last executing test programs: 4m0.951720798s ago: executing program 2 (id=592): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x9, 0x0, 0xd, 0x512b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x32, 0x2, 0x7, 0x9, 0x4, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 4m0.895612253s ago: executing program 2 (id=595): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) 4m0.430515925s ago: executing program 2 (id=597): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}}, 0x0) 4m0.361997841s ago: executing program 2 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0x491e, &(0x7f0000000000)={0x0, 0xb27, 0x10000, 0x3, 0xa3}, &(0x7f0000000440), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000740)={0x18, 0x1, 0x0, 0x0, 0x0}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000340)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd, 0x40}, {0x3}, @connect={{0x4, 0x2}, {0x3, 0x9}}}, {0x6, 0x7, 0x9, 0x3, @time={0x10001, 0x7}, {0x10, 0x5}, {0xce, 0x2}, @raw8={"93ec0ccdd44e1cfec21c2b14"}}, {0xf7, 0x81, 0x1, 0xaf, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}, {0x2, 0xff, 0x81, 0xc0, @time={0xd1a, 0xc88}, {0xc, 0x9}, {0x48, 0x5}, @result={0xa80, 0x9f92}}], 0x8c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0xc, 0xffffffffffffffff, 0x7, 0x5, 0x3, 0xfffefffffdffffff}) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x863, @private0, 0xdba}, @in6={0xa, 0x4e23, 0xffffffff, @local, 0x8}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5, 0xdf, "7a5894be1ebffe59c02238f3a4443d79632bc023673580d941eb2d392a777043afd251bf30ad8b74a855e7f5ab70ac918f7bf302df1fd3c87a3959ce860a6ac2e72c74189ae757482de169da4ff1b713320b4e7ab84633e6371435c7e01169a68223f86685bcc13cd5c9030eeb97a227037ae7c28f29f9f1b487338e1df2c392fcaf0414d8d15f1383e20c0de286a4dcba54663af859b0175df91de5bb29b088e6bf07d70544c4275f80c1e17a947537b104d5f3ac9a3373599b1f173064dc8eb884692b7e4245af5f5037640b44865c48aab3d60bfc363d877948d4750ee6"}, &(0x7f0000000340)=0xe7) r6 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX, @ANYBLOB='B\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f0000000380)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r8 = inotify_init1(0x800) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x29) ppoll(&(0x7f0000000580)=[{r6, 0x20}, {r2, 0x5040}, {r4, 0xb}, {r6}, {r8, 0x20}], 0x5, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x9]}, 0x8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0x11, r9, 0x5, &(0x7f0000000480)) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 3m59.039957358s ago: executing program 2 (id=606): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xac0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x39}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x28) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m58.843839866s ago: executing program 2 (id=610): syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, r1}, 0xc) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 3m58.789166791s ago: executing program 32 (id=610): syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, r1}, 0xc) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 2m11.474316326s ago: executing program 5 (id=1757): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) syz_open_pts(r0, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c020000020000000800", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="400504", @ANYRES8=r2], 0x7) 2m11.43424617s ago: executing program 5 (id=1758): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005cb728854a7b14e98aebdfcd8e2dc274cb682c900624eaf7cd7b7ae7b3c8612bb5ac200c71922ad936506999db647cfd3eea992087c91743d524b116501b61485cb837a0ae66e7b1b05b71a0bfc11e31e89a7c8cb4629a17eb4f64e2fc76a79bb86272fc2c5fae2401a5d27d47160a4def50b936795e1bfc064aaeaa76ce4319d5562f9e4b4b7b1f0ea60c605febf4f614542974df0b24fb1fc145b63cd7dfef998c8d080010300d8e011e7b868bebab24f889b314b6e46f1e5d08f0c629cc75d52e02a7edafa4c3afc68786438d0114a7032e0ca789550654ee32661d2a000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020001000000dbaaf8ff50000000bf820000000000e5ca516d803e8e7fffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010425bd7000fedbdf2500000000", @ANYRES32=r7, @ANYBLOB="7808020001a20100200012800900010069706970000000001000028006000f0008"], 0x40}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x4b3b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x8000002) 2m10.467025415s ago: executing program 5 (id=1767): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m10.209791628s ago: executing program 5 (id=1771): ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1804, &(0x7f0000000300)=ANY=[]) r2 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x1, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="008340c0a40015"], 0x1, 0x2be, &(0x7f0000000600)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x122013, r4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)) sendfile(r4, r4, 0x0, 0x252c000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004000000010000000100000001000000", @ANYRES32, @ANYRESHEX=0x0, @ANYRES64=r5, @ANYRES32, @ANYRES8=r0, @ANYRES8=r1, @ANYBLOB="78bf67a9f8c04470fb0c52cde18a1eab65539b33310b932dafd4e6509ee9ce072b2725176911ad0ae3f16da28b58812558650d6d5fe0687816e02081a1a295da39e4e79264ecf45698f83582449ad59358ad44b8a681f0210c2bbf9c6099ff7b1d056eefc9eaa9054e9ba195dd1d64963919e75d246674eea89d31884bf85f8d786b32f6b75cca35809ba07db84ec49a331f7bb08c82504fc8627f22589ae06f208cd8c3aac3ff823f866954d6f1b673b36d8fe8e18bb98d7b5fd878717724ef16fe4f02797330c3bef082cf74eb2b8fc6a403b05c", @ANYRESOCT=r2, @ANYBLOB="a30077d1e62b7eceab5b285ebb04a6ddadf9716a1f6946d740e94c12bdb2e49680c76f3db4f72e298151d16ec0e181192ac1173c4439a4296e6f7d7b7d06aa869c2412ac230fa7ac198e6687b45c2724e81c83e085fd9a01adff640cb5ecf27d18d690b68596f7a84eb936c8fd6ffbad40f0e851a416bca6717867ed042894fee759ba877cd9c5c61885367a3ba45016245ebfaa0da85d692ef0d2212d215c91f8bb23d13261db2e1ad60de2b5fc7e5552a0ce55373fe8bdde92181ecaa09857a3789c87e383ca76f1e2cfb02dd7e79873304b41a7cb8ffba4"], 0x50) prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000000)=0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000fdffffff000000000700000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000c9aaba1ed2ee8bee3760ab12449fb216d6b280d2d0dc73ce744ffe1a45c5d41fee1a0d12b5fab7cc2db7ff47b1383a0939963d8a79d7248aa1262662229dcdb882620bb96631f352e92628ca81"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000006}, 0x94) r8 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) fsmount(r8, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = signalfd4(r8, &(0x7f0000000000)={[0x3]}, 0x8, 0x5307349fb042d024) ioctl$XFS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000040)) setpgid(r9, r9) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0xc, 0xa, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 2m10.136990685s ago: executing program 5 (id=1773): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r0, &(0x7f00000004c0), 0x0, 0xef, 0x3) 2m10.064588681s ago: executing program 5 (id=1774): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x4004080) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x4, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, r2, 0x6, 0xffffffffffffffff, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c00fffd008c80140001800600060088070000080018"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) 2m10.048266703s ago: executing program 33 (id=1774): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x4004080) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x4, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, r2, 0x6, 0xffffffffffffffff, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c00fffd008c80140001800600060088070000080018"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) 55.912075606s ago: executing program 0 (id=2546): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/14], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f0000001500)=[{0x7, 0x0, 0x3}], 0x1, 0x2b2, 0x0, 0x0, 0x0, 0x18}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4220, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffdf0000, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 55.887281009s ago: executing program 0 (id=2547): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x44}}, 0x0) 55.820425125s ago: executing program 0 (id=2548): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00, 0xfdef}]) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x60000000}) close(0x3) 55.637533801s ago: executing program 0 (id=2550): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r2, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r3 = syz_open_procfs(0x0, &(0x7f00000015c0)='net/raw6\x00') read(r3, &(0x7f0000000100)=""/34, 0x22) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0xc4fd451e, @empty, 0x5}}}, 0x32) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x63d}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 55.522392562s ago: executing program 0 (id=2551): r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x42, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000003820020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x2404c810}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x4ec, 0x881) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0x6}, 0x100000, 0x1, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010000100fcffff7ec19bc708e02a3cff00000000000000006743d20394937cc8aff50a131c70043e19f6a1203a483b7fe0bc91967809bb7862ae940b9338e79ac158911b62c592bf6dfbf0ad509f494400a4c3d1c4990d850738036b22b2db94efd9c336a6dc754b3fc2df4db01bc38813f96354ff647959216484abcaf9be941778f5cf17d1a09404ce984ec9b078b2c4937104b8f587e4c40f379ec43261a3e7abf304000000000000", @ANYRESDEC=r1, @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYRESDEC], 0x1, 0x266, &(0x7f0000000700)="$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") ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) io_setup(0x1, &(0x7f0000000b80)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@private0, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x200000000000003, 0x0, 0x3, 0x0, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0xd4}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast1, 0x2, 0x0, 'wrr\x00', 0x14, 0x0, 0x800000}, 0x2c) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCNXCL(r7, 0x540d) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xff000000], 'bond_slave_1\x00', 'veth1_to_bond\x00', {}, {}, 0x2f, 0x6, 0x9, 0x49}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x3}, {0x0, 0x4, 0x4}, {0xffffffffffffffff, 0x2, 0x6}, 0xf06}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'nr0\x00', {}, {0xff}, 0x3b, 0x6, 0x5, 0x17}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6, 0x7}, {0x1, 0x1, 0x2}, 0x3ff, 0xa8}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0x0, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xff], 'macsec0\x00', 'tunl0\x00', {0xff}, {}, 0xff, 0xb6, 0x1, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x1}, {0x0, 0x5, 0x4}, {0xffffffffffffffff, 0x0, 0x6}, 0x1213, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmmsg$inet(r8, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x20004051) 55.460117637s ago: executing program 0 (id=2552): perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdfd10238d90010001280423bf88008001e80"], 