPHAN(inode)=2264924160 [ 87.039061][ T5370] max_ino=32 [ 87.045600][ T5370] i_nlink=0 [ 87.056131][ T5370] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.468: corrupted inode contents [ 87.133834][ T5370] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.134044][ T5370] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.468: mark_inode_dirty error [ 87.154533][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 87.154547][ T28] audit: type=1326 audit(1777125691.540:19427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb9bcdd9 code=0x7ffc0000 [ 87.154947][ T5375] syzkaller0: entered promiscuous mode [ 87.162757][ T28] audit: type=1326 audit(1777125691.540:19428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb9bcdd9 code=0x7ffc0000 [ 87.213558][ T5376] loop4: detected capacity change from 0 to 128 [ 87.220621][ T5375] syzkaller0: entered allmulticast mode [ 87.230225][ T5370] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.241201][ T5370] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.468: corrupted inode contents [ 87.283644][ T5370] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.285701][ T5370] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.468: mark_inode_dirty error [ 87.294604][ T28] audit: type=1326 audit(1777125691.540:19429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0fb9bcdd9 code=0x7ffc0000 [ 87.313018][ T5370] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.363897][ T28] audit: type=1326 audit(1777125691.586:19430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0fb9bcdd9 code=0x7ffc0000 [ 87.369639][ T5370] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.468: mark inode dirty (error -117) [ 87.382808][ T28] audit: type=1326 audit(1777125691.586:19431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0fb9bcb42 code=0x7ffc0000 [ 87.427580][ T5380] loop5: detected capacity change from 0 to 8192 [ 87.443938][ T5370] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.444166][ T5370] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 87.454694][ T28] audit: type=1326 audit(1777125691.586:19432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0fb97d60e code=0x7ffc0000 [ 87.485989][ T28] audit: type=1326 audit(1777125691.586:19433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff0fb9bcc07 code=0x7ffc0000 [ 87.493782][ T5370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.509776][ T28] audit: type=1326 audit(1777125691.586:19434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0fb97d60e code=0x7ffc0000 [ 87.543490][ T5380] GUP no longer grows the stack in syz.5.471 (5380): 200000006000-200000008000 (200000004000) [ 87.545507][ T28] audit: type=1326 audit(1777125691.613:19435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0fb9bca6b code=0x7ffc0000 [ 87.558376][ T5380] CPU: 1 UID: 0 PID: 5380 Comm: syz.5.471 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.558410][ T5380] Tainted: [W]=WARN [ 87.558418][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.558481][ T5380] Call Trace: [ 87.558488][ T5380] [ 87.558496][ T5380] __dump_stack+0x1d/0x30 [ 87.558523][ T5380] dump_stack_lvl+0x95/0xd0 [ 87.558546][ T5380] dump_stack+0x15/0x1b [ 87.558590][ T5380] fixup_user_fault+0x4fb/0x550 [ 87.558619][ T5380] fault_in_user_writeable+0x5c/0xc0 [ 87.558712][ T5380] futex_lock_pi+0x621/0x800 [ 87.558736][ T5380] ? __pfx_futex_wake_mark+0x10/0x10 [ 87.558768][ T5380] do_futex+0x21f/0x380 [ 87.558804][ T5380] __se_sys_futex+0x2f6/0x370 [ 87.558835][ T5380] ? xfd_validate_state+0x45/0xf0 [ 87.558866][ T5380] __x64_sys_futex+0x78/0x90 [ 87.558973][ T5380] x64_sys_call+0x24ab/0x3020 [ 87.559029][ T5380] do_syscall_64+0x12c/0x3b0 [ 87.559054][ T5380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.559157][ T5380] RIP: 0033:0x7f2cdb73cdd9 [ 87.559175][ T5380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.559259][ T5380] RSP: 002b:00007f2cda18f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.559353][ T5380] RAX: ffffffffffffffda RBX: 00007f2cdb9b5fa0 RCX: 00007f2cdb73cdd9 [ 87.559370][ T5380] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 87.559384][ T5380] RBP: 00007f2cdb7d2d69 R08: 0000000000000000 R09: 0000000000000000 [ 87.559398][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.559412][ T5380] R13: 00007f2cdb9b6038 R14: 00007f2cdb9b5fa0 R15: 00007ffff0957bb8 [ 87.559477][ T5380] [ 87.752873][ T28] audit: type=1326 audit(1777125691.623:19436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0fb97d60e code=0x7ffc0000 [ 87.802943][ T5376] syz.4.470: attempt to access beyond end of device [ 87.802943][ T5376] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 87.911637][ T5373] lo speed is unknown, defaulting to 1000 [ 87.971835][ T5382] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.468: bg 0: block 80: padding at end of block bitmap is not set [ 88.035090][ T5373] xfrm0 speed is unknown, defaulting to 1000 [ 88.472637][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.532701][ T5392] loop3: detected capacity change from 0 to 512 [ 88.572694][ T5392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.604514][ T5392] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 88.691844][ T5410] vlan2: entered allmulticast mode [ 88.700257][ T5410] syz_tun: entered allmulticast mode [ 88.857367][ T5427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'. [ 89.129256][ T5447] loop2: detected capacity change from 0 to 1024 [ 89.268797][ T5447] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 89.268797][ T5447] [ 89.474518][ T5448] loop2: detected capacity change from 0 to 512 [ 90.293644][ T5456] loop4: detected capacity change from 0 to 2048 [ 90.354306][ T5461] loop5: detected capacity change from 0 to 512 [ 90.367592][ T5463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.490'. [ 90.405693][ T5465] netlink: 204 bytes leftover after parsing attributes in process `syz.2.491'. [ 90.642896][ T5461] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.654289][ T5456] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 90.662452][ T5456] System zones: 0-7 [ 90.667294][ T5456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.680372][ T5456] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 90.698437][ T5456] EXT4-fs (loop4): Remounting filesystem read-only [ 90.734602][ T5461] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 90.772602][ T5461] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 90.790220][ T5461] System zones: 0-2, 18-18, 34-34 [ 90.802153][ T5461] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.489: bad orphan inode 15 [ 90.831032][ T5461] loop5: lost filesystem error report for type 5 error -117 [ 90.831287][ T5461] ext4_test_bit(bit=14, block=18) = 1 [ 90.844104][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 90.844125][ C1] EXT4-fs (loop5): initial error at time 2000000000: ext4_orphan_get:1423 [ 90.844149][ C1] EXT4-fs (loop5): last error at time 2000000000: ext4_orphan_get:1423 [ 90.910936][ T5461] is_bad_inode(inode)=0 [ 90.916022][ T5461] NEXT_ORPHAN(inode)=2264924160 [ 90.921004][ T5461] max_ino=32 [ 90.924537][ T5461] i_nlink=0 [ 90.928121][ T5461] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.489: corrupted inode contents [ 90.940538][ T5461] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.940745][ T5461] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.489: mark_inode_dirty error [ 90.961827][ T5461] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.962074][ T5461] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.489: corrupted inode contents [ 90.983726][ T5461] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.983946][ T5461] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.489: mark_inode_dirty error [ 91.006872][ T5461] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.007019][ T5461] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.489: mark inode dirty (error -117) [ 91.029536][ T5461] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 91.029706][ T5461] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 91.049474][ T5461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.212038][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.437814][ T5495] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.489: bg 0: block 80: padding at end of block bitmap is not set [ 91.862225][ T5238] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.911526][ T5508] mmap: syz.2.505 (5508) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.942301][ T5510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.956308][ T5513] loop4: detected capacity change from 0 to 128 [ 91.969054][ T5510] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.020924][ T5510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.087531][ T5533] loop2: detected capacity change from 0 to 1024 [ 92.093781][ T5535] loop0: detected capacity change from 0 to 512 [ 92.100827][ T5533] ext4: Unknown parameter 'uid<00000000000000000000' [ 92.118605][ T5535] ext3: Bad value for 'init_itable' [ 92.132744][ T5510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.149599][ T5510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.161257][ T5510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.171903][ T5510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.188625][ T5510] veth1_vlan: left promiscuous mode [ 92.194966][ T5510] veth0_vlan: left promiscuous mode [ 92.200706][ T5510] veth0_vlan: entered promiscuous mode [ 92.210269][ T5510] veth1_vlan: entered promiscuous mode [ 92.216764][ T5510] tipc: Resetting bearer [ 92.225188][ T5510] veth1_macvtap: left promiscuous mode [ 92.231834][ T5510] veth0_macvtap: left promiscuous mode [ 92.238602][ T5510] veth0_macvtap: entered promiscuous mode [ 92.251642][ T5510] veth1_macvtap: entered promiscuous mode [ 92.262596][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.271070][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.279339][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.288311][ T5510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.297289][ T5510] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 92.545385][ T5545] x_tables: duplicate underflow at hook 1 [ 92.597043][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 92.597059][ T28] audit: type=1400 audit(2000000001.974:19628): avc: denied { getopt } for pid=5544 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.761160][ T28] audit: type=1400 audit(2000000002.039:19629): avc: denied { bind } for pid=5546 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.782469][ T28] audit: type=1400 audit(2000000002.085:19630): avc: denied { write } for pid=5546 comm="syz.2.517" path="socket:[11175]" dev="sockfs" ino=11175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.782844][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.812842][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.820411][ T5550] loop3: detected capacity change from 0 to 512 [ 92.829071][ T5550] ext4: Unknown parameter 'nouser_xattr' [ 92.850668][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.857788][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.888064][ T4295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.914483][ T5556] netlink: 'syz.3.520': attribute type 4 has an invalid length. [ 92.914561][ T4295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.965623][ T4295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.985435][ T5563] netlink: 'syz.3.520': attribute type 4 has an invalid length. [ 92.999229][ T4295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057995][ T5564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.521'. [ 93.083439][ T28] audit: type=1400 audit(2000000002.417:19631): avc: denied { write } for pid=5565 comm="syz.0.523" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.113946][ T5562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.521'. [ 93.136899][ T5570] loop0: detected capacity change from 0 to 128 [ 93.143631][ T5570] msdos: Bad value for 'gid' [ 93.148279][ T5570] msdos: Bad value for 'gid' [ 93.181781][ T5556] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.189009][ T5556] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.234419][ T5556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.254048][ T5559] loop4: detected capacity change from 0 to 512 [ 93.254437][ T5556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.288857][ T5556] tipc: Resetting bearer [ 93.296514][ T5559] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.340500][ T4295] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.352962][ T4295] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.389055][ T4295] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.412635][ T4295] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.433837][ T5559] EXT4-fs (loop4): 1 truncate cleaned up [ 93.487218][ T5559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.615951][ T862] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.687091][ T5592] loop5: detected capacity change from 0 to 2048 [ 93.733685][ T5604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=5604 comm=syz.2.530 [ 93.805396][ T5592] Alternate GPT is invalid, using primary GPT. [ 93.823202][ T28] audit: type=1326 audit(2000000003.109:19632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78730cdd9 code=0x7ffc0000 [ 93.828720][ T5592] loop5: p2 p3 p7 [ 93.859449][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 93.870364][ T28] audit: type=1326 audit(2000000003.109:19633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa78730cdd9 code=0x7ffc0000 [ 93.894391][ T28] audit: type=1326 audit(2000000003.109:19634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa78730e647 code=0x7ffc0000 [ 93.964412][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.966406][ T28] audit: type=1326 audit(2000000003.109:19635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa7872cd60e code=0x7ffc0000 [ 93.997756][ T28] audit: type=1326 audit(2000000003.109:19636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa7872cd60e code=0x7ffc0000 [ 94.009455][ T5622] loop3: detected capacity change from 0 to 1024 [ 94.054564][ T2980] Alternate GPT is invalid, using primary GPT. [ 94.061341][ T28] audit: type=1326 audit(2000000003.109:19637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5611 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa7872cd60e code=0x7ffc0000 [ 94.071048][ T2980] loop5: p2 p3 p7 [ 94.090430][ T5627] batadv_slave_0: Caught tx_queue_len zero misconfig [ 94.090582][ T5622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.130022][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 94.151058][ T5627] vlan2: entered promiscuous mode [ 94.160043][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.167907][ T5627] bridge0: entered promiscuous mode [ 94.304339][ T5653] loop4: detected capacity change from 0 to 512 [ 94.315939][ T5653] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.546: Parent and EA inode have the same ino 15 [ 94.336187][ T5653] loop4: lost filesystem error report for type 5 error -117 [ 94.336481][ T5653] EXT4-fs (loop4): Remounting filesystem read-only [ 94.343856][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 94.343877][ C1] EXT4-fs (loop4): initial error at time 2000000003: ext4_xattr_inode_iget:437 [ 94.343903][ C1] EXT4-fs (loop4): last error at time 2000000003: ext4_xattr_inode_iget:437 [ 94.357189][ T5656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=5656 comm=syz.3.547 [ 94.383965][ T5653] EXT4-fs (loop4): 1 orphan inode deleted [ 94.400352][ T5653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.449663][ T5661] loop0: detected capacity change from 0 to 512 [ 94.461336][ T5661] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.476112][ T5661] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 94.485476][ T5661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 94.494739][ T5661] System zones: 0-2, 18-18, 34-34 [ 94.500163][ T5661] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.549: bad orphan inode 15 [ 94.510392][ T5661] loop0: lost filesystem error report for type 5 error -117 [ 94.513784][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 94.527596][ C1] EXT4-fs (loop0): initial error at time 2000000003: ext4_orphan_get:1423 [ 94.531854][ T5661] ext4_test_bit(bit=14, block=18) = 1 [ 94.536161][ C1] EXT4-fs (loop0): last error at time 2000000003: ext4_orphan_get:1423 [ 94.550478][ T5661] is_bad_inode(inode)=0 [ 94.554710][ T5661] NEXT_ORPHAN(inode)=2264924160 [ 94.557565][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.559687][ T5661] max_ino=32 [ 94.571904][ T5661] i_nlink=0 [ 94.575351][ T5661] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.549: corrupted inode contents [ 94.599415][ T5661] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.600599][ T5661] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.549: mark_inode_dirty error [ 94.621099][ T5661] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.621936][ T5661] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.549: corrupted inode contents [ 94.653811][ T5661] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.654078][ T5661] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.549: mark_inode_dirty error [ 94.684468][ T5661] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.685144][ T5661] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.549: mark inode dirty (error -117) [ 94.706987][ T5661] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.707290][ T5661] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 94.726314][ T5661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.847277][ T5672] SELinux: policydb version -1696197794 does not match my version range 15-35 [ 94.863475][ T5672] SELinux: failed to load policy [ 94.897585][ T5672] lo speed is unknown, defaulting to 1000 [ 94.903777][ T5672] xfrm0 speed is unknown, defaulting to 1000 [ 94.932589][ T5676] SELinux: policydb version 1766195508 does not match my version range 15-35 [ 94.941841][ T5676] SELinux: failed to load policy [ 95.102526][ T5679] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.549: bg 0: block 80: padding at end of block bitmap is not set [ 95.415456][ T5690] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 95.490589][ T5699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8457 sclass=netlink_route_socket pid=5699 comm=syz.2.560 [ 95.673852][ T5703] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.690839][ T5703] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 95.700261][ T5703] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 95.708523][ T5703] System zones: 0-2, 18-18, 34-34 [ 95.714347][ T5703] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.561: bad orphan inode 15 [ 95.771040][ T5703] loop4: lost filesystem error report for type 5 error -117 [ 95.772955][ T5703] ext4_test_bit(bit=14, block=18) = 1 [ 95.785793][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 95.785815][ C1] EXT4-fs (loop4): initial error at time 2000000004: ext4_orphan_get:1423 [ 95.785840][ C1] EXT4-fs (loop4): last error at time 2000000004: ext4_orphan_get:1423 [ 95.811136][ T5703] is_bad_inode(inode)=0 [ 95.815610][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 95.821705][ T5703] NEXT_ORPHAN(inode)=2264924160 [ 95.827300][ T5703] max_ino=32 [ 95.830676][ T5703] i_nlink=0 [ 95.836020][ T3577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.844084][ T5703] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.561: corrupted inode contents [ 95.858060][ T5703] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.858462][ T5703] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.561: mark_inode_dirty error [ 96.047392][ T5703] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.049082][ T5703] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.561: corrupted inode contents [ 96.076585][ T5712] netlink: 132 bytes leftover after parsing attributes in process `syz.5.564'. [ 96.090292][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 96.108345][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 96.135102][ T3973] udevd[3973]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 96.427971][ T5703] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.429159][ T5703] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.561: mark_inode_dirty error [ 96.551785][ T5703] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.551961][ T5703] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.561: mark inode dirty (error -117) [ 96.642854][ T5703] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.643164][ T5703] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 96.715686][ T5703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.741101][ T5717] netlink: 'syz.5.566': attribute type 4 has an invalid length. [ 96.780398][ T5717] netlink: 'syz.5.566': attribute type 4 has an invalid length. [ 96.969624][ T5725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.569'. [ 97.121331][ T5732] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 97.121331][ T5732] [ 97.420874][ T5734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.561: bg 0: block 80: padding at end of block bitmap is not set [ 97.592780][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.647505][ T5741] set_capacity_and_notify: 3 callbacks suppressed [ 97.647525][ T5741] loop3: detected capacity change from 0 to 2048 [ 97.758880][ T5741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.876684][ T5749] Cannot find add_set index 0 as target [ 97.890073][ T5749] loop0: detected capacity change from 0 to 256 [ 97.950021][ T5749] FAT-fs (loop0): Directory bread(block 64) failed [ 97.956622][ T5749] FAT-fs (loop0): Directory bread(block 65) failed [ 97.963300][ T5749] FAT-fs (loop0): Directory bread(block 66) failed [ 97.969993][ T5749] FAT-fs (loop0): Directory bread(block 67) failed [ 97.976739][ T5749] FAT-fs (loop0): Directory bread(block 68) failed [ 97.983380][ T5749] FAT-fs (loop0): Directory bread(block 69) failed [ 97.989997][ T5749] FAT-fs (loop0): Directory bread(block 70) failed [ 97.996670][ T5749] FAT-fs (loop0): Directory bread(block 71) failed [ 98.003314][ T5749] FAT-fs (loop0): Directory bread(block 72) failed [ 98.009948][ T5749] FAT-fs (loop0): Directory bread(block 73) failed [ 98.048290][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.252868][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.431638][ T5754] loop2: detected capacity change from 0 to 512 [ 98.577112][ T5754] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 98.634674][ T5754] System zones: 1-12 [ 98.657813][ T5754] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.577: missing EA_INODE flag [ 98.703351][ T5754] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.577: error while reading EA inode 12 err=-117 [ 98.715680][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 98.715699][ C1] EXT4-fs (loop2): initial error at time 2000000007: ext4_xattr_inode_iget:441: inode 12 [ 98.715735][ C1] EXT4-fs (loop2): last error at time 2000000007: ext4_xattr_inode_iget:441: inode 12 [ 98.859617][ T5754] loop2: lost filesystem error report for type 5 error -117 [ 98.859888][ T5754] EXT4-fs (loop2): 1 orphan inode deleted [ 98.920052][ T5754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.986414][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 99.069258][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.243015][ T5776] loop2: detected capacity change from 0 to 512 [ 99.319577][ T5776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.383986][ T5776] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.459277][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 99.561280][ T5776] EXT4-fs error (device loop2): __ext4_remount:6837: comm syz.2.584: Abort forced by user [ 99.597264][ T5776] EXT4-fs (loop2): Remounting filesystem read-only [ 99.605617][ T5776] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.626271][ T5786] loop0: detected capacity change from 0 to 2048 [ 99.635881][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.647852][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.683258][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 99.683289][ T28] audit: type=1400 audit(2000000008.507:19728): avc: denied { create } for pid=5787 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 99.761492][ T5792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.588'. [ 99.773565][ T5786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.788803][ T5786] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 99.855709][ T28] audit: type=1400 audit(2000000008.664:19729): avc: denied { write } for pid=5802 comm="syz.2.590" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 99.894455][ T5804] bridge_slave_0: left allmulticast mode [ 99.902517][ T5806] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 99.915198][ T5804] bridge_slave_0: left promiscuous mode [ 99.933336][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.949464][ T5804] bridge_slave_1: left allmulticast mode [ 99.959509][ T5804] bridge_slave_1: left promiscuous mode [ 99.985300][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.995499][ T5804] bond0: (slave bond_slave_0): Releasing backup interface [ 99.999312][ T5815] loop4: detected capacity change from 0 to 1024 [ 100.012022][ T5815] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 100.022110][ T5815] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 100.032159][ T5804] bond0: (slave bond_slave_1): Releasing backup interface [ 100.032121][ T5815] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 100.051048][ T5815] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #5: comm syz.4.592: unexpected bad inode w/o EXT4_IGET_BAD [ 100.064498][ T5815] fserror_report: 1 callbacks suppressed [ 100.064513][ T5815] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 100.064851][ T5804] team0: Port device team_slave_0 removed [ 100.070336][ T5815] EXT4-fs (loop4): no journal found [ 100.085018][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 100.085042][ C1] EXT4-fs (loop4): initial error at time 2000000008: ext4_get_journal_inode:5896: inode 5 [ 100.085073][ C1] EXT4-fs (loop4): last error at time 2000000008: ext4_get_journal_inode:5896: inode 5 [ 100.121170][ T5804] team0: Port device team_slave_1 removed [ 100.128632][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.145936][ T5804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.163012][ T5804] net_ratelimit: 20 callbacks suppressed [ 100.163095][ T5804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.209937][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.260513][ T28] audit: type=1400 audit(2000000009.042:19730): avc: denied { getopt } for pid=5822 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.316640][ T28] audit: type=1400 audit(2000000009.097:19731): avc: denied { read } for pid=5830 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.319210][ T5829] loop2: detected capacity change from 0 to 512 [ 100.353076][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 100.378974][ T5829] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.379785][ T28] audit: type=1400 audit(2000000009.143:19732): avc: denied { setopt } for pid=5830 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.423605][ T5829] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 100.429451][ T28] audit: type=1400 audit(2000000009.143:19733): avc: denied { getattr } for pid=5830 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.482895][ T5829] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 100.515619][ T5829] System zones: 0-2, 18-18, 34-34 [ 100.554486][ T5829] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.597: bad orphan inode 15 [ 100.593854][ T5845] loop0: detected capacity change from 0 to 512 [ 100.609878][ T5829] loop2: lost filesystem error report for type 5 error -117 [ 100.610152][ T5829] ext4_test_bit(bit=14, block=18) = 1 [ 100.617530][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 100.617573][ C0] EXT4-fs (loop2): initial error at time 2000000009: ext4_orphan_get:1423 [ 100.617595][ C0] EXT4-fs (loop2): last error at time 2000000009: ext4_orphan_get:1423 [ 100.662768][ T5829] is_bad_inode(inode)=0 [ 100.669037][ T5845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 100.681777][ T5845] System zones: 1-12 [ 100.685745][ T5829] NEXT_ORPHAN(inode)=2264924160 [ 100.699255][ T5845] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.600: missing EA_INODE flag [ 100.726724][ T5829] max_ino=32 [ 100.738049][ T5829] i_nlink=0 [ 100.747721][ T5829] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.597: corrupted inode contents [ 100.748679][ T5855] loop5: detected capacity change from 0 to 512 [ 100.779099][ T5845] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 100.779243][ T5845] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.600: error while reading EA inode 12 err=-117 [ 100.800836][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 100.800858][ C0] EXT4-fs (loop0): initial error at time 2000000009: ext4_xattr_inode_iget:441: inode 12 [ 100.800910][ C0] EXT4-fs (loop0): last error at time 2000000009: ext4_xattr_inode_iget:441: inode 12 [ 100.848752][ T5829] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.848938][ T5829] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.597: mark_inode_dirty error [ 100.875590][ T5845] loop0: lost filesystem error report for type 5 error -117 [ 100.878722][ T5829] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.889585][ T5845] EXT4-fs (loop0): 1 orphan inode deleted [ 100.904787][ T5829] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.597: corrupted inode contents [ 100.924212][ T28] audit: type=1400 audit(2000000009.651:19734): avc: denied { create } for pid=5865 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.962285][ T5829] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.962459][ T5829] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.597: mark_inode_dirty error [ 100.982571][ T28] audit: type=1400 audit(2000000009.651:19735): avc: denied { write } for pid=5865 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.999363][ T5829] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.005901][ T5829] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.597: mark inode dirty (error -117) [ 101.020787][ T5861] lo speed is unknown, defaulting to 1000 [ 101.083730][ T5829] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.083894][ T5829] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 101.108704][ T28] audit: type=1400 audit(2000000009.771:19736): avc: denied { ioctl } for pid=5867 comm="syz.3.607" path="socket:[13615]" dev="sockfs" ino=13615 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.140043][ T5861] xfrm0 speed is unknown, defaulting to 1000 [ 101.167560][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.610'. [ 101.285791][ T5895] ip6tnl0: Caught tx_queue_len zero misconfig [ 101.298178][ T28] audit: type=1400 audit(2000000010.002:19737): avc: denied { setopt } for pid=5889 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.444179][ T5907] netlink: 56 bytes leftover after parsing attributes in process `syz.5.618'. [ 101.526378][ T5916] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 101.532945][ T5916] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 101.548147][ T5916] vhci_hcd vhci_hcd.0: Device attached [ 101.584412][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 101.634375][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 101.648120][ T5923] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.597: bg 0: block 80: padding at end of block bitmap is not set [ 101.662679][ T5917] vhci_hcd: connection closed [ 101.664525][ T4286] vhci_hcd vhci_hcd.3: stop threads [ 101.680959][ T4286] vhci_hcd vhci_hcd.3: release socket [ 101.684545][ T5925] netlink: 52 bytes leftover after parsing attributes in process `syz.4.621'. [ 101.695328][ T4286] vhci_hcd vhci_hcd.3: disconnect device [ 101.763684][ T5927] loop5: detected capacity change from 0 to 512 [ 101.819365][ T5927] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 101.834589][ T5927] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 101.848132][ T5927] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.622: Corrupt directory, running e2fsck is recommended [ 101.924616][ T5935] EXT4-fs: Ignoring removed bh option [ 101.980534][ T5927] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 101.999970][ T5927] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.622: corrupted in-inode xattr: e_name out of bounds [ 102.024871][ T5927] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.038112][ T5927] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.622: couldn't read orphan inode 15 (err -117) [ 102.048504][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 102.048700][ C1] EXT4-fs (loop5): initial error at time 2000000010: ext4_iget_extra_inode:5128: inode 15 [ 102.048874][ C1] EXT4-fs (loop5): last error at time 2000000010: ext4_iget_extra_inode:5128: inode 15 [ 102.100538][ T5927] loop5: lost filesystem error report for type 5 error -117 [ 102.277451][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 102.448710][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 102.466081][ T5958] veth0_macvtap: Caught tx_queue_len zero misconfig [ 102.514272][ T5955] netlink: 40 bytes leftover after parsing attributes in process `syz.3.630'. [ 102.521582][ T5963] xt_hashlimit: size too large, truncated to 1048576 [ 102.586117][ T5972] ext4: Unknown parameter 'nouser_xattr' [ 102.592144][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.636'. [ 102.601599][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.636'. [ 102.615803][ T5962] Alternate GPT is invalid, using primary GPT. [ 102.656292][ T5962] loop3: p2 p3 p7 [ 103.117391][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 103.201935][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.649'. [ 103.270204][ T6009] bond2: entered promiscuous mode [ 103.294620][ T6009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.318495][ T6017] bond2: left promiscuous mode [ 103.902961][ T6074] lo speed is unknown, defaulting to 1000 [ 103.920048][ T6074] xfrm0 speed is unknown, defaulting to 1000 [ 104.143147][ T6086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=6086 comm=syz.5.678 [ 104.401391][ T6112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6112 comm=syz.5.685 [ 104.448955][ T6114] xt_hashlimit: size too large, truncated to 1048576 [ 105.104445][ T28] kauditd_printk_skb: 377 callbacks suppressed [ 105.104567][ T28] audit: type=1400 audit(2000000013.517:20115): avc: denied { create } for pid=6159 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 105.137745][ T6160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.137762][ T6160] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 105.137777][ T6160] audit: backlog limit exceeded [ 105.137791][ T6160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.137802][ T6160] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 105.137814][ T6160] audit: backlog limit exceeded [ 105.137831][ T6160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.183226][ T28] audit: type=1400 audit(2000000013.517:20116): avc: denied { read write } for pid=6157 comm="syz.4.705" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.183257][ T28] audit: type=1400 