0x38}, 0x1, 0x0, 0x0, 0x44815}, 0x4040010) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000800200050000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000011000000000000000021f77c8700e15738520000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRESHEX=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000004000000000000000001d8900"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40800) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) listen(0xffffffffffffffff, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16fbde45676fc87d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) 55.443439548s ago: executing program 34 (id=2552): perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdfd10238d90010001280423bf88008001e80"], 0x38}, 0x1, 0x0, 0x0, 0x44815}, 0x4040010) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000800200050000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000011000000000000000021f77c8700e15738520000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRESHEX=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000004000000000000000001d8900"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40800) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) listen(0xffffffffffffffff, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16fbde45676fc87d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) 19.979700703s ago: executing program 6 (id=3039): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd29, 0x1ffffff9, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x804) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd29, 0x1ffffff9, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x804) (async) 19.775762961s ago: executing program 6 (id=3048): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@dmode={'dmode', 0x3d, 0x200}}, {@map_acorn}, {@map_normal}, {@session={'session', 0x3d, 0x10003f}}, {@map_off}]}, 0x1, 0x571, &(0x7f0000000540)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, 0x0) write$tun(r8, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbb00000288a819008100000086dd6100b646001406"], 0x52) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r12, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8000, 0x1, 0x1, 0x4, {{0x5, 0x4, 0x2, 0x14, 0x14, 0x66, 0x0, 0x4, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 19.433081231s ago: executing program 6 (id=3050): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000900)={[{@nogrpid}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@grpjquota}, {@errors_remount}, {@nombcache}]}, 0x1, 0x43d, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x2000, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) readahead(r2, 0x9, 0x3) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="b700"]) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x16, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="ff6d2558ffffffffffffe6ffffd7eb6bbc8a009784f2c0080045000000000000004e20002c9078010030c10d6d22712abb37bddb00000000000000"], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000500040000000000050001000600000005000500000000000900020073797a32000000000d0003206c6973743a73657400000000"], 0x48}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x53}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000040)=0x8) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) 19.262009877s ago: executing program 6 (id=3052): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r0, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x20008041) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES16, @ANYBLOB="00030000000000001c0012800c0001006d4e637330ec7b177a54a3ffc2583bfe352b93564807439260000280080001000800000008000500", @ANYRES32=r8, @ANYRES64=r7, @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x884) 18.912784528s ago: executing program 6 (id=3056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) 18.815738236s ago: executing program 35 (id=3056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) 10.488373446s ago: executing program 8 (id=3059): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x7, {0xaaaaaaaaaaaa0102}}}, 0x14) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x19cc8, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x47b5, 0x4600, 0x34, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ac7b51f, 0x24}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3e1, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 9.147242246s ago: executing program 8 (id=3059): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x7, {0xaaaaaaaaaaaa0102}}}, 0x14) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x19cc8, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x47b5, 0x4600, 0x34, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ac7b51f, 0x24}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3e1, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 7.068378171s ago: executing program 8 (id=3059): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x7, {0xaaaaaaaaaaaa0102}}}, 0x14) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x19cc8, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x47b5, 0x4600, 0x34, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ac7b51f, 0x24}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3e1, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 5.39803666s ago: executing program 8 (id=3059): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x7, {0xaaaaaaaaaaaa0102}}}, 0x14) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x19cc8, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x47b5, 0x4600, 0x34, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ac7b51f, 0x24}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3e1, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 4.1574878s ago: executing program 1 (id=3176): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xb, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x2, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000feffff108500040007000000954052fffb34e28a153a72ac40afb2f32ece0e284538e5c1d9c64f7b32fb836216fd2aff6b25fa6ca1a7f859d088cbd5a084ea76f63d0cc0eb93e8ee24cb30507afe9c9a1267", @ANYRES32=r3], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x2e, 0x0, 0x0, 0xffffffffffffffcb, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) socket(0x10, 0x3, 0x0) (async) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000440)=0x10, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) (async) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@sg0, 0xee00, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10010, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) close(0x3) 4.15410413s ago: executing program 3 (id=3177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073697a320000000028000000060a010400000000000000000100000008000b40000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0x9c}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0xffff0001, 0x80, 0x80000001, 0x9, 0x7, 0x800003, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0xed) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x3, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x39, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xfc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x640104fd, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000000)={0x24, {{0x29, 0x0, 0x2000000, @mcast2}}}, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000101000030400030000000000000000000014008cf42297ea9eed98dbb57e72190083c0742c85ceaad1400b8352ff312797b40d0eb1916364f2d2790ca34e2e4b1a", @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x8000) 4.059834809s ago: executing program 1 (id=3180): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 2) 3.82024738s ago: executing program 1 (id=3183): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@dmode={'dmode', 0x3d, 0x200}}, {@map_acorn}, {@map_normal}, {@session={'session', 0x3d, 0x10003f}}, {@map_off}]}, 0x1, 0x571, &(0x7f0000000540)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbb00000288a819008100000086dd61"], 0x52) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r12, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8000, 0x1, 0x1, 0x4, {{0x5, 0x4, 0x2, 0x14, 0x14, 0x66, 0x0, 0x4, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 3.507811598s ago: executing program 7 (id=3185): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001001400000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100007cffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x1, 0x101, 0xebad, 0x3, 0x89, 0x9, 0x8, 0x87f5}, &(0x7f0000000140)={0x7fffffff, 0x9, 0xffffffffffffffff, 0x10001, 0x8, 0x6, 0x9, 0x8}, &(0x7f0000000180)={0xd, 0x77f2, 0x5, 0x1, 0x9, 0x4, 0x3, 0x7ff}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="013101bd47a46a66bf0c296eaaf96c4c31a600000000001c0012800e0000080002800400e12dc7d90d4ed8f5e6099d249c311200000000000000000000000000001f9f60e69396828ce403a47f3052593d24500dfd220a918c"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.507563308s ago: executing program 8 (id=3059): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x7, {0xaaaaaaaaaaaa0102}}}, 0x14) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x19cc8, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x47b5, 0x4600, 0x34, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ac7b51f, 0x24}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3e1, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 2.207146043s ago: executing program 7 (id=3186): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x300, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 3) 2.200371314s ago: executing program 1 (id=3187): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = msgget$private(0x0, 0x80) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x24, 0x8}, 0x0, 0x0, 0x4, 0x9, 0xe, 0x29, 0xea51d77, 0x0, 0x9, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000ffdbdf2500000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000001002200003c00000002000000ff0200000000000000000000000000010600000004"], 0xfc}}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x890, 0x0, 0x0) 2.199821394s ago: executing program 3 (id=3188): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0xc00600000000c006) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4f22, @rand_addr=0x64010100}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 2.199394684s ago: executing program 4 (id=3189): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000200), &(0x7f0000000240)=@md5={0x1, "2113cee373cc77732ea6d0ee0e97c3ca"}, 0x11, 0x2) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000300)='\xee(\xddA\xc4\x9e\xe3\xe8z\xd0\x8e\xfeSK\x96\xf0u\xc0\xa4\x19N\xbc\xd7?`\x81\"\x16\f\x04\x93\x13%\x7f\xf4Z\x1b!\x99NY\x10\xfcG\x88\x96\x87f\xb0\xb3>Q}\xac\r4\x00\"IcD\xa4|\t\xb6:?\xd4S\x12\xa1e\x8d\xd0\xa0\xd1\xa3\xd3\x1d\xb7\x1eY', 0x460002, &(0x7f0000000080)={@_ha_fsid={[0x9, 0xffffffff]}, {0x5b1e, 0x9000, 0x9, 0x80}}, 0x5375ce8c, &(0x7f0000000100), &(0x7f0000000140)=0xffffafa9}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x10001}) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) 1.90392497s ago: executing program 7 (id=3190): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x40084) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) lstat(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000300000003000000580001800d0001007564703a73797a310000000044000400200001000a004e2400000044fe800000000000000000000000000016f80f0000120002000a000000fffffffcff02"], 0x6c}}, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000f80)="af5bdea8", 0x4}], 0x1) 1.885007203s ago: executing program 4 (id=3191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) (fail_nth: 3) 1.827805207s ago: executing program 4 (id=3192): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000200)) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1.820836898s ago: executing program 3 (id=3193): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) lseek(r0, 0x0, 0x4) utimensat(r0, &(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f00000000c0)={{}, {0x0, 0xea60}}, 0x100) futex(0x0, 0xc, 0xfffffffe, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}}) 1.80328901s ago: executing program 7 (id=3194): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) shutdown(r1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x90) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x80) recvfrom$unix(r4, &(0x7f00000000c0)=""/92, 0x5c, 0x43, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.707642308s ago: executing program 4 (id=3195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) 1.629777495s ago: executing program 3 (id=3196): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd2a, 0x25dfdbf9, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10012}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000001c0)=@v3={0x3000000, [{0x3, 0x77}, {0x7, 0x3e71}], r3}, 0x18, 0x0) 1.57532358s ago: executing program 3 (id=3197): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040014) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x28}}, 0x40822) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20048000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$xdp(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000180)={{r5, &(0x7f0000000000)='}\x00', 0x2000, &(0x7f0000000040)={@_ha_fsid={[0xffff, 0x89]}, {0x10, 0x0, 0xedcf, 0x4}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x101}, {[0x5b2ccbaf, 0xfff, 0x5, 0x2]}, 0x3, 0x77, &(0x7f0000000100)=""/119}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) 1.519746945s ago: executing program 7 (id=3198): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@dmode={'dmode', 0x3d, 0x200}}, {@map_acorn}, {@map_normal}, {@session={'session', 0x3d, 0x10003f}}, {@map_off}]}, 0x1, 0x571, &(0x7f0000000540)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbb00000288a819008100000086dd6100b646"], 0x52) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r12, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x8000, 0x1, 0x1, 0x4, {{0x5, 0x4, 0x2, 0x14, 0x14, 0x66, 0x0, 0x4, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 1.519521894s ago: executing program 8 (id=3059): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x7, {0xaaaaaaaaaaaa0102}}}, 0x14) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x19cc8, 0x8, 0xd1}) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r3, 0x47b5, 0x4600, 0x34, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ac7b51f, 0x24}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3e1, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 80.974572ms ago: executing program 7 (id=3199): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r1}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040014) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x28}}, 0x40822) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20048000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000180)={{r5, &(0x7f0000000000)='}\x00', 0x2000, &(0x7f0000000040)={@_ha_fsid={[0xffff, 0x89]}, {0x10, 0x0, 0xedcf, 0x4}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x101}, {[0x5b2ccbaf, 0xfff, 0x5, 0x2]}, 0x3, 0x77, &(0x7f0000000100)=""/119}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) 80.322703ms ago: executing program 1 (id=3200): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="a80542ab8799062edd559d87292e0509d44784d89380c9bbcf3c69e9370d3c9ea5f3ccaef9e2af5ae55fe67f1caf405397766086ef0b1a29c6e28b00aea8f34143790af3e5ef90e143d99e8b8a5e69f4055cd48a1f09a2fa", 0x58}, {&(0x7f0000000580)="00cd9aff71b76b5a997b17f400394793aef8e4a992996e81ef4e66733ef18733ef5ca2e2bf9e33c33867072ca0fdb87c23a5db5effdd6c1f555a15df06e24087544869c82417aecb19856a1766aa", 0x4e}, {&(0x7f0000000640)="8544f7da5a37350561e2e98c12f31409c383761f38d5e8d7076ca2354c683179133fd151a745a616ee21330fa2704dd066cade2db2f9d2a2916bbff2136e9be8054d475eec6ec41ce4bb2ce1d9e97458442a70cb1b0e2e26fd7f2a65e34cb81e950fcc2ef40fca711a7ab93ffbcb25abd8bd0681f632520baa7fa0697ca9492807e63476c2cab19b04fa0f5727e73fd7332152b74b433751f5a06dd093b3c3f6ed4aa2f2e64682f091f949f4192f6d29796d3c2e22", 0xb5}, {&(0x7f0000000880)="64847885a2feb0ca4dee1017bfc0a02fa18820f4e82e0d1cfdf378c921b7011b3f83546cd9c888ac0d3c9fb37960eab783e9f8c53878afdccfc7465b06259a5889c435713fdb7b35a94676f62439103b9dd13f28e276857734d785ba7f544d1e16ad20041a32ddc0a430cec4f950e4b390216c5504ac12568e0cbd", 0x7b}, {&(0x7f0000000180)="9c408ab2d3", 0x5}, {&(0x7f0000000900)="dccd3a4ae186f7ea2ddba51c835f7e13c573320f330d8fc8503a0e78fb9e3e9f1cd4a43074aa56c6bdf2f09304235146f800b78ffa922ba5d33ea8b2d8d8d6e61050a2b83a793ea6db6b81dcbb8d1600cb5a0f14b40aa6c708fa4c1b870f30d5580b9bcb0637", 0x66}], 0x6, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x48}}, {{&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000740)="48c10ce8e7d88a8db50b8b6f991250e30553cead29cb3e460f40813df1275aad1a4e64c93754007ee22d8354d0a613ca3c9fd6033a3b38bb4cb8daafba622bbe", 0x40}, {&(0x7f0000000a80)="dc49d0a8b72e617fd38c5392d2787075257d5cde691e2901439b8489eb118c4d22396287ef6df8bd894cbabcc2690d81d0b832ed0c9a3baf5af6556ab8b6c92dbb2536036ef935c204b246bc832d6af0c94bb72aea8d44c5ceb11df8040e9153a9df581b50ad7f3e9ec55e92c8518c83bf0b3f89e0a1d7d1bcc25fdbc27a4824b6771b80e5ed7210486dd741cece", 0x8e}, {&(0x7f0000000b40)="d1a75773a0786be4edb678fd60f8a42e9d360b96214531630f34a92cea48151f5eb8c507975ac29a0b8344d723f36e6290545e006d43c8b302659d97bcf20a35efce0c00507fbc26749321a70aed93a6e14b1ef5925377d33391942a40ce115bb682f7f36429b074e5caef08e36c0cff7ca87866decb0c56133fdab1615fcc582938e0c076ef01ae74157386baa67d912271d4a78bd62a1c831fd8f6c4da15f92f76013b69cee3740c35b381fae1bd5d9f7f794912bfd607e4bb8bdbf8924563646cadf9933246fea18385e565a4ef68fd223de469e292e3e45e3dfd1e406f134e0f26e049fe63f2", 0xe8}, {&(0x7f0000000c40)="e7ccfd9ed94e18fc5871a673124674336568e025f1f1c1fd07ddd8a0ecee895ba04ce1c0241be0da650368c8a5f365b1163c001479d3cdabb5ede8032353a339cc7e314015d7eeb257333c2d0042be5b1cad0903bf04488fd83e131f3434df202aadbdbd6445048216a61788b773901b30d7e0469f42ac5255f7ce652b51fa9890874197ba538f2542eb8d1ab9fe7df216519a24a357fc1f89dc8523f253417f23726d47b430b3c696cb025f9ac1c4f879da8954a75c60b8e4e70d141b43ddccf34529a34c4e30f5e468ed", 0xcb}], 0x4, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xdd, 0x3, 0x0, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1, 0x9}, {@local, 0x1}, {@local, 0x4}, {@local, 0x8}, {@empty, 0x81}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@local, 0x8}, {@rand_addr=0x64010101, 0x4}]}, @timestamp_addr={0x44, 0x34, 0xc0, 0x1, 0x5, [{@loopback, 0x400}, {@private=0xa010101, 0x10001}, {@remote, 0x7}, {@loopback, 0xe000000}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8}]}, @lsrr={0x83, 0xf, 0x3b, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, @empty]}, @end, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0xf, [{@private=0xa010101}, {@multicast2, 0x3}]}, @cipso={0x86, 0x37, 0x3, [{0x6, 0x10, "d044c1db4ac4df98c714cd9aca5c"}, {0x1, 0xe, "d36cecde998317323887a94d"}, {0x5, 0x4, "1f77"}, {0x61d8bc686a356423, 0xf, "e55f6ca416b2ab6dd684853756"}]}, @timestamp={0x44, 0x28, 0x45, 0x0, 0x9, [0x0, 0x8, 0xff, 0x3, 0x3, 0x9, 0xfffffffb, 0x6, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0x6d, 0x3, 0x3, [{@local, 0x5}, {@loopback, 0x10001}, {@local, 0x1}]}, @generic={0x82, 0xa, "efdb1e02c97c3df5"}, @generic={0x7, 0xa, "851899c7a4b319b1"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x1a0}}, {{&(0x7f0000001240)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001280)}], 0x1, &(0x7f0000001300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x38}}, {{&(0x7f0000001340)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001380)="d8e9f4880ee728d2608670207a7d80d028", 0x11}, {&(0x7f00000013c0)="1b9eb40096c34f68344992780f4b8eaa999d29f7823ee13f949af97bc94d967e6b244654cb861935aa38cdecb3c3145b7955846f95b5e44f8d75fbaa454511498623c5fc92f69fde84adea022d0cdab149d72e55f1b32cb6e54df8666b84ba75399f706a158b235074f563c018cd028ba76fde48cb9f5982c286554fe57c89e74e60fc0e7ff1937eb18052d4eba66dcec9ac343e6df522f020387b", 0x9b}], 0x2, &(0x7f0000001500)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfeb0}}], 0x18}}], 0x4, 0x40000000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)}, 0x123) socket$inet6_tcp(0xa, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x16, 0x0, @thr={&(0x7f0000000440)="f2b36da5cf72f6485154e5e920583c7486fe04aec4fbb748055f6fe0f7037a6b4330eaf091dce95e41000600e2506114db926be7b52e6cadd07471042a7e6cf7f9d281b74390242a34ee9b5c2c58a9d8a0c86f451567f83856bc7fa9642aacfd7744", &(0x7f0000000780)="229fe84d358615f2e75249bfd782ee64e33c60511f989417a6717bcb4be99baad35dac33362ae3342e02fc947cbd2db17f29ca429b66c42f6ff32039cceed00e5093d87bed5d0b87d1ec209fc0d90dbf1daf26392324bdcf56002ca7cd01dff1b405a376f7acc0f06fb061b669ece16bec9cfafea40208e69d145a6338ec938beee3dec42e7af6a7da646fe2a7d3047b4c2076174d0934d5070d08ffe7f5c5884efa941f8f1e92994f34edf99bd701791de0fcd0bac2b6f34a81f198977af760ab216afc07472e3933691f9139f83bae54fd0d2d00216270834cd4117bcc79057e5140c2a5"}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="3f9d00000000fddbdf271700000008000300", @ANYRES32=r4, @ANYBLOB="6800308014000400403a050c5baee2004ef2b6d713459a7a050002000a0000004800018008000100000000000400038038000380060001000100004006000300ffff00000c0004000202aaaaaaaaaaaa080002"], 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) 79.649313ms ago: executing program 3 (id=3201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26, 0x0, 0x1}, 0x28) unshare(0x28000600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0xa, 0xffff, 0xa}, 0x20) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x14}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x28) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ptrace$poke(0x4, 0x0, &(0x7f00000011c0), 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5a49721c3afd68650e37c5f8ee41", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000600)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="ea", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000840000479998ee6d1bf69f0004000000180000000000000084000000000000009d5b250009260a0018000000000000008400000007000000640101010000000030000000000000008400000001000000050081000a0000000100000015260000000200000500000002000000", @ANYRES32, @ANYBLOB=' '], 0x98, 0x4004011}], 0x1, 0x40) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x965a}, 0x1000, 0x10000, 0x0, 0x8, 0x401, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 77.540453ms ago: executing program 4 (id=3202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000000)=0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x50) 32.862057ms ago: executing program 4 (id=3203): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x4}]}}]}, 