audit(2000000013.545:20117): avc: denied { create } for pid=6159 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 105.384679][ T6178] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.433486][ T6178] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 105.444209][ T6182] netlink: 'syz.4.711': attribute type 3 has an invalid length. [ 106.720081][ T6268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6268 comm=syz.0.737 [ 106.979097][ T6278] lo speed is unknown, defaulting to 1000 [ 106.996248][ T6278] xfrm0 speed is unknown, defaulting to 1000 [ 107.037787][ T6285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=6285 comm=syz.5.741 [ 107.355779][ T6306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 107.377983][ T6306] gretap1: entered allmulticast mode [ 107.700529][ T6321] lo speed is unknown, defaulting to 1000 [ 107.714596][ T6322] lo speed is unknown, defaulting to 1000 [ 107.726775][ T6321] xfrm0 speed is unknown, defaulting to 1000 [ 107.826300][ T6322] xfrm0 speed is unknown, defaulting to 1000 [ 108.443777][ T6345] __nla_validate_parse: 3 callbacks suppressed [ 108.443794][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 108.468475][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 108.480296][ T6348] netlink: 10 bytes leftover after parsing attributes in process `syz.5.765'. [ 108.555569][ T6353] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 108.581211][ T6353] netlink: 55 bytes leftover after parsing attributes in process `syz.0.766'. [ 108.680965][ T6359] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 108.687578][ T6359] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.695172][ T6358] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 108.701802][ T6358] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.712589][ T6358] vhci_hcd vhci_hcd.0: Device attached [ 108.721280][ T6359] vhci_hcd vhci_hcd.0: Device attached [ 108.742081][ T6362] vhci_hcd: connection closed [ 108.742295][ T6360] vhci_hcd: connection closed [ 108.747189][ T4301] vhci_hcd vhci_hcd.4: stop threads [ 108.757984][ T4301] vhci_hcd vhci_hcd.4: release socket [ 108.763544][ T4301] vhci_hcd vhci_hcd.4: disconnect device [ 108.783899][ T4301] vhci_hcd vhci_hcd.4: stop threads [ 108.790963][ T4301] vhci_hcd vhci_hcd.4: release socket [ 108.804713][ T4301] vhci_hcd vhci_hcd.4: disconnect device [ 108.872659][ T6377] FAULT_INJECTION: forcing a failure. [ 108.872659][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.900086][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.773 Tainted: G W syzkaller #0 PREEMPT(full) [ 108.900147][ T6377] Tainted: [W]=WARN [ 108.900155][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.900169][ T6377] Call Trace: [ 108.900176][ T6377] [ 108.900184][ T6377] __dump_stack+0x1d/0x30 [ 108.900239][ T6377] dump_stack_lvl+0x95/0xd0 [ 108.900259][ T6377] dump_stack+0x15/0x1b [ 108.900299][ T6377] should_fail_ex+0x263/0x280 [ 108.900331][ T6377] should_fail+0xb/0x20 [ 108.900359][ T6377] should_fail_usercopy+0x1a/0x20 [ 108.900473][ T6377] _copy_from_user+0x1c/0xb0 [ 108.900511][ T6377] __tun_chr_ioctl+0x144/0x14d0 [ 108.900548][ T6377] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 108.900575][ T6377] tun_chr_ioctl+0x27/0x40 [ 108.900601][ T6377] __se_sys_ioctl+0xce/0x140 [ 108.900675][ T6377] __x64_sys_ioctl+0x43/0x50 [ 108.900708][ T6377] x64_sys_call+0x1563/0x3020 [ 108.900733][ T6377] do_syscall_64+0x12c/0x3b0 [ 108.900758][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.900822][ T6377] RIP: 0033:0x7fa78730cdd9 [ 108.900840][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.900858][ T6377] RSP: 002b:00007fa785d5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.900879][ T6377] RAX: ffffffffffffffda RBX: 00007fa787585fa0 RCX: 00007fa78730cdd9 [ 108.900903][ T6377] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 0000000000000004 [ 108.900918][ T6377] RBP: 00007fa785d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.900931][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.900946][ T6377] R13: 00007fa787586038 R14: 00007fa787585fa0 R15: 00007ffc2eb093e8 [ 108.900963][ T6377] [ 109.189699][ T6383] lo speed is unknown, defaulting to 1000 [ 109.199999][ T6383] xfrm0 speed is unknown, defaulting to 1000 [ 109.549526][ T6413] FAULT_INJECTION: forcing a failure. [ 109.549526][ T6413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.597949][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.2.786 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.598051][ T6413] Tainted: [W]=WARN [ 109.598060][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.598072][ T6413] Call Trace: [ 109.598080][ T6413] [ 109.598151][ T6413] __dump_stack+0x1d/0x30 [ 109.598183][ T6413] dump_stack_lvl+0x95/0xd0 [ 109.598205][ T6413] dump_stack+0x15/0x1b [ 109.598224][ T6413] should_fail_ex+0x263/0x280 [ 109.598258][ T6413] should_fail+0xb/0x20 [ 109.598337][ T6413] should_fail_usercopy+0x1a/0x20 [ 109.598378][ T6413] _copy_to_user+0x20/0xa0 [ 109.598406][ T6413] simple_read_from_buffer+0xb5/0x130 [ 109.598443][ T6413] proc_fail_nth_read+0x10e/0x150 [ 109.598473][ T6413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.598545][ T6413] vfs_read+0x1ab/0x7f0 [ 109.598570][ T6413] ? __rcu_read_unlock+0x4e/0x70 [ 109.598599][ T6413] ? __fget_files+0x184/0x1c0 [ 109.598623][ T6413] ? mutex_lock+0x57/0x90 [ 109.598664][ T6413] ksys_read+0xdc/0x1a0 [ 109.598762][ T6413] __x64_sys_read+0x40/0x50 [ 109.598788][ T6413] x64_sys_call+0x2886/0x3020 [ 109.598849][ T6413] do_syscall_64+0x12c/0x3b0 [ 109.598908][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.598929][ T6413] RIP: 0033:0x7fa7872cd60e [ 109.598945][ T6413] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.598968][ T6413] RSP: 002b:00007fa785d5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.598990][ T6413] RAX: ffffffffffffffda RBX: 00007fa785d5f6c0 RCX: 00007fa7872cd60e [ 109.599018][ T6413] RDX: 000000000000000f RSI: 00007fa785d5f0a0 RDI: 0000000000000005 [ 109.599031][ T6413] RBP: 00007fa785d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.599047][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.599061][ T6413] R13: 00007fa787586038 R14: 00007fa787585fa0 R15: 00007ffc2eb093e8 [ 109.599083][ T6413] [ 110.236885][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 110.291701][ T6452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.298998][ T6452] IPv6: NLM_F_CREATE should be set when creating new route [ 110.541414][ T28] kauditd_printk_skb: 834 callbacks suppressed [ 110.541432][ T28] audit: type=1400 audit(2000000018.527:20950): avc: denied { mac_admin } for pid=6455 comm="syz.2.802" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 110.611933][ T28] audit: [ 110.636293][ T28] audit: type=1400 audit(2000000018.573:20952): avc: denied { create } for pid=6455 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 110.698223][ T28] audit: type=1400 audit(2000000018.573:20953): avc: denied { create } for pid=6455 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 110.742445][ T28] audit: type=1400 audit(2000000018.583:20954): avc: denied { create } for pid=6464 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 110.780938][ T28] audit: type=1400 audit(2000000018.583:20955): avc: denied { create } for pid=6464 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 110.803119][ T28] audit: type=1400 audit(2000000018.647:20956): avc: denied { read write } for pid=3292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.829134][ T28] audit: type=1400 audit(2000000018.656:20957): avc: denied { create } for pid=6469 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 110.851738][ T28] audit: type=1400 audit(2000000018.666:20958): avc: denied { execmem } for pid=6469 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 110.871612][ T28] audit: type=1400 audit(2000000018.730:20959): avc: denied { open } for pid=6469 comm="syz.0.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 111.946747][ T6522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6522 comm=syz.3.829 [ 112.222035][ T6543] xt_hashlimit: size too large, truncated to 1048576 [ 112.304573][ T6552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6552 comm=syz.2.840 [ 112.375599][ T6554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21776 sclass=netlink_route_socket pid=6554 comm=syz.5.842 [ 112.757407][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 112.776578][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 112.808644][ T4295] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.828544][ T4295] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.853991][ T4295] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.871550][ T4295] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.932659][ T6587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6587 comm=syz.0.853 [ 113.101564][ T6592] lo speed is unknown, defaulting to 1000 [ 113.112781][ T6592] xfrm0 speed is unknown, defaulting to 1000 [ 113.280254][ T6597] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 113.321966][ T6597] netlink: 2 bytes leftover after parsing attributes in process `syz.0.856'. [ 113.339564][ T6597] veth1_virt_wifi: entered promiscuous mode [ 113.348060][ T6597] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 113.364663][ T6597] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 113.379749][ T6597] veth1_virt_wifi: entered allmulticast mode [ 113.397800][ T6597] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 113.405091][ T6597] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 113.534957][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 113.798760][ T6624] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 113.827635][ T6624] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.837899][ T6624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40208 sclass=netlink_route_socket pid=6624 comm=syz.2.868 [ 113.942423][ T6646] bond1: entered promiscuous mode [ 113.942587][ T6646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.026829][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 114.054757][ T6667] ipvlan0: entered promiscuous mode [ 114.067964][ T6667] ipvlan0: left promiscuous mode [ 114.158079][ T6682] lo speed is unknown, defaulting to 1000 [ 114.167523][ T6682] xfrm0 speed is unknown, defaulting to 1000 [ 114.351336][ T6698] team0: entered allmulticast mode [ 114.357131][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.784255][ T6723] netlink: 27 bytes leftover after parsing attributes in process `syz.4.906'. [ 115.499325][ T6766] xt_TCPMSS: Only works on TCP SYN packets [ 115.988786][ T6800] netlink: 'syz.3.927': attribute type 10 has an invalid length. [ 115.992072][ T6800] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 116.043433][ T28] kauditd_printk_skb: 738 callbacks suppressed [ 116.043449][ T28] audit: type=1400 audit(2000000023.602:21698): avc: denied { read write } for pid=3292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.083759][ T6800] bond0: option mode: unable to set because the bond device has slaves [ 116.099271][ T6804] netlink: 'syz.0.928': attribute type 6 has an invalid length. [ 116.119160][ T28] audit: type=1400 audit(2000000023.639:21699): avc: denied { map_create } for pid=6803 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.163392][ T28] audit: type=1400 audit(2000000023.648:21700): avc: denied { open } for pid=6803 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 116.204034][ T28] audit: type=1400 audit(2000000023.648:21701): avc: denied { create } for pid=6803 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 116.259577][ T28] audit: type=1400 audit(2000000023.648:21702): avc: denied { create } for pid=6803 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 116.315328][ T28] audit: type=1400 audit(2000000023.648:21703): avc: denied { read write } for pid=6803 comm="syz.0.928" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.384109][ T28] audit: type=1400 audit(2000000023.676:21704): avc: denied { create } for pid=6803 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 116.452766][ T28] audit: type=1400 audit(2000000023.676:21705): avc: denied { create } for pid=6803 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 116.493899][ T6817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 116.514472][ T28] audit: type=1400 audit(2000000023.704:21706): avc: denied { prog_load } for pid=6803 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.587427][ T6819] macvlan2: entered allmulticast mode [ 116.601674][ T6819] bridge0: entered allmulticast mode [ 116.619927][ T6819] bridge0: port 4(macvlan2) entered blocking state [ 116.635071][ T6819] bridge0: port 4(macvlan2) entered disabled state [ 116.647774][ T6819] bridge0: left allmulticast mode [ 117.879681][ T6864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.950'. [ 118.035311][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 118.431096][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.972'. [ 118.491439][ T6924] lo speed is unknown, defaulting to 1000 [ 118.508428][ T6924] xfrm0 speed is unknown, defaulting to 1000 [ 119.042232][ T6947] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 119.077995][ T6947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 119.204118][ T6970] netlink: 'syz.3.987': attribute type 11 has an invalid length. [ 119.229633][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.3.987'. [ 119.403851][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'. [ 119.413080][ T6999] tc_dump_action: action bad kind [ 119.435280][ T7004] bond0: (slave syz_tun): Releasing backup interface [ 119.442627][ T7004] bridge_slave_0: left allmulticast mode [ 119.448978][ T7004] bridge_slave_0: left promiscuous mode [ 119.455270][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.463119][ T7004] bridge_slave_1: left allmulticast mode [ 119.469019][ T7004] bridge_slave_1: left promiscuous mode [ 119.474671][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.483233][ T7004] bond0: (slave bond_slave_0): Releasing backup interface [ 119.492363][ T7004] bond0: (slave bond_slave_1): Releasing backup interface [ 119.501531][ T7004] team0: Port device team_slave_0 removed [ 119.508585][ T7004] team0: Port device team_slave_1 removed [ 119.514639][ T7004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.522701][ T7004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.530611][ T7004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.600124][ T7019] FAULT_INJECTION: forcing a failure. [ 119.600124][ T7019] name failslab, interval 1, probability 0, space 0, times 0 [ 119.613563][ T7019] CPU: 1 UID: 0 PID: 7019 Comm: syz.4.1003 Tainted: G W syzkaller #0 PREEMPT(full) [ 119.613602][ T7019] Tainted: [W]=WARN [ 119.613611][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.613626][ T7019] Call Trace: [ 119.613634][ T7019] [ 119.613699][ T7019] __dump_stack+0x1d/0x30 [ 119.613726][ T7019] dump_stack_lvl+0x95/0xd0 [ 119.613746][ T7019] dump_stack+0x15/0x1b [ 119.613764][ T7019] should_fail_ex+0x263/0x280 [ 119.613834][ T7019] should_failslab+0x8c/0xb0 [ 119.613864][ T7019] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 119.613941][ T7019] ? sidtab_sid2str_get+0xa0/0x130 [ 119.613968][ T7019] ? sidtab_sid2str_put+0x1b5/0x360 [ 119.613995][ T7019] kmemdup_noprof+0x2b/0x70 [ 119.614044][ T7019] sidtab_sid2str_get+0xa0/0x130 [ 119.614066][ T7019] security_sid_to_context_core+0x1eb/0x2e0 [ 119.614093][ T7019] security_sid_to_context+0x27/0x40 [ 119.614132][ T7019] avc_audit_post_callback+0x10f/0x510 [ 119.614176][ T7019] ? audit_log_lsm_data+0x756/0xbb0 [ 119.614252][ T7019] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 119.614392][ T7019] common_lsm_audit+0x1ba/0x230 [ 119.614413][ T7019] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 119.614495][ T7019] slow_avc_audit+0x14c/0x190 [ 119.614531][ T7019] avc_has_perm+0x144/0x190 [ 119.614660][ T7019] selinux_socket_create+0xfd/0x180 [ 119.614697][ T7019] security_socket_create+0x4c/0x90 [ 119.614734][ T7019] __sock_create+0xe0/0x580 [ 119.614815][ T7019] ? mutex_lock+0x57/0x90 [ 119.614845][ T7019] ? mutex_unlock+0x4e/0x90 [ 119.614876][ T7019] ? fput+0x8f/0xc0 [ 119.614897][ T7019] __sys_socket+0xaf/0x180 [ 119.615039][ T7019] __x64_sys_socket+0x3f/0x50 [ 119.615072][ T7019] x64_sys_call+0x11fc/0x3020 [ 119.615099][ T7019] do_syscall_64+0x12c/0x3b0 [ 119.615122][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.615160][ T7019] RIP: 0033:0x7ff0fb9bcdd9 [ 119.615179][ T7019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.615215][ T7019] RSP: 002b:00007ff0fa417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 119.615285][ T7019] RAX: ffffffffffffffda RBX: 00007ff0fbc35fa0 RCX: 00007ff0fb9bcdd9 [ 119.615301][ T7019] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 119.615315][ T7019] RBP: 00007ff0fa417090 R08: 0000000000000000 R09: 0000000000000000 [ 119.615401][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.615418][ T7019] R13: 00007ff0fbc36038 R14: 00007ff0fbc35fa0 R15: 00007ffcac186ec8 [ 119.615440][ T7019] [ 119.962281][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 120.089299][ T7035] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 120.095862][ T7035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.129372][ T7039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.157317][ T7035] vhci_hcd vhci_hcd.0: Device attached [ 120.175360][ T7036] vhci_hcd: connection closed [ 120.175502][ T4294] vhci_hcd vhci_hcd.5: stop threads [ 120.185526][ T4294] vhci_hcd vhci_hcd.5: release socket [ 120.191091][ T4294] vhci_hcd vhci_hcd.5: disconnect device [ 120.262347][ T7056] FAULT_INJECTION: forcing a failure. [ 120.262347][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.277184][ T7056] CPU: 1 UID: 0 PID: 7056 Comm: syz.4.1016 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.277305][ T7056] Tainted: [W]=WARN [ 120.277315][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.277337][ T7056] Call Trace: [ 120.277345][ T7056] [ 120.277354][ T7056] __dump_stack+0x1d/0x30 [ 120.277381][ T7056] dump_stack_lvl+0x95/0xd0 [ 120.277403][ T7056] dump_stack+0x15/0x1b [ 120.277425][ T7056] should_fail_ex+0x263/0x280 [ 120.277526][ T7056] should_fail+0xb/0x20 [ 120.277570][ T7056] should_fail_usercopy+0x1a/0x20 [ 120.277596][ T7056] _copy_to_user+0x20/0xa0 [ 120.277631][ T7056] simple_read_from_buffer+0xb5/0x130 [ 120.277748][ T7056] proc_fail_nth_read+0x10e/0x150 [ 120.277774][ T7056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.277800][ T7056] vfs_read+0x1ab/0x7f0 [ 120.277879][ T7056] ? __rcu_read_unlock+0x4e/0x70 [ 120.277902][ T7056] ? __fget_files+0x184/0x1c0 [ 120.277921][ T7056] ? mutex_lock+0x57/0x90 [ 120.277982][ T7056] ksys_read+0xdc/0x1a0 [ 120.278039][ T7056] __x64_sys_read+0x40/0x50 [ 120.278070][ T7056] x64_sys_call+0x2886/0x3020 [ 120.278154][ T7056] do_syscall_64+0x12c/0x3b0 [ 120.278182][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.278213][ T7056] RIP: 0033:0x7ff0fb97d60e [ 120.278254][ T7056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.278276][ T7056] RSP: 002b:00007ff0fa416fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.278302][ T7056] RAX: ffffffffffffffda RBX: 00007ff0fa4176c0 RCX: 00007ff0fb97d60e [ 120.278319][ T7056] RDX: 000000000000000f RSI: 00007ff0fa4170a0 RDI: 0000000000000004 [ 120.278384][ T7056] RBP: 00007ff0fa417090 R08: 0000000000000000 R09: 0000000000000000 [ 120.278399][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.278431][ T7056] R13: 00007ff0fbc36038 R14: 00007ff0fbc35fa0 R15: 00007ffcac186ec8 [ 120.278451][ T7056] [ 120.583032][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 120.740196][ T7080] ipt_rpfilter: unknown options [ 120.868825][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1027'. [ 121.066914][ T7112] netlink: 'syz.4.1035': attribute type 15 has an invalid length. [ 121.239624][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1037'. [ 121.470435][ T28] kauditd_printk_skb: 1122 callbacks suppressed [ 121.470453][ T28] audit: type=1400 audit(2000000028.646:22521): avc: denied { create } for pid=7141 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 121.497010][ T28] audit: type=1400 audit(2000000028.646:22522): avc: denied { create } for pid=7141 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 121.857017][ T28] audit: type=1400 audit(2000000029.002:22523): avc: denied { read write } for pid=5238 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.883502][ T28] audit: type=1400 audit(2000000029.039:22524): avc: denied { bpf } for pid=7147 comm="syz.5.1043" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 121.904430][ T28] audit: type=1400 audit(2000000029.039:22525): avc: denied { allowed } for pid=7147 comm="syz.5.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 121.925118][ T28] audit: type=1400 audit(2000000029.039:22526): avc: denied { open } for pid=7147 comm="syz.5.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 121.944767][ T28] audit: type=1400 audit(2000000029.039:22527): avc: denied { open } for pid=7147 comm="syz.5.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 121.964926][ T28] audit: type=1400 audit(2000000029.039:22528): avc: denied { create } for pid=7147 comm="syz.5.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 121.994124][ T28] audit: type=1400 audit(2000000029.039:22529): avc: denied { execmem } for pid=7147 comm="syz.5.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 122.014009][ T28] audit: type=1400 audit(2000000029.095:22530): avc: denied { open } for pid=7147 comm="syz.5.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.372214][ T7166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7166 comm=syz.0.1048 [ 122.406389][ T7166] netlink: 'syz.0.1048': attribute type 1 has an invalid length. [ 122.452695][ T7166] bond4: (slave bridge2): making interface the new active one [ 122.469190][ T7166] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 123.158771][ T7182] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 123.166041][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.173203][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.405017][ T7223] syz.5.1064 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.713331][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.765120][ T7182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.340733][ T4295] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.364300][ T4295] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.381615][ T4295] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.390689][ T4295] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.399679][ T4295] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.409034][ T4295] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.430431][ T4295] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.441059][ T4295] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.465628][ T7238] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1069'. [ 125.909622][ T7344] futex_wake_op: syz.5.1104 tries to shift op by 32; fix this program [ 126.241813][ T7355] netlink: 'syz.5.1108': attribute type 1 has an invalid length. [ 126.300072][ T7355] bond3: (slave geneve2): making interface the new active one [ 126.327671][ T7355] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 126.367029][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1108'. [ 126.413715][ T4301] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.433380][ T4301] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.463158][ T4301] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.506258][ T4301] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.585141][ T7361] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 126.817717][ T28] kauditd_printk_skb: 476 callbacks suppressed [ 126.817812][ T28] audit: type=1400 audit(2000000033.653:23007): avc: denied { module_request } for pid=7366 comm="syz.5.1113" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 126.894791][ T28] audit: type=1400 audit(2000000033.653:23008): avc: denied { sys_module } for pid=7366 comm="syz.5.1113" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 126.895663][ T7369] team0: entered promiscuous mode [ 126.951947][ T28] audit: type=1400 audit(2000000033.653:23009): avc: denied { prog_load } for pid=7366 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 126.964487][ T7369] team_slave_0: entered promiscuous mode [ 126.989711][ T7369] team_slave_1: entered promiscuous mode [ 127.005162][ T28] audit: type=1400 audit(2000000033.653:23010): avc: denied { prog_load } for pid=7366 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 127.018460][ T7369] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 127.058212][ T28] audit: type=1400 audit(2000000033.671:23011): avc: denied { read write } for pid=5238 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.128372][ T28] audit: type=1400 audit(2000000033.690:23012): avc: denied { create } for pid=7368 comm="syz.5.