0x48}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', r4, 0x4, 0xf7, 0xd, 0x400, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7800, 0x20, 0x2, 0x10}}) 0s ago: executing program 1 (id=3204): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) close_range(r0, 0xffffffffffffffff, 0xd8000000) kernel console output (not intermixed with test programs): (device loop0): ext4_dirty_inode:6450: inode #18: comm syz.0.2503: mark_inode_dirty error [ 279.940792][T11883] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 279.940959][T11883] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #18: comm syz.0.2503: corrupted inode contents [ 279.965431][T11883] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 279.965588][T11883] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #18: comm syz.0.2503: mark_inode_dirty error [ 280.014317][T11883] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 280.014556][T11883] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #18: comm syz.0.2503: mark inode dirty (error -117) [ 280.059495][T11883] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 280.059654][T11883] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 280.115280][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.242661][T11897] FAULT_INJECTION: forcing a failure. [ 280.242661][T11897] name failslab, interval 1, probability 0, space 0, times 0 [ 280.270729][T11897] CPU: 0 UID: 0 PID: 11897 Comm: syz.3.2514 Not tainted syzkaller #0 PREEMPT(full) [ 280.270772][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.270784][T11897] Call Trace: [ 280.270792][T11897] [ 280.270799][T11897] __dump_stack+0x1d/0x30 [ 280.270828][T11897] dump_stack_lvl+0x95/0xd0 [ 280.270919][T11897] dump_stack+0x15/0x1b [ 280.270943][T11897] should_fail_ex+0x263/0x280 [ 280.270970][T11897] should_failslab+0x8c/0xb0 [ 280.271061][T11897] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 280.271175][T11897] ? __alloc_skb+0x2d6/0x690 [ 280.271205][T11897] __alloc_skb+0x2d6/0x690 [ 280.271228][T11897] ? __alloc_skb+0x200/0x690 [ 280.271307][T11897] netlink_alloc_large_skb+0xbf/0xf0 [ 280.271345][T11897] netlink_sendmsg+0x40c/0x6f0 [ 280.271380][T11897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.271512][T11897] ____sys_sendmsg+0x5af/0x600 [ 280.271591][T11897] ___sys_sendmsg+0x195/0x1e0 [ 280.271701][T11897] __x64_sys_sendmsg+0xd4/0x160 [ 280.271777][T11897] x64_sys_call+0x194c/0x3020 [ 280.271805][T11897] do_syscall_64+0x12c/0x370 [ 280.271828][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.271866][T11897] RIP: 0033:0x7f0c469dc629 [ 280.271886][T11897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.271907][T11897] RSP: 002b:00007f0c45437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.272025][T11897] RAX: ffffffffffffffda RBX: 00007f0c46c55fa0 RCX: 00007f0c469dc629 [ 280.272041][T11897] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000006 [ 280.272056][T11897] RBP: 00007f0c45437090 R08: 0000000000000000 R09: 0000000000000000 [ 280.272070][T11897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.272083][T11897] R13: 00007f0c46c56038 R14: 00007f0c46c55fa0 R15: 00007ffc5c67cd38 [ 280.272104][T11897] [ 280.360797][T11889] lo speed is unknown, defaulting to 1000 [ 280.372033][T11885] loop4: detected capacity change from 0 to 1024 [ 280.549744][T11906] FAULT_INJECTION: forcing a failure. [ 280.549744][T11906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.574558][T11906] CPU: 0 UID: 0 PID: 11906 Comm: syz.3.2515 Not tainted syzkaller #0 PREEMPT(full) [ 280.574590][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.574604][T11906] Call Trace: [ 280.574614][T11906] [ 280.574623][T11906] __dump_stack+0x1d/0x30 [ 280.574653][T11906] dump_stack_lvl+0x95/0xd0 [ 280.574679][T11906] dump_stack+0x15/0x1b [ 280.574744][T11906] should_fail_ex+0x263/0x280 [ 280.574772][T11906] should_fail+0xb/0x20 [ 280.574796][T11906] should_fail_usercopy+0x1a/0x20 [ 280.574872][T11906] _copy_from_user+0x1c/0xb0 [ 280.574916][T11906] core_sys_select+0x1e6/0x730 [ 280.575026][T11906] ? set_user_sigmask+0x8b/0x140 [ 280.575061][T11906] __se_sys_pselect6+0x23c/0x2a0 [ 280.575111][T11906] __x64_sys_pselect6+0x78/0x90 [ 280.575133][T11906] x64_sys_call+0x8d5/0x3020 [ 280.575216][T11906] do_syscall_64+0x12c/0x370 [ 280.575241][T11906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.575319][T11906] RIP: 0033:0x7f0c469dc629 [ 280.575339][T11906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.575358][T11906] RSP: 002b:00007f0c45437028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 280.575400][T11906] RAX: ffffffffffffffda RBX: 00007f0c46c55fa0 RCX: 00007f0c469dc629 [ 280.575416][T11906] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 280.575510][T11906] RBP: 00007f0c45437090 R08: 0000200000000280 R09: 0000000000000000 [ 280.575526][T11906] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 280.575541][T11906] R13: 00007f0c46c56038 R14: 00007f0c46c55fa0 R15: 00007ffc5c67cd38 [ 280.575564][T11906] [ 280.795894][T11885] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 280.807170][T11885] System zones: 0-1, 3-36 [ 280.807954][T11909] loop3: detected capacity change from 0 to 512 [ 280.823803][T11885] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2508: bad orphan inode 134217728 [ 280.829393][T11909] ext4: Unknown parameter 'noacl' [ 280.836202][T11885] loop4: lost filesystem error report for type 5 error -117 [ 280.844181][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 280.858455][ C0] EXT4-fs (loop4): initial error at time 1771368591: ext4_orphan_get:1417 [ 280.868235][ C0] EXT4-fs (loop4): last error at time 1771368591: ext4_orphan_get:1417 [ 280.896221][T11885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.039168][T11914] loop0: detected capacity change from 0 to 4096 [ 281.058297][T11914] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.066580][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.087248][T11914] EXT4-fs: test_dummy_encryption option not supported [ 281.167281][T11920] loop6: detected capacity change from 0 to 512 [ 281.195763][T11920] ext4: Unknown parameter 'audit' [ 281.422479][T11944] loop4: detected capacity change from 0 to 256 [ 281.467370][T11944] FAT-fs (loop4): Directory bread(block 1285) failed [ 281.474581][T11946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2524'. [ 281.483963][T11944] FAT-fs (loop4): Directory bread(block 1286) failed [ 281.493415][T11944] FAT-fs (loop4): Directory bread(block 1287) failed [ 281.519672][T11948] loop0: detected capacity change from 0 to 512 [ 281.526975][T11944] FAT-fs (loop4): Directory bread(block 1288) failed [ 281.548241][T11948] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 281.573392][T11948] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.2525: iget: bad i_size value: 12154757448730 [ 281.596791][T11948] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.603463][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 281.613623][T11948] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2525: couldn't read orphan inode 13 (err -117) [ 281.619379][ C1] EXT4-fs (loop0): initial error at time 1771368591: ext4_orphan_get:1391: inode 13 [ 281.631556][T11948] loop0: lost filesystem error report for type 5 error -117 [ 281.640633][ C1] EXT4-fs (loop0): last error at time 1771368591: ext4_orphan_get:1391: inode 13 [ 281.663955][T11948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.699650][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.777060][T11951] lo speed is unknown, defaulting to 1000 [ 282.009903][T11959] netlink: 'syz.0.2529': attribute type 11 has an invalid length. [ 282.033242][T11959] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2529'. [ 282.106569][T11964] loop0: detected capacity change from 0 to 4096 [ 282.112409][ T28] kauditd_printk_skb: 187 callbacks suppressed [ 282.112426][ T28] audit: type=1400 audit(1771368592.355:11125): avc: denied { associate } for pid=11956 comm="syz.6.2528" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 282.115589][T11964] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.170234][T11964] EXT4-fs: test_dummy_encryption option not supported [ 282.182789][T11967] lo speed is unknown, defaulting to 1000 [ 282.200503][ T28] audit: type=1326 audit(1771368592.445:11126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.261059][ T28] audit: type=1326 audit(1771368592.475:11127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.286468][ T28] audit: type=1326 audit(1771368592.475:11128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.310936][ T28] audit: type=1326 audit(1771368592.475:11129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.335429][ T28] audit: type=1326 audit(1771368592.475:11130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.360320][ T28] audit: type=1326 audit(1771368592.475:11131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.384806][ T28] audit: type=1326 audit(1771368592.475:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.409398][ T28] audit: type=1326 audit(1771368592.475:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.434136][ T28] audit: type=1326 audit(1771368592.475:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11969 comm="syz.6.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 282.622561][T11981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2535'. [ 282.659872][T11983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.226534][T11993] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 283.242646][T11993] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2541: bg 0: block 4: invalid block bitmap [ 283.255656][T11993] loop6: lost filesystem error report for type 5 error -117 [ 283.256144][T11993] EXT4-fs (loop6): 1 truncate cleaned up [ 283.263569][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 283.263587][ C1] EXT4-fs (loop6): initial error at time 1771368593: ext4_validate_block_bitmap:432 [ 283.263611][ C1] EXT4-fs (loop6): last error at time 1771368593: ext4_validate_block_bitmap:432 [ 283.294893][T11993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.318100][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.419358][T12011] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.439976][T12011] EXT4-fs: test_dummy_encryption option not supported [ 283.556495][T12026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2547'. [ 283.770739][T12045] FAT-fs (loop0): Directory bread(block 64) failed [ 283.778144][T12045] FAT-fs (loop0): Directory bread(block 65) failed [ 283.785033][T12045] FAT-fs (loop0): Directory bread(block 66) failed [ 283.792105][T12045] FAT-fs (loop0): Directory bread(block 67) failed [ 283.798888][T12045] FAT-fs (loop0): Directory bread(block 68) failed [ 283.806463][T12045] FAT-fs (loop0): Directory bread(block 69) failed [ 283.813244][T12045] FAT-fs (loop0): Directory bread(block 70) failed [ 283.819872][T12045] FAT-fs (loop0): Directory bread(block 71) failed [ 283.826679][T12045] FAT-fs (loop0): Directory bread(block 72) failed [ 283.833738][T12045] FAT-fs (loop0): Directory bread(block 73) failed [ 283.902152][ T3312] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 283.911518][ T3312] FAT-fs (loop0): Filesystem has been set read-only [ 283.983575][ T406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.062759][ T406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.090105][T12050] lo speed is unknown, defaulting to 1000 [ 284.123444][ T406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.159013][T12050] chnl_net:caif_netlink_parms(): no params data found [ 284.188464][ T406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.218861][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.226645][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.235147][T12050] bridge_slave_0: entered allmulticast mode [ 284.242870][T12050] bridge_slave_0: entered promiscuous mode [ 284.250335][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.264218][T12075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2558'. [ 284.273599][T11933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.277951][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.289897][T12050] bridge_slave_1: entered allmulticast mode [ 284.297206][T12050] bridge_slave_1: entered promiscuous mode [ 284.329970][T12050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.343038][T12050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.375242][ T3404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 284.376283][T12050] team0: Port device team_slave_0 added [ 284.390988][T12050] team0: Port device team_slave_1 added [ 284.393159][ T3404] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.408480][T12050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.416675][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.477602][T12050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.492451][T12050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.501950][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.535814][T12050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.571429][ T406] bridge_slave_1: left allmulticast mode [ 284.583216][ T406] bridge_slave_1: left promiscuous mode [ 284.599394][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.638732][T12094] set_capacity_and_notify: 4 callbacks suppressed [ 284.638750][T12094] loop6: detected capacity change from 0 to 512 [ 284.652579][ T406] bridge_slave_0: left allmulticast mode [ 284.658243][ T406] bridge_slave_0: left promiscuous mode [ 284.668480][T12094] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 284.679501][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.697871][T12094] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2564: bg 0: block 4: invalid block bitmap [ 284.725343][T12094] loop6: lost filesystem error report for type 5 error -117 [ 284.726258][T12094] EXT4-fs (loop6): 1 truncate cleaned up [ 284.733782][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 284.733803][ C1] EXT4-fs (loop6): initial error at time 1771368594: ext4_validate_block_bitmap:432 [ 284.733825][ C1] EXT4-fs (loop6): last error at time 1771368594: ext4_validate_block_bitmap:432 [ 284.775095][T12094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.811815][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.831681][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 284.842342][T12105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2566'. [ 284.885106][T12115] siw: device registration error -23 [ 284.912627][ T406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.922822][ T406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.932352][ T406] bond0 (unregistering): Released all slaves [ 284.940084][ T406] bond1 (unregistering): Released all slaves [ 284.976236][T12102] lo speed is unknown, defaulting to 1000 [ 284.984948][T12050] hsr_slave_0: entered promiscuous mode [ 284.994724][T12050] hsr_slave_1: entered promiscuous mode [ 285.003049][T12050] debugfs: 'hsr0' already exists in 'hsr' [ 285.009935][T12050] Cannot create hsr debugfs directory [ 285.019510][ T406] tipc: Left network mode [ 285.043020][ T406] hsr_slave_0: left promiscuous mode [ 285.055416][ T406] hsr_slave_1: left promiscuous mode [ 285.062491][ T406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.071829][ T406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.085806][ T406] team0 (unregistering): Port device batadv2 removed [ 285.129982][ T406] team0 (unregistering): Port device team_slave_1 removed [ 285.144359][ T406] team0 (unregistering): Port device team_slave_0 removed [ 285.319154][T12127] wireguard0: entered promiscuous mode [ 285.325022][T12127] wireguard0: entered allmulticast mode [ 287.680507][ T28] kauditd_printk_skb: 1414 callbacks suppressed [ 287.680593][ T28] audit: type=1326 audit(1771368597.939:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.711871][ T28] audit: type=1326 audit(1771368597.939:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.737175][ T28] audit: type=1326 audit(1771368597.939:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.761105][ T28] audit: type=1326 audit(1771368597.939:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.785589][ T28] audit: type=1326 audit(1771368597.939:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.810410][ T28] audit: type=1326 audit(1771368597.939:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.834630][ T28] audit: type=1326 audit(1771368597.939:12555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.859800][T12107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.868680][ T28] audit: type=1326 audit(1771368597.939:12556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.896498][T12050] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.920750][ T28] audit: type=1326 audit(1771368597.939:12557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.951213][T12050] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.954732][ T28] audit: type=1326 audit(1771368597.939:12558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12147 comm="syz.1.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8058fc629 code=0x7ffc0000 [ 287.999225][T12050] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 288.013730][T12050] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.096207][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.110521][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.142832][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.150216][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.180153][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.187678][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.273042][T12050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.454370][T12050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.660369][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.694630][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.784848][T12050] veth0_vlan: entered promiscuous mode [ 288.804189][T12050] veth1_vlan: entered promiscuous mode [ 288.840011][T12050] veth0_macvtap: entered promiscuous mode [ 288.856221][T12050] veth1_macvtap: entered promiscuous mode [ 288.897252][T12050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.920505][T12050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.946538][T10704] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.977476][T10704] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.999960][T10704] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.027294][T10704] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.043031][T12251] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2590'. [ 289.149433][T12265] bond0: entered promiscuous mode [ 289.160276][T12265] batadv_slave_0: entered promiscuous mode [ 289.275829][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.283382][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.305213][T12272] loop3: detected capacity change from 0 to 1024 [ 289.329735][T12272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.407343][T12285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1547 sclass=netlink_tcpdiag_socket pid=12285 comm=syz.3.2594 [ 289.421852][T12284] xt_hashlimit: size too large, truncated to 1048576 [ 289.429884][T12269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.440304][T12269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.458799][T12288] loop7: detected capacity change from 0 to 164 [ 289.601807][ T1709] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.637980][ T1709] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.667648][ T1709] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.707290][ T1709] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.752345][T12281] lo speed is unknown, defaulting to 1000 [ 289.839439][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.355456][T12324] loop3: detected capacity change from 0 to 512 [ 290.363461][T12324] EXT4-fs: Mount option(s) incompatible with ext2 [ 290.497818][T12281] chnl_net:caif_netlink_parms(): no params data found [ 290.509425][ T1709] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.617041][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.654739][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 290.667762][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.702909][ T1709] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.780315][ T1709] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.823542][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.838653][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.849472][T12281] bridge_slave_0: entered allmulticast mode [ 290.858797][T12281] bridge_slave_0: entered promiscuous mode [ 290.871727][ T1709] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.883572][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.904613][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.914600][T12281] bridge_slave_1: entered allmulticast mode [ 290.924000][T12281] bridge_slave_1: entered promiscuous mode [ 290.929643][T12370] xt_hashlimit: size too large, truncated to 1048576 [ 290.937825][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2611'. [ 290.981064][T12368] loop7: detected capacity change from 0 to 512 [ 291.019176][T12368] EXT4-fs (loop7): 1 truncate cleaned up [ 291.031924][T12368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.059060][T12050] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.071675][ T1709] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 291.147585][ T1709] bond0 (unregistering): left promiscuous mode [ 291.156556][ T1709] bond0 (unregistering): Released all slaves [ 291.164301][ T1709] bond1 (unregistering): Released all slaves [ 291.173289][ T1709] bond2 (unregistering): Released all slaves [ 291.182312][ T1709] bond3 (unregistering): Released all slaves [ 291.198672][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.230394][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.266372][T12281] team0: Port device team_slave_0 added [ 291.279032][T12281] team0: Port device team_slave_1 added [ 291.339850][ T1709] batadv_slave_0: left promiscuous mode [ 291.376845][ T1709] hsr_slave_0: left promiscuous mode [ 291.392219][ T1709] hsr_slave_1: left promiscuous mode [ 291.644468][T12413] sctp: [Deprecated]: syz.7.2620 (pid 12413) Use of int in maxseg socket option. [ 291.644468][T12413] Use struct sctp_assoc_value instead [ 291.679810][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.694308][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.730669][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.777135][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.795268][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.864062][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.947535][T12281] hsr_slave_0: entered promiscuous mode [ 291.960737][T12281] hsr_slave_1: entered promiscuous mode [ 291.986231][T12281] debugfs: 'hsr0' already exists in 'hsr' [ 292.015722][T12281] Cannot create hsr debugfs directory [ 292.051141][T12440] FAULT_INJECTION: forcing a failure. [ 292.051141][T12440] name failslab, interval 1, probability 0, space 0, times 0 [ 292.083228][T12440] CPU: 0 UID: 0 PID: 12440 Comm: syz.4.2627 Not tainted syzkaller #0 PREEMPT(full) [ 292.083263][T12440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.083313][T12440] Call Trace: [ 292.083321][T12440] [ 292.083329][T12440] __dump_stack+0x1d/0x30 [ 292.083358][T12440] dump_stack_lvl+0x95/0xd0 [ 292.083460][T12440] dump_stack+0x15/0x1b [ 292.083546][T12440] should_fail_ex+0x263/0x280 [ 292.083583][T12440] should_failslab+0x8c/0xb0 [ 292.083655][T12440] __kmalloc_noprof+0xb8/0x4e0 [ 292.083677][T12440] ? bpf_ctx_init+0x87/0x160 [ 292.083714][T12440] bpf_ctx_init+0x87/0x160 [ 292.083770][T12440] bpf_prog_test_run_skb+0x212/0xef0 [ 292.083870][T12440] ? __fget_files+0x184/0x1c0 [ 292.083893][T12440] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 292.083926][T12440] bpf_prog_test_run+0x204/0x340 [ 292.083946][T12440] __sys_bpf+0x52e/0x7e0 [ 292.084016][T12440] __x64_sys_bpf+0x41/0x50 [ 292.084042][T12440] x64_sys_call+0x10cb/0x3020 [ 292.084104][T12440] do_syscall_64+0x12c/0x370 [ 292.084141][T12440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.084164][T12440] RIP: 0033:0x7f4a503fc629 [ 292.084180][T12440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.084305][T12440] RSP: 002b:00007f4a4ee4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.084330][T12440] RAX: ffffffffffffffda RBX: 00007f4a50675fa0 RCX: 00007f4a503fc629 [ 292.084347][T12440] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 292.084425][T12440] RBP: 00007f4a4ee4f090 R08: 0000000000000000 R09: 0000000000000000 [ 292.084441][T12440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.084455][T12440] R13: 00007f4a50676038 R14: 00007f4a50675fa0 R15: 00007fff154e53b8 [ 292.084477][T12440] [ 292.360273][T12450] loop6: detected capacity change from 0 to 256 [ 292.379371][T12450] FAT-fs (loop6): Directory bread(block 1285) failed [ 292.395677][T12450] FAT-fs (loop6): Directory bread(block 1286) failed [ 292.407528][T12450] FAT-fs (loop6): Directory bread(block 1287) failed [ 292.432353][T12457] loop3: detected capacity change from 0 to 1024 [ 292.441151][T12450] FAT-fs (loop6): Directory bread(block 1288) failed [ 292.450242][T12457] EXT4-fs (loop3): unsupported descriptor size 1344 [ 292.685621][ T28] kauditd_printk_skb: 1031 callbacks suppressed [ 292.685699][ T28] audit: type=1326 audit(1771368858.953:13590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 292.770241][ T28] audit: type=1326 audit(1771368858.983:13591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 292.847871][ T28] audit: type=1326 audit(1771368858.983:13592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 292.902065][ T28] audit: type=1326 audit(1771368858.993:13593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 292.932969][T12281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.959024][ T28] audit: type=1326 audit(1771368858.993:13594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a503fc629 code=0x7ffc0000 [ 292.986577][T12281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.995783][T12281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.021852][T12281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.032987][ T28] audit: type=1326 audit(1771368858.993:13595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a503fc629 code=0x7ffc0000 [ 293.082505][ T28] audit: type=1326 audit(1771368859.003:13596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 293.131180][ T28] audit: type=1326 audit(1771368859.013:13597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 293.186711][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.197000][ T28] audit: type=1326 audit(1771368859.013:13598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 293.214919][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.253148][ T1709] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.260437][ T1709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.277405][ T28] audit: type=1326 audit(1771368859.023:13599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4a503bcece code=0x7ffc0000 [ 293.287123][T12281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.369577][T12281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.412519][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.419808][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.471905][T12517] lo speed is unknown, defaulting to 1000 [ 293.574125][T12527] loop6: detected capacity change from 0 to 4096 [ 293.575630][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.592024][T12527] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.599536][T12527] EXT4-fs: test_dummy_encryption option not supported [ 293.672131][T12541] netlink: 'syz.4.2639': attribute type 4 has an invalid length. [ 293.742967][T12281] veth0_vlan: entered promiscuous mode [ 293.830471][T12549] loop3: detected capacity change from 0 to 256 [ 293.863253][T12549] FAT-fs (loop3): Directory bread(block 1285) failed [ 293.885934][T12549] FAT-fs (loop3): Directory bread(block 1286) failed [ 293.916383][T12549] FAT-fs (loop3): Directory bread(block 1287) failed [ 293.933700][T12549] FAT-fs (loop3): Directory bread(block 1288) failed [ 293.995703][T12281] veth1_vlan: entered promiscuous mode [ 294.058093][T12281] veth0_macvtap: entered promiscuous mode [ 294.095600][T12281] veth1_macvtap: entered promiscuous mode [ 294.123115][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.158562][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.203687][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.208285][T12562] loop7: detected capacity change from 0 to 4096 [ 294.216200][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.251232][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.261595][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.263319][T12562] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.313268][T12562] EXT4-fs: test_dummy_encryption option not supported [ 294.376659][T12569] vlan2: entered promiscuous mode [ 294.390522][T12569] hsr0: entered promiscuous mode [ 294.429525][T12570] loop6: detected capacity change from 0 to 512 [ 294.447908][T12570] msdos: Unknown parameter 'nodotsremount-ro' [ 295.438332][T12597] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2652'. [ 295.669109][T12533] Process accounting resumed [ 296.245776][T12603] lo speed is unknown, defaulting to 1000 [ 296.275635][T12603] loop7: detected capacity change from 0 to 164 [ 296.283326][T12603] isofs_fill_super: root inode is not a directory. Corrupted media? [ 296.292578][T12603] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2655'. [ 296.403367][T12607] loop3: detected capacity change from 0 to 512 [ 296.416196][T12607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 296.458708][T12607] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2657: bg 0: block 4: invalid block bitmap [ 296.491737][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2658'. [ 296.500934][T12607] loop3: lost filesystem error report for type 5 error -117 [ 296.501395][T12607] EXT4-fs (loop3): 1 truncate cleaned up [ 296.508820][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 296.508840][ C1] EXT4-fs (loop3): initial error at time 1771368862: ext4_validate_block_bitmap:432 [ 296.508861][ C1] EXT4-fs (loop3): last error at time 1771368862: ext4_validate_block_bitmap:432 [ 296.573381][T12607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.594784][T12612] bond1: Removing last arp target with arp_interval on [ 296.602337][T12612] bond1: entered promiscuous mode [ 296.607699][T12612] bond1: entered allmulticast mode [ 296.613381][T12612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.742898][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.290084][T12646] loop3: detected capacity change from 0 to 512 [ 297.322104][T12646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.350205][T12646] ext4 filesystem being mounted at /414/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.471927][T12661] lo speed is unknown, defaulting to 1000 [ 297.508473][T12660] syzkaller1: entered promiscuous mode [ 297.514292][T12660] syzkaller1: entered allmulticast mode [ 297.524732][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.581834][T12664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12664 comm=syz.6.2675 [ 297.799928][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2676'. [ 297.966278][ T28] kauditd_printk_skb: 881 callbacks suppressed [ 297.966297][ T28] audit: type=1400 audit(1771368864.265:14481): avc: denied { read } for pid=12669 comm="syz.6.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.019856][T12679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.034552][T12679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.128960][T12674] loop6: detected capacity change from 0 to 512 [ 298.206910][T12674] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2676: couldn't read orphan inode 26 (err -116) [ 298.262200][T12674] loop6: lost filesystem error report for type 5 error -116 [ 298.264687][T12674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.344341][T12674] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.435806][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.568620][T12692] loop6: detected capacity change from 0 to 512 [ 298.594056][T12692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.611027][T12692] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.681297][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.707073][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2686'. [ 298.865884][T12712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.881302][T12712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.925411][T12728] loop3: detected capacity change from 0 to 1024 [ 298.936647][T12728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.945990][T12728] EXT4-fs (loop3): stripe (3053) is not aligned with cluster size (16), stripe is disabled [ 298.973938][T12728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 298.995253][T12728] System zones: 0-1, 3-36 [ 299.012394][T12728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.067595][T12740] netlink: 'syz.4.2700': attribute type 13 has an invalid length. [ 299.092459][T12740] erspan0: refused to change device tx_queue_len [ 299.100171][T12740] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 299.139595][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.284924][T12758] lo: entered allmulticast mode [ 299.290173][T12758] lo: left allmulticast mode [ 299.296086][T12758] 9p: Bad value for 'rfdno' [ 299.299977][ T28] audit: type=1400 audit(1771368865.615:14482): avc: denied { ioctl } for pid=12757 comm="syz.3.2705" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39059 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.305331][T12758] loop3: detected capacity change from 0 to 512 [ 299.336165][ T28] audit: type=1400 audit(1771368865.615:14483): avc: denied { open } for pid=12757 comm="syz.3.2705" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.375830][T12758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2705: ea_inode with extended attributes [ 299.389226][T12758] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 299.391027][T12758] EXT4-fs (loop3): Remounting filesystem read-only [ 299.400456][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 299.400484][ C0] EXT4-fs (loop3): initial error at time 1771368865: ext4_xattr_inode_iget:441: inode 11 [ 299.400518][ C0] EXT4-fs (loop3): last error at time 1771368865: ext4_xattr_inode_iget:441: inode 11 [ 299.408863][T12762] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2706'. [ 299.463246][T12758] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 299.474915][T12758] EXT4-fs (loop3): 1 orphan inode deleted [ 299.482932][T12758] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.731966][T12765] lo speed is unknown, defaulting to 1000 [ 299.988190][ T5337] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 300.010946][ T28] audit: type=1400 audit(1771368866.290:14484): avc: denied { ioctl } for pid=12761 comm="syz.7.2706" path="socket:[39088]" dev="sockfs" ino=39088 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.077610][T12769] syzkaller0: entered promiscuous mode [ 300.090975][T12769] syzkaller0: entered allmulticast mode [ 300.171466][ T28] audit: type=1326 audit(1771368866.492:14485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 300.224759][ T28] audit: type=1326 audit(1771368866.492:14486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 300.273482][ T28] audit: type=1326 audit(1771368866.492:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 300.325487][ T28] audit: type=1326 audit(1771368866.492:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 300.394744][ T28] audit: type=1326 audit(1771368866.492:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 300.454874][ T28] audit: type=1326 audit(1771368866.492:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 300.575495][T12780] 8021q: VLANs not supported on ip6gre0 [ 300.662334][T12802] FAULT_INJECTION: forcing a failure. [ 300.662334][T12802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.692488][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.6.2719 Not tainted syzkaller #0 PREEMPT(full) [ 300.692520][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.692531][T12802] Call Trace: [ 300.692538][T12802] [ 300.692548][T12802] __dump_stack+0x1d/0x30 [ 300.692618][T12802] dump_stack_lvl+0x95/0xd0 [ 300.692640][T12802] dump_stack+0x15/0x1b [ 300.692709][T12802] should_fail_ex+0x263/0x280 [ 300.692732][T12802] should_fail+0xb/0x20 [ 300.692809][T12802] should_fail_usercopy+0x1a/0x20 [ 300.692835][T12802] _copy_to_user+0x20/0xa0 [ 300.692863][T12802] simple_read_from_buffer+0xb5/0x130 [ 300.692975][T12802] proc_fail_nth_read+0x10e/0x150 [ 300.693005][T12802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.693117][T12802] vfs_read+0x1ab/0x7f0 [ 300.693148][T12802] ? __rcu_read_unlock+0x4e/0x70 [ 300.693278][T12802] ? __fget_files+0x184/0x1c0 [ 300.693301][T12802] ? mutex_lock+0x57/0x90 [ 300.693331][T12802] ksys_read+0xdc/0x1a0 [ 300.693363][T12802] __x64_sys_read+0x40/0x50 [ 300.693410][T12802] x64_sys_call+0x2886/0x3020 [ 300.693471][T12802] do_syscall_64+0x12c/0x370 [ 300.693496][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.693519][T12802] RIP: 0033:0x7f8f8fd5cece [ 300.693545][T12802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.693565][T12802] RSP: 002b:00007f8f8e7f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.693589][T12802] RAX: ffffffffffffffda RBX: 00007f8f8e7f76c0 RCX: 00007f8f8fd5cece [ 300.693650][T12802] RDX: 000000000000000f RSI: 00007f8f8e7f70a0 RDI: 0000000000000004 [ 300.693665][T12802] RBP: 00007f8f8e7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 300.693682][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.693697][T12802] R13: 00007f8f90016038 R14: 00007f8f90015fa0 R15: 00007ffd1bf175c8 [ 300.693717][T12802] [ 300.981700][T12810] netlink: 'syz.1.2723': attribute type 25 has an invalid length. [ 300.990571][T12810] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 300.998634][T12810] bridge0: port 1(bridge_slave_0) entered learning state [ 301.733340][T12851] tun0: tun_chr_ioctl cmd 1074812118 [ 302.297842][T12882] lo speed is unknown, defaulting to 1000 [ 302.347186][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2740'. [ 303.956956][T12812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.023941][T12924] loop3: detected capacity change from 0 to 736 [ 304.029119][ T28] kauditd_printk_skb: 278 callbacks suppressed [ 304.029136][ T28] audit: type=1400 audit(1771368870.370:14769): avc: denied { getopt } for pid=12927 comm="syz.1.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.059827][T12928] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2746'. [ 304.102778][ T28] audit: type=1400 audit(1771368870.440:14770): avc: denied { getopt } for pid=12927 comm="syz.1.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.148757][T12941] loop4: detected capacity change from 0 to 128 [ 304.167394][ T28] audit: type=1326 audit(1771368870.511:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.208636][ T28] audit: type=1326 audit(1771368870.511:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.243337][ T28] audit: type=1326 audit(1771368870.511:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.273185][ T28] audit: type=1326 audit(1771368870.511:14774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.297584][ T28] audit: type=1326 audit(1771368870.511:14775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.322169][T12949] loop3: detected capacity change from 0 to 1024 [ 304.322428][ T28] audit: type=1326 audit(1771368870.511:14776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.355313][ T28] audit: type=1326 audit(1771368870.511:14777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.379253][ T28] audit: type=1326 audit(1771368870.511:14778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12938 comm="syz.1.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9135f6c629 code=0x7ffc0000 [ 304.391116][T12949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 304.420576][T12949] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.441366][T12949] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.2754: lblock 3 mapped to illegal pblock 3 (length 3) [ 304.477552][T12949] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 304.490634][T12949] EXT4-fs (loop3): This should not happen!! Data will be lost [ 304.490634][T12949] [ 304.526579][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2754'. [ 304.572507][T12963] FAULT_INJECTION: forcing a failure. [ 304.572507][T12963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.590778][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.7.2757 Not tainted syzkaller #0 PREEMPT(full) [ 304.590806][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.590849][T12963] Call Trace: [ 304.590858][T12963] [ 304.590865][T12963] __dump_stack+0x1d/0x30 [ 304.591000][T12963] dump_stack_lvl+0x95/0xd0 [ 304.591033][T12963] dump_stack+0x15/0x1b [ 304.591054][T12963] should_fail_ex+0x263/0x280 [ 304.591103][T12963] should_fail+0xb/0x20 [ 304.591122][T12963] should_fail_usercopy+0x1a/0x20 [ 304.591237][T12963] _copy_from_user+0x1c/0xb0 [ 304.591285][T12963] __sys_bpf+0x183/0x7e0 [ 304.591326][T12963] __x64_sys_bpf+0x41/0x50 [ 304.591359][T12963] x64_sys_call+0x10cb/0x3020 [ 304.591401][T12963] do_syscall_64+0x12c/0x370 [ 304.591424][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.591448][T12963] RIP: 0033:0x7f27fc42c629 [ 304.591466][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.591488][T12963] RSP: 002b:00007f27fae7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.591588][T12963] RAX: ffffffffffffffda RBX: 00007f27fc6a5fa0 RCX: 00007f27fc42c629 [ 304.591605][T12963] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 0000000000000000 [ 304.591620][T12963] RBP: 00007f27fae7f090 R08: 0000000000000000 R09: 0000000000000000 [ 304.591677][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.591690][T12963] R13: 00007f27fc6a6038 R14: 00007f27fc6a5fa0 R15: 00007ffff59dcee8 [ 304.591710][T12963] [ 304.767219][T12321] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 4: comm kworker/u8:9: lblock 4 mapped to illegal pblock 4 (length 2) [ 304.781917][T12321] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 304.795488][T12321] EXT4-fs (loop3): This should not happen!! Data will be lost [ 304.795488][T12321] [ 304.806860][T10704] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 304.821521][T10704] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 304.834000][T10704] EXT4-fs (loop3): This should not happen!! Data will be lost [ 304.834000][T10704] [ 304.844833][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 304.934082][T12975] loop6: detected capacity change from 0 to 736 [ 304.942256][T12979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.953741][T12979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.320485][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 305.719844][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2770'. [ 305.804761][T13006] loop3: detected capacity change from 0 to 512 [ 305.819113][T13006] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.830349][T13006] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 305.845710][T13006] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2771: bg 0: block 248: padding at end of block bitmap is not set [ 305.860319][T13006] loop3: lost filesystem error report for type 5 error -117 [ 305.860592][T13006] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.2771: Failed to acquire dquot type 1 [ 305.868048][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 305.868071][ C1] EXT4-fs (loop3): last error at time 1771368872: ext4_validate_block_bitmap:441 [ 305.895238][T13006] loop3: lost filesystem error report for type 5 error -117 [ 305.896674][T13006] EXT4-fs (loop3): 1 truncate cleaned up [ 305.910428][T13006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 305.972302][T13015] loop6: detected capacity change from 0 to 512 [ 306.001013][T13015] EXT4-fs (loop6): 1 truncate cleaned up [ 306.010107][T13015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.029737][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'. [ 306.041757][T13019] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.073009][T13021] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.2771: deleted inode referenced: 12 [ 306.106781][T13022] netlink: 4712 bytes leftover after parsing attributes in process `syz.7.2777'. [ 306.125090][T13019] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.180308][T13022] loop7: detected capacity change from 0 to 8192 [ 306.195616][T13029] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.2775: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 306.221070][T13019] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.235551][T13022] loop7: p1 < > p2 p4 < p5 > [ 306.239594][T13028] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.2771: Failed to acquire dquot type 1 [ 306.246294][T13022] loop7: partition table partially beyond EOD, truncated [ 306.263414][T13022] loop7: p1 start 134217728 is beyond EOD, truncated [ 306.270208][T13022] loop7: p2 size 591360 extends beyond EOD, truncated [ 306.278580][T13022] loop7: p5 size 591360 extends beyond EOD, truncated [ 306.299217][T13035] loop4: detected capacity change from 0 to 764 [ 306.319987][T13019] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.414112][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 306.433175][T10704] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.448772][T10704] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.460834][T10704] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.475546][T10704] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.501058][T13044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2782'. [ 306.601355][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 306.823257][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.918259][T13066] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2789'. [ 306.931858][T13066] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2789'. [ 307.222346][T13083] syzkaller0: entered promiscuous mode [ 307.230242][T13083] syzkaller0: entered allmulticast mode [ 307.468989][T13096] loop7: detected capacity change from 0 to 128 [ 307.486864][T13096] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 307.501990][T13096] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.534393][T12050] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.737905][T13107] loop6: detected capacity change from 0 to 4096 [ 307.757611][T13107] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.769936][T13107] EXT4-fs: test_dummy_encryption option not supported [ 308.357768][T13139] __nla_validate_parse: 1 callbacks suppressed [ 308.357789][T13139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2814'. [ 308.378717][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.629855][T13148] EXT4-fs: Ignoring removed oldalloc option [ 308.655839][T13148] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.2816: Parent and EA inode have the same ino 15 [ 308.686648][T13148] loop6: lost filesystem error report for type 5 error -117 [ 308.697473][T13148] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.2816: Parent and EA inode have the same ino 15 [ 308.717451][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 308.717476][ C0] EXT4-fs (loop6): initial error at time 1771368875: ext4_xattr_inode_iget:437 [ 308.717506][ C0] EXT4-fs (loop6): last error at time 1771368875: ext4_xattr_inode_iget:437 [ 308.749344][T13148] loop6: lost filesystem error report for type 5 error -117 [ 308.749683][T13148] EXT4-fs (loop6): 1 orphan inode deleted [ 308.763553][T13148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.893405][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.298169][ T28] kauditd_printk_skb: 523 callbacks suppressed [ 309.298186][ T28] audit: type=1326 audit(1771368875.676:15298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.331819][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2825'. [ 309.351594][ T28] audit: type=1326 audit(1771368875.676:15299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.384841][ T28] audit: type=1326 audit(1771368875.676:15300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.409384][ T28] audit: type=1326 audit(1771368875.676:15301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.421772][T13181] vhci_hcd vhci_hcd.0: invalid port number 133 [ 309.452856][ T28] audit: type=1326 audit(1771368875.676:15302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.478229][T13181] vhci_hcd vhci_hcd.0: default hub control req: 1f05 v01ff i0085 l0 [ 309.495146][ T28] audit: type=1326 audit(1771368875.676:15303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.520603][ T28] audit: type=1326 audit(1771368875.676:15304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.545765][ T28] audit: type=1326 audit(1771368875.676:15305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.571422][ T28] audit: type=1326 audit(1771368875.676:15306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.597060][ T28] audit: type=1326 audit(1771368875.676:15307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.6.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f8fd9c629 code=0x7ffc0000 [ 309.644866][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2832'. [ 309.686133][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 309.703070][T13191] macvlan3: entered promiscuous mode [ 309.743253][T13204] set_capacity_and_notify: 5 callbacks suppressed [ 309.743273][T13204] loop3: detected capacity change from 0 to 736 [ 309.776783][T13207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2838'. [ 309.879277][T13212] Failed to initialize the IGMP autojoin socket (err -2) [ 310.094667][T13223] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2844'. [ 310.131218][T13225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2845'. [ 310.143808][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2845'. [ 310.153520][T13225] netlink: 'syz.6.2845': attribute type 5 has an invalid length. [ 310.168152][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2845'. [ 310.190491][T13225] geneve2: entered promiscuous mode [ 310.200859][T13225] geneve2: entered allmulticast mode [ 310.388937][T13236] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 310.407731][T13232] bond0: (slave dummy0): Releasing backup interface [ 310.422146][T13239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2851'. [ 310.463986][T13232] batman_adv: batadv0: Adding interface: dummy0 [ 310.473804][T13232] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.502167][T13232] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 311.018796][T13280] loop3: detected capacity change from 0 to 512 [ 311.036388][T13280] EXT4-fs: Ignoring removed oldalloc option [ 311.070975][T13280] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2869: Parent and EA inode have the same ino 15 [ 311.086258][T13283] loop6: detected capacity change from 0 to 128 [ 311.096269][T13280] loop3: lost filesystem error report for type 5 error -117 [ 311.099915][T13280] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2869: Parent and EA inode have the same ino 15 [ 311.107366][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 311.107387][ C0] EXT4-fs (loop3): initial error at time 1771368877: ext4_xattr_inode_iget:437 [ 311.107441][ C0] EXT4-fs (loop3): last error at time 1771368877: ext4_xattr_inode_iget:437 [ 311.123971][T13283] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 311.126891][T13280] loop3: lost filesystem error report for type 5 error -117 [ 311.156022][T13280] EXT4-fs (loop3): 1 orphan inode deleted [ 311.179700][T13280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.239449][ T30] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 311.296044][T13298] syzkaller0: entered promiscuous mode [ 311.309335][T13298] syzkaller0: entered allmulticast mode [ 311.647016][T13314] netlink: 'syz.1.2881': attribute type 30 has an invalid length. [ 311.701770][T13320] 9p: Bad value for 'rfdno' [ 311.744124][T13322] loop6: detected capacity change from 0 to 128 [ 311.837847][T13332] loop4: detected capacity change from 0 to 736 [ 311.868480][T13338] FAULT_INJECTION: forcing a failure. [ 311.868480][T13338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.900429][T13338] CPU: 1 UID: 0 PID: 13338 Comm: syz.6.2892 Not tainted syzkaller #0 PREEMPT(full) [ 311.900470][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.900505][T13338] Call Trace: [ 311.900512][T13338] [ 311.900519][T13338] __dump_stack+0x1d/0x30 [ 311.900549][T13338] dump_stack_lvl+0x95/0xd0 [ 311.900649][T13338] dump_stack+0x15/0x1b [ 311.900672][T13338] should_fail_ex+0x263/0x280 [ 311.900732][T13338] should_fail+0xb/0x20 [ 311.900754][T13338] should_fail_usercopy+0x1a/0x20 [ 311.900782][T13338] _copy_from_user+0x1c/0xb0 [ 311.900812][T13338] ___sys_sendmsg+0xc1/0x1e0 [ 311.900935][T13338] __x64_sys_sendmsg+0xd4/0x160 [ 311.900970][T13338] x64_sys_call+0x194c/0x3020 [ 311.901095][T13338] do_syscall_64+0x12c/0x370 [ 311.901119][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.901142][T13338] RIP: 0033:0x7f8f8fd9c629 [ 311.901160][T13338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.901180][T13338] RSP: 002b:00007f8f8e7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.901211][T13338] RAX: ffffffffffffffda RBX: 00007f8f90015fa0 RCX: 00007f8f8fd9c629 [ 311.901227][T13338] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 311.901241][T13338] RBP: 00007f8f8e7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 311.901255][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.901268][T13338] R13: 00007f8f90016038 R14: 00007f8f90015fa0 R15: 00007ffd1bf175c8 [ 311.901320][T13338] [ 312.068633][T13336] syzkaller0: entered promiscuous mode [ 312.074381][T13336] syzkaller0: entered allmulticast mode [ 312.275227][T13354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13354 comm=syz.6.2898 [ 312.370026][T13363] loop4: detected capacity change from 0 to 128 [ 312.403168][T13363] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.436216][T13363] ext4 filesystem being mounted at /568/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.441761][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.462675][T13363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13363 comm=syz.4.2903 [ 312.540959][T13364] Failed to initialize the IGMP autojoin socket (err -2) [ 312.548768][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.655089][T13393] cgroup: Unknown subsys name 'func' [ 312.667281][T13391] netlink: 'syz.7.2912': attribute type 1 has an invalid length. [ 312.695601][T13391] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 312.729779][T13391] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 312.750976][T13399] FAULT_INJECTION: forcing a failure. [ 312.750976][T13399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.769525][T13398] loop6: detected capacity change from 0 to 2048 [ 312.784883][T13400] macvlan4: entered promiscuous mode [ 312.785028][T13399] CPU: 0 UID: 0 PID: 13399 Comm: syz.3.2916 Not tainted syzkaller #0 PREEMPT(full) [ 312.785055][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.785068][T13399] Call Trace: [ 312.785074][T13399] [ 312.785135][T13399] __dump_stack+0x1d/0x30 [ 312.785163][T13399] dump_stack_lvl+0x95/0xd0 [ 312.785261][T13399] dump_stack+0x15/0x1b [ 312.785282][T13399] should_fail_ex+0x263/0x280 [ 312.785307][T13399] should_fail+0xb/0x20 [ 312.785327][T13399] should_fail_usercopy+0x1a/0x20 [ 312.785418][T13399] _copy_to_user+0x20/0xa0 [ 312.785446][T13399] simple_read_from_buffer+0xb5/0x130 [ 312.785547][T13399] proc_fail_nth_read+0x10e/0x150 [ 312.785574][T13399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.785599][T13399] vfs_read+0x1ab/0x7f0 [ 312.785625][T13399] ? kfree+0x303/0x380 [ 312.785673][T13399] ? __rcu_read_unlock+0x4e/0x70 [ 312.785693][T13399] ? __fget_files+0x184/0x1c0 [ 312.785714][T13399] ? mutex_lock+0x57/0x90 [ 312.785750][T13399] ksys_read+0xdc/0x1a0 [ 312.785804][T13399] __x64_sys_read+0x40/0x50 [ 312.785895][T13399] x64_sys_call+0x2886/0x3020 [ 312.785921][T13399] do_syscall_64+0x12c/0x370 [ 312.785948][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.785970][T13399] RIP