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 127.140058][ T7379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1117'. [ 127.184423][ T28] audit: type=1400 audit(2000000033.690:23013): avc: denied { mount } for pid=7368 comm="syz.5.1114" name="/" dev="ramfs" ino=17019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 127.254639][ T28] audit: type=1400 audit(2000000033.690:23014): avc: denied { read write } for pid=7368 comm="syz.5.1114" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.279308][ T7385] audit: audit_lost=112 audit_rate_limit=0 audit_backlog_limit=64 [ 127.309455][ T7385] audit: out of memory in audit_log_start [ 127.390033][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1124'. [ 127.442693][ T7401] netlink: 'syz.3.1125': attribute type 11 has an invalid length. [ 127.461762][ T7401] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1125'. [ 127.675933][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1128'. [ 128.048675][ T7432] FAULT_INJECTION: forcing a failure. [ 128.048675][ T7432] name failslab, interval 1, probability 0, space 0, times 0 [ 128.075493][ T7432] CPU: 1 UID: 0 PID: 7432 Comm: syz.3.1135 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.075579][ T7432] Tainted: [W]=WARN [ 128.075588][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.075601][ T7432] Call Trace: [ 128.075608][ T7432] [ 128.075615][ T7432] __dump_stack+0x1d/0x30 [ 128.075640][ T7432] dump_stack_lvl+0x95/0xd0 [ 128.075739][ T7432] dump_stack+0x15/0x1b [ 128.075757][ T7432] should_fail_ex+0x263/0x280 [ 128.075783][ T7432] should_failslab+0x8c/0xb0 [ 128.075895][ T7432] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 128.076046][ T7432] ? sidtab_sid2str_get+0xa0/0x130 [ 128.076076][ T7432] kmemdup_noprof+0x2b/0x70 [ 128.076129][ T7432] sidtab_sid2str_get+0xa0/0x130 [ 128.076189][ T7432] security_sid_to_context_core+0x1eb/0x2e0 [ 128.076216][ T7432] security_sid_to_context+0x27/0x40 [ 128.076242][ T7432] selinux_lsmprop_to_secctx+0x67/0xf0 [ 128.076272][ T7432] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 128.076368][ T7432] audit_log_subj_ctx+0xa4/0x3e0 [ 128.076392][ T7432] ? skb_put+0xa9/0xf0 [ 128.076433][ T7432] audit_log_task_context+0x48/0x70 [ 128.076460][ T7432] audit_log_task+0xf3/0x250 [ 128.076610][ T7432] audit_seccomp+0x60/0x100 [ 128.076673][ T7432] ? __seccomp_filter+0x8db/0x1350 [ 128.076707][ T7432] __seccomp_filter+0x8ec/0x1350 [ 128.076751][ T7432] ? __rcu_read_unlock+0x4e/0x70 [ 128.076773][ T7432] ? __fget_files+0x184/0x1c0 [ 128.076825][ T7432] ? mutex_lock+0x57/0x90 [ 128.076858][ T7432] ? mutex_unlock+0x4e/0x90 [ 128.076887][ T7432] __secure_computing+0x81/0x150 [ 128.076918][ T7432] do_syscall_64+0xce/0x3b0 [ 128.076980][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.077004][ T7432] RIP: 0033:0x7fed4ff2cdd9 [ 128.077020][ T7432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.077037][ T7432] RSP: 002b:00007fed4e987028 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 128.077109][ T7432] RAX: ffffffffffffffda RBX: 00007fed501a5fa0 RCX: 00007fed4ff2cdd9 [ 128.077124][ T7432] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.077136][ T7432] RBP: 00007fed4e987090 R08: 0000000000000000 R09: 0000000000000000 [ 128.077151][ T7432] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.077194][ T7432] R13: 00007fed501a6038 R14: 00007fed501a5fa0 R15: 00007ffdb812f208 [ 128.077212][ T7432] [ 128.511310][ T4286] Bluetooth: hci0: Frame reassembly failed (-84) [ 128.793489][ T7468] netlink: 'syz.5.1149': attribute type 12 has an invalid length. [ 128.801604][ T7468] netlink: 'syz.5.1149': attribute type 29 has an invalid length. [ 128.810144][ T7468] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1149'. [ 128.837382][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1150'. [ 128.846895][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1150'. [ 129.198249][ T7501] netlink: 'syz.0.1160': attribute type 12 has an invalid length. [ 129.206235][ T7501] netlink: 'syz.0.1160': attribute type 29 has an invalid length. [ 129.214402][ T7501] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1160'. [ 129.339753][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 129.353284][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.367270][ T7521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.418538][ T7528] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 129.435261][ T7528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.324893][ T1038] IPVS: starting estimator thread 0... [ 130.378932][ T7583] lo speed is unknown, defaulting to 1000 [ 130.392808][ T7583] xfrm0 speed is unknown, defaulting to 1000 [ 130.429081][ T7574] IPVS: using max 2688 ests per chain, 134400 per kthread [ 130.685427][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 130.691490][ T3577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 130.990892][ T7663] netlink: 'syz.4.1216': attribute type 3 has an invalid length. [ 131.081778][ T7668] lo speed is unknown, defaulting to 1000 [ 131.093316][ T7668] xfrm0 speed is unknown, defaulting to 1000 [ 131.375459][ T7681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7681 comm=syz.0.1223 [ 131.471306][ T7681] lo speed is unknown, defaulting to 1000 [ 131.483668][ T7681] xfrm0 speed is unknown, defaulting to 1000 [ 131.728367][ T7705] __nla_validate_parse: 12 callbacks suppressed [ 131.728387][ T7705] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1228'. [ 131.975588][ T7721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7721 comm=syz.0.1235 [ 131.976917][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 132.015124][ T4294] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.024418][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 132.037585][ T4294] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.053681][ T4294] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.070089][ T4294] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.171000][ T28] kauditd_printk_skb: 981 callbacks suppressed [ 132.171017][ T28] audit: type=1400 audit(2000000038.668:23995): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.223185][ T28] audit: type=1400 audit(2000000038.706:23996): avc: denied { open } for pid=7741 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 132.227351][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 132.249283][ T28] audit: type=1400 audit(2000000038.706:23997): avc: denied { prog_load } for pid=7741 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.282239][ T28] audit: type=1400 audit(2000000038.706:23998): avc: denied { prog_load } for pid=7741 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.313973][ T28] audit: type=1400 audit(2000000038.715:23999): avc: denied { read } for pid=7741 comm="syz.3.1243" dev="nsfs" ino=4026532588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 132.347380][ T28] audit: type=1400 audit(2000000038.715:24000): avc: denied { read } for pid=7741 comm="syz.3.1243" dev="nsfs" ino=4026532588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 132.382689][ T28] audit: type=1400 audit(2000000038.715:24001): avc: denied { create } for pid=7741 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 132.420827][ T28] audit: type=1400 audit(2000000038.781:24002): avc: denied { open } for pid=7741 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 132.457386][ T28] audit: type=1400 audit(2000000038.818:24003): avc: denied { create } for pid=7741 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 132.503951][ T28] audit: type=1400 audit(2000000038.818:24004): avc: denied { map_create } for pid=7741 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 132.812908][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 132.887923][ T7760] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 132.964242][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1255'. [ 133.034739][ T7785] xt_SECMARK: invalid mode: 3 [ 133.069101][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1262'. [ 133.125589][ T7804] netlink: 'syz.3.1266': attribute type 7 has an invalid length. [ 133.129216][ T7805] xt_hashlimit: size too large, truncated to 1048576 [ 133.133497][ T7804] netlink: 'syz.3.1266': attribute type 8 has an invalid length. [ 133.133514][ T7804] netlink: 'syz.3.1266': attribute type 13 has an invalid length. [ 133.134326][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 133.151527][ T7805] xt_hashlimit: max too large, truncated to 1048576 [ 133.162886][ T7804] batadv1: left allmulticast mode [ 133.178358][ T7804] batadv1: left promiscuous mode [ 133.212562][ T7804] bridge0: port 3(batadv1) entered disabled state [ 133.362574][ T7838] team0: left allmulticast mode [ 133.373051][ T7839] xt_TPROXY: Can be used only with -p tcp or -p udp [ 133.410374][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.824532][ T7879] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7879 comm=syz.2.1289 [ 133.960654][ T7895] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 133.967224][ T7895] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 133.996701][ T7900] ´(Y}ñB: renamed from veth1_to_bridge [ 133.996837][ T7895] vhci_hcd vhci_hcd.0: Device attached [ 134.018858][ T7904] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1299'. [ 134.061971][ T7895] lo speed is unknown, defaulting to 1000 [ 134.068134][ T7895] xfrm0 speed is unknown, defaulting to 1000 [ 134.172461][ T7897] vhci_hcd: connection closed [ 134.172734][ T4295] vhci_hcd vhci_hcd.3: stop threads [ 134.185120][ T4295] vhci_hcd vhci_hcd.3: release socket [ 134.191288][ T1038] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 134.200655][ T4295] vhci_hcd vhci_hcd.3: disconnect device [ 134.265310][ T1038] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 134.272763][ T1038] usb 7-1: enqueue for inactive port 0 [ 134.279132][ T1038] usb 7-1: enqueue for inactive port 0 [ 134.284664][ T1038] usb 7-1: enqueue for inactive port 0 [ 134.372863][ T1038] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 134.549431][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1313'. [ 134.561553][ T7944] vlan1: entered promiscuous mode [ 134.566669][ T7944] geneve1: entered promiscuous mode [ 134.572205][ T7944] vlan1: entered allmulticast mode [ 134.578205][ T7944] geneve1: entered allmulticast mode [ 134.610509][ T7946] lo speed is unknown, defaulting to 1000 [ 134.616614][ T7946] xfrm0 speed is unknown, defaulting to 1000 [ 134.674580][ T7947] lo speed is unknown, defaulting to 1000 [ 134.692001][ T7947] xfrm0 speed is unknown, defaulting to 1000 [ 134.736209][ T7946] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 134.787957][ T7949] bond1: left promiscuous mode [ 134.796031][ T4286] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.810286][ T4286] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.848313][ T4286] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.857486][ T4286] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.143361][ T7979] hsr_slave_1 (unregistering): left promiscuous mode [ 135.213146][ T7977] lo speed is unknown, defaulting to 1000 [ 135.233770][ T7977] xfrm0 speed is unknown, defaulting to 1000 [ 135.428286][ T7989] 8021q: adding VLAN 0 to HW filter on device bond7 [ 135.493411][ T7991] macvlan2: entered promiscuous mode [ 135.515646][ T7991] macvlan2: entered allmulticast mode [ 135.546180][ T7991] bond7: entered promiscuous mode [ 135.582042][ T7991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.611814][ T7991] bond7: left promiscuous mode [ 136.874093][ T8045] bond4: option lacp_active: invalid value (5) [ 136.896425][ T8045] bond4 (unregistering): Released all slaves [ 137.220544][ T8065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.525389][ T28] kauditd_printk_skb: 5155 callbacks suppressed [ 137.525405][ T28] audit: type=1400 audit(2000000043.721:29158): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.562801][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.577891][ T3019] audit: audit_lost=114 audit_rate_limit=0 audit_backlog_limit=64 [ 137.585734][ T3019] audit: backlog limit exceeded [ 137.590676][ T28] audit: type=1400 audit(2000000043.730:29159): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.612269][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.622109][ T3019] audit: audit_lost=115 audit_rate_limit=0 audit_backlog_limit=64 [ 137.642002][ T3019] audit: backlog limit exceeded [ 137.646906][ T28] audit: type=1326 audit(2000000043.758:29160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.2.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7872cd60e code=0x7ffc0000 [ 137.670613][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.168056][ T8080] __nla_validate_parse: 6 callbacks suppressed [ 138.168072][ T8080] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1359'. [ 138.650933][ T8104] FAULT_INJECTION: forcing a failure. [ 138.650933][ T8104] name failslab, interval 1, probability 0, space 0, times 0 [ 138.673765][ T8104] CPU: 1 UID: 0 PID: 8104 Comm: syz.3.1368 Tainted: G W syzkaller #0 PREEMPT(full) [ 138.673796][ T8104] Tainted: [W]=WARN [ 138.673835][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.673896][ T8104] Call Trace: [ 138.673904][ T8104] [ 138.673912][ T8104] __dump_stack+0x1d/0x30 [ 138.673935][ T8104] dump_stack_lvl+0x95/0xd0 [ 138.673957][ T8104] dump_stack+0x15/0x1b [ 138.674021][ T8104] should_fail_ex+0x263/0x280 [ 138.674096][ T8104] should_failslab+0x8c/0xb0 [ 138.674124][ T8104] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 138.674195][ T8104] ? sidtab_sid2str_get+0xa0/0x130 [ 138.674222][ T8104] kmemdup_noprof+0x2b/0x70 [ 138.674249][ T8104] sidtab_sid2str_get+0xa0/0x130 [ 138.674278][ T8104] security_sid_to_context_core+0x1eb/0x2e0 [ 138.674302][ T8104] security_sid_to_context+0x27/0x40 [ 138.674444][ T8104] selinux_lsmprop_to_secctx+0x67/0xf0 [ 138.674505][ T8104] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 138.674541][ T8104] audit_log_subj_ctx+0xa4/0x3e0 [ 138.674566][ T8104] ? skb_put+0xa9/0xf0 [ 138.674663][ T8104] audit_log_task_context+0x48/0x70 [ 138.674687][ T8104] audit_log_task+0xf3/0x250 [ 138.674711][ T8104] audit_seccomp+0x60/0x100 [ 138.674781][ T8104] ? __seccomp_filter+0x8db/0x1350 [ 138.674809][ T8104] __seccomp_filter+0x8ec/0x1350 [ 138.674922][ T8104] ? __rcu_read_unlock+0x4e/0x70 [ 138.674943][ T8104] ? set_user_sigmask+0x8b/0x140 [ 138.675019][ T8104] ? xfd_validate_state+0x45/0xf0 [ 138.675051][ T8104] __secure_computing+0x81/0x150 [ 138.675142][ T8104] do_syscall_64+0xce/0x3b0 [ 138.675183][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.675210][ T8104] RIP: 0033:0x7fed4feed60e [ 138.675228][ T8104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.675251][ T8104] RSP: 002b:00007fed4e986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.675320][ T8104] RAX: ffffffffffffffda RBX: 00007fed4e9876c0 RCX: 00007fed4feed60e [ 138.675362][ T8104] RDX: 000000000000000f RSI: 00007fed4e9870a0 RDI: 0000000000000003 [ 138.675374][ T8104] RBP: 00007fed4e987090 R08: 0000000000000000 R09: 0000000000000000 [ 138.675390][ T8104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.675415][ T8104] R13: 00007fed501a6038 R14: 00007fed501a5fa0 R15: 00007ffdb812f208 [ 138.675460][ T8104] [ 139.068724][ T8109] xt_TPROXY: Can be used only with -p tcp or -p udp [ 139.404363][ T8119] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1373'. [ 140.678377][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 140.900565][ T8137] FAULT_INJECTION: forcing a failure. [ 140.900565][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 140.955869][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.3.1379 Tainted: G W syzkaller #0 PREEMPT(full) [ 140.955941][ T8137] Tainted: [W]=WARN [ 140.955950][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.955962][ T8137] Call Trace: [ 140.955970][ T8137] [ 140.955978][ T8137] __dump_stack+0x1d/0x30 [ 140.956006][ T8137] dump_stack_lvl+0x95/0xd0 [ 140.956081][ T8137] dump_stack+0x15/0x1b [ 140.956172][ T8137] should_fail_ex+0x263/0x280 [ 140.956202][ T8137] ? audit_log_d_path+0x8d/0x150 [ 140.956238][ T8137] should_failslab+0x8c/0xb0 [ 140.956290][ T8137] __kmalloc_cache_noprof+0x5f/0x400 [ 140.956329][ T8137] audit_log_d_path+0x8d/0x150 [ 140.956352][ T8137] audit_log_d_path_exe+0x42/0x70 [ 140.956376][ T8137] audit_log_task+0x1e8/0x250 [ 140.956447][ T8137] audit_seccomp+0x60/0x100 [ 140.956466][ T8137] ? __seccomp_filter+0x8db/0x1350 [ 140.956541][ T8137] __seccomp_filter+0x8ec/0x1350 [ 140.956575][ T8137] ? __rcu_read_unlock+0x4e/0x70 [ 140.956595][ T8137] ? set_user_sigmask+0x8b/0x140 [ 140.956707][ T8137] ? __se_sys_io_pgetevents+0x26a/0x2d0 [ 140.956740][ T8137] __secure_computing+0x81/0x150 [ 140.956768][ T8137] do_syscall_64+0xce/0x3b0 [ 140.956848][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.956872][ T8137] RIP: 0033:0x7fed4feed60e [ 140.956887][ T8137] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.956929][ T8137] RSP: 002b:00007fed4e986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.957022][ T8137] RAX: ffffffffffffffda RBX: 00007fed4e9876c0 RCX: 00007fed4feed60e [ 140.957036][ T8137] RDX: 000000000000000f RSI: 00007fed4e9870a0 RDI: 0000000000000003 [ 140.957048][ T8137] RBP: 00007fed4e987090 R08: 0000000000000000 R09: 0000000000000000 [ 140.957127][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.957139][ T8137] R13: 00007fed501a6038 R14: 00007fed501a5fa0 R15: 00007ffdb812f208 [ 140.957160][ T8137] [ 141.263318][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 141.289249][ T8143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.826831][ T8174] syzkaller0: entered promiscuous mode [ 141.858251][ T8174] syzkaller0: entered allmulticast mode [ 141.916960][ T8181] FAULT_INJECTION: forcing a failure. [ 141.916960][ T8181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.953698][ T8181] CPU: 1 UID: 0 PID: 8181 Comm: syz.3.1395 Tainted: G W syzkaller #0 PREEMPT(full) [ 141.953798][ T8181] Tainted: [W]=WARN [ 141.953807][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.953821][ T8181] Call Trace: [ 141.953830][ T8181] [ 141.953839][ T8181] __dump_stack+0x1d/0x30 [ 141.953923][ T8181] dump_stack_lvl+0x95/0xd0 [ 141.953954][ T8181] dump_stack+0x15/0x1b [ 141.953977][ T8181] should_fail_ex+0x263/0x280 [ 141.954048][ T8181] should_fail+0xb/0x20 [ 141.954077][ T8181] should_fail_usercopy+0x1a/0x20 [ 141.954111][ T8181] _copy_to_user+0x20/0xa0 [ 141.954213][ T8181] simple_read_from_buffer+0xb5/0x130 [ 141.954254][ T8181] proc_fail_nth_read+0x10e/0x150 [ 141.954341][ T8181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.954446][ T8181] vfs_read+0x1ab/0x7f0 [ 141.954474][ T8181] ? __rcu_read_unlock+0x4e/0x70 [ 141.954506][ T8181] ? __fget_files+0x184/0x1c0 [ 141.954577][ T8181] ? mutex_lock+0x57/0x90 [ 141.954605][ T8181] ksys_read+0xdc/0x1a0 [ 141.954632][ T8181] __x64_sys_read+0x40/0x50 [ 141.954748][ T8181] x64_sys_call+0x2886/0x3020 [ 141.954839][ T8181] do_syscall_64+0x12c/0x3b0 [ 141.954913][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.955008][ T8181] RIP: 0033:0x7fed4feed60e [ 141.955023][ T8181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.955044][ T8181] RSP: 002b:00007fed4e986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.955069][ T8181] RAX: ffffffffffffffda RBX: 00007fed4e9876c0 RCX: 00007fed4feed60e [ 141.955147][ T8181] RDX: 000000000000000f RSI: 00007fed4e9870a0 RDI: 0000000000000003 [ 141.955163][ T8181] RBP: 00007fed4e987090 R08: 0000000000000000 R09: 0000000000000000 [ 141.955186][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.955201][ T8181] R13: 00007fed501a6038 R14: 00007fed501a5fa0 R15: 00007ffdb812f208 [ 141.955222][ T8181] [ 142.385111][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 142.508706][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 142.547677][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1405'. [ 142.713206][ T8211] netlink: 'syz.0.1407': attribute type 13 has an invalid length. [ 142.842124][ T8227] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 142.850381][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 142.878181][ T28] kauditd_printk_skb: 19879 callbacks suppressed [ 142.878200][ T28] audit: type=1400 audit(2000000048.737:46317): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.923393][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.933057][ T3292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.936148][ T3019] audit: audit_lost=1024 audit_rate_limit=0 audit_backlog_limit=64 [ 142.940734][ T3300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.964296][ T3019] audit: backlog limit exceeded [ 142.964578][ T3292] audit: audit_lost=1025 audit_rate_limit=0 audit_backlog_limit=64 [ 142.969219][ T28] audit: type=1400 audit(2000000048.737:46318): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.969244][ T28] audit: type=1400 audit(2000000048.737:46319): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.969265][ T28] audit: type=1400 audit(2000000048.737:46320): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 143.449964][ T8256] lo speed is unknown, defaulting to 1000 [ 143.512999][ T8256] xfrm0 speed is unknown, defaulting to 1000 [ 143.570228][ T8275] lo speed is unknown, defaulting to 1000 [ 143.703691][ T8278] lo speed is unknown, defaulting to 1000 [ 143.731352][ T8275] xfrm0 speed is unknown, defaulting to 1000 [ 143.951734][ T8278] xfrm0 speed is unknown, defaulting to 1000 [ 144.612156][ T8331] lo speed is unknown, defaulting to 1000 [ 144.637125][ T8331] xfrm0 speed is unknown, defaulting to 1000 [ 144.690231][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.697476][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.731845][ T8348] bridge0: entered allmulticast mode [ 144.943626][ T8363] lo speed is unknown, defaulting to 1000 [ 144.976443][ T8363] xfrm0 speed is unknown, defaulting to 1000 [ 145.218441][ T8365] team_slave_0: left promiscuous mode [ 145.242694][ T8365] team0 (unregistering): Port device team_slave_0 removed [ 145.265399][ T8365] team_slave_1: left promiscuous mode [ 145.284500][ T8365] team0 (unregistering): Port device team_slave_1 removed [ 145.520531][ T4286] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.535455][ T4286] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.575203][ T4286] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.599927][ T4286] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.616526][ T8406] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 145.658441][ T8413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8413 comm=syz.3.1468 [ 145.678121][ T8406] 8021q: adding VLAN 0 to HW filter on device bond8 [ 145.693177][ T8234] lo speed is unknown, defaulting to 1000 [ 145.711669][ T8234] xfrm0 speed is unknown, defaulting to 1000 [ 145.744827][ T8416] ipvlan2: entered promiscuous mode [ 146.094509][ T8450] netlink: 'syz.5.1480': attribute type 4 has an invalid length. [ 146.110128][ T8450] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1480'. [ 146.122905][ T8448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8448 comm=syz.4.1479 [ 146.126155][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 146.145923][ T8452] netlink: 'syz.0.1481': attribute type 27 has an invalid length. [ 146.185640][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1481'. [ 146.220518][ T8452] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 146.476357][ T8493] lo speed is unknown, defaulting to 1000 [ 146.490918][ T8493] xfrm0 speed is unknown, defaulting to 1000 [ 146.588350][ T8512] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 146.654126][ T8512] team0: Port device wg2 added [ 146.725481][ T8518] ipvlan2: entered promiscuous mode [ 146.736725][ T8518] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 146.764429][ T8518] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 146.786731][ T8518] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 147.460600][ T8541] netlink: 'syz.5.1510': attribute type 3 has an invalid length. [ 147.503374][ T8541] netlink: 'syz.5.1510': attribute type 1 has an invalid length. [ 147.540259][ T8541] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.1510'. [ 147.889703][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1510'. [ 147.929864][ T8549] lo: Caught tx_queue_len zero misconfig [ 148.231886][ T28] kauditd_printk_skb: 23792 callbacks suppressed [ 148.231904][ T28] audit: type=1400 audit(2000000053.743:68409): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 148.269535][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.276960][ T3019] audit: audit_lost=1594 audit_rate_limit=0 audit_backlog_limit=64 [ 148.277660][ T8593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.285204][ T8594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.298288][ T3019] audit: backlog limit exceeded [ 148.303234][ T28] audit: type=1400 audit(2000000053.752:68410): avc: denied { read write } for pid=3293 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.328887][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.335980][ T8596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.342929][ T8597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.412017][ T8599] lo speed is unknown, defaulting to 1000 [ 148.425158][ T8599] xfrm0 speed is unknown, defaulting to 1000 [ 148.740879][ T8604] lo speed is unknown, defaulting to 1000 [ 148.775310][ T8604] xfrm0 speed is unknown, defaulting to 1000 [ 148.935062][ T8619] netlink: 'syz.5.1536': attribute type 1 has an invalid length. [ 149.106974][ T8619] bond4: entered promiscuous mode [ 149.159214][ T8619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.760797][ T10] IPVS: starting estimator thread 0... [ 149.773882][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.878965][ T8656] IPVS: using max 2784 ests per chain, 139200 per kthread [ 149.904124][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.998781][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.042435][ T8655] IPVS: nq: FWM 3 0x00000003 - no destination available [ 150.286692][ T8651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.336659][ T8651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.432578][ T8651] veth1_vlan: left promiscuous mode [ 150.503361][ T8651] veth0_vlan: left promiscuous mode [ 150.589837][ T8651] veth0_vlan: entered promiscuous mode [ 150.658294][ T8651] veth1_vlan: entered promiscuous mode [ 150.708478][ T8651] tipc: Resetting bearer [ 150.754122][ T8651] tipc: Resetting bearer [ 150.822323][ T8651] veth1_macvtap: left promiscuous mode [ 150.882362][ T8651] veth0_macvtap: left promiscuous mode [ 150.942778][ T8651] veth0_macvtap: entered promiscuous mode [ 151.006501][ T8651] veth1_macvtap: entered promiscuous mode [ 151.088924][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.132207][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.179576][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.233452][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.281710][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 151.334082][ T8651] veth3: left allmulticast mode [ 151.370082][ T8651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.442165][ T8651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.558855][ T4304] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.587850][ T4304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.615729][ T4304] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.644590][ T4304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.681991][ T4304] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.708210][ T4304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.736267][ T4304] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.762911][ T4304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.790501][ T8659] lo speed is unknown, defaulting to 1000 [ 151.805373][ T8659] xfrm0 speed is unknown, defaulting to 1000 [ 151.937380][ T8684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2154 sclass=netlink_route_socket pid=8684 comm=syz.5.1559 [ 152.150376][ T8691] IPv6: sit2: Disabled Multicast RS [ 152.317189][ T8706] netlink: 'syz.5.1568': attribute type 5 has an invalid length. [ 153.011926][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 153.059068][ T8728] 8021q: adding VLAN 0 to HW filter on device bond9 [ 153.498381][ T8755] lo speed is unknown, defaulting to 1000 [ 153.558379][ T8755] xfrm0 speed is unknown, defaulting to 1000 [ 153.588940][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 153.598124][ T28] kauditd_printk_skb: 22714 callbacks suppressed [ 153.598141][ T28] audit: type=1400 audit(144.751:90005): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 153.607806][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.637223][ T8759] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.643814][ T8767] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.652225][ T8767] audit: audit_lost=1970 audit_rate_limit=0 audit_backlog_limit=64 [ 153.660172][ T3019] audit: audit_lost=1971 audit_rate_limit=0 audit_backlog_limit=64 [ 153.677224][ T3019] audit: backlog limit exceeded [ 153.685584][ T8759] audit: audit_lost=1972 audit_rate_limit=0 audit_backlog_limit=64 [ 153.685804][ T8766] 8021q: adding VLAN 0 to HW filter on device bond10 [ 153.694232][ T8767] audit: backlog limit exceeded [ 153.700630][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.877740][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1592'. [ 153.903370][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1592'. [ 153.919105][ T8782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1592'. [ 154.065398][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 154.080597][ T8789] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 154.117202][ T8790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.256758][ T8804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1599'. [ 154.600351][ T8823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8823 comm=syz.5.1607 [ 154.651938][ T8823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8823 comm=syz.5.1607 [ 154.691123][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 154.890351][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1620'. [ 154.978924][ T8870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1622'. [ 155.082619][ T8875] tc_dump_action: action bad kind [ 156.176032][ T8921] lo speed is unknown, defaulting to 1000 [ 156.195976][ T8921] xfrm0 speed is unknown, defaulting to 1000 [ 156.564041][ T8932] bond0 (unregistering): Released all slaves [ 157.168894][ T4304] ================================================================== [ 157.177018][ T4304] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 157.185285][ T4304] [ 157.187633][ T4304] write to 0xffff88812af454e0 of 44 bytes by task 8971 on cpu 1: [ 157.195375][ T4304] tty_set_termios+0xc0/0x910 [ 157.200084][ T4304] set_termios+0x373/0x4f0 [ 157.204528][ T4304] tty_mode_ioctl+0x37f/0x5b0 [ 157.209238][ T4304] n_tty_ioctl_helper+0x87/0x370 [ 157.214201][ T4304] n_tty_ioctl+0x101/0x220 [ 157.218627][ T4304] tty_ioctl+0x83e/0xb80 [ 157.222919][ T4304] __se_sys_ioctl+0xce/0x140 [ 157.227543][ T4304] __x64_sys_ioctl+0x43/0x50 [ 157.232155][ T4304] x64_sys_call+0x1563/0x3020 [ 157.236867][ T4304] do_syscall_64+0x12c/0x3b0 [ 157.241475][ T4304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.247382][ T4304] [ 157.249726][ T4304] read to 0xffff88812af454f9 of 1 bytes by task 4304 on cpu 0: [ 157.257292][ T4304] n_tty_lookahead_flow_ctrl+0x137/0x300 [ 157.262948][ T4304] tty_port_default_lookahead_buf+0x91/0xc0 [ 157.268899][ T4304] flush_to_ldisc+0x288/0x340 [ 157.273602][ T4304] process_scheduled_works+0x4f0/0x9c0 [ 157.279094][ T4304] worker_thread+0x58a/0x780 [ 157.283711][ T4304] kthread+0x22a/0x280 [ 157.287798][ T4304] ret_from_fork+0x146/0x330 [ 157.292411][ T4304] ret_from_fork_asm+0x1a/0x30 [ 157.297204][ T4304] [ 157.299543][ T4304] value changed: 0x11 -> 0x56 [ 157.304226][ T4304] [ 157.306574][ T4304] Reported by Kernel Concurrency Sanitizer on: [ 157.312741][ T4304] CPU: 0 UID: 0 PID: 4304 Comm: kworker/u8:24 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.323864][ T4304] Tainted: [W]=WARN [ 157.327670][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.337833][ T4304] Workqueue: events_unbound flush_to_ldisc [ 157.343760][ T4304] ================================================================== [ 158.950718][ T28] kauditd_printk_skb: 23591 callbacks suppressed [ 158.950744][ T28] audit: type=1400 audit(405.783:113594): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.957556][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.978613][ T28] audit: type=1400 audit(405.783:113595): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 158.984613][ T3019] audit: audit_lost=1974 audit_rate_limit=0 audit_backlog_limit=64 [ 158.984631][ T3019] audit: backlog limit exceeded [ 158.984840][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.984855][ T3019] audit: audit_lost=1975 audit_rate_limit=0 audit_backlog_limit=64 [ 158.984871][ T3019] audit: backlog limit exceeded [ 158.984930][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.984943][ T3019] audit: audit_lost=1976 audit_rate_limit=0 audit_backlog_limit=64 [ 164.304237][ T28] kauditd_printk_skb: 54562 callbacks suppressed [ 164.304254][ T28] audit: type=1400 audit(410.789:164656): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.320464][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.332531][ T28] audit: type=1400 audit(410.799:164657): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 164.338680][ T3019] audit: audit_lost=3144 audit_rate_limit=0 audit_backlog_limit=64 [ 164.338697][ T3019] audit: backlog limit exceeded [ 164.338862][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.338877][ T3019] audit: audit_lost=3145 audit_rate_limit=0 audit_backlog_limit=64 [ 164.338894][ T3019] audit: backlog limit exceeded [ 164.338958][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.338971][ T3019] audit: audit_lost=3146 audit_rate_limit=0 audit_backlog_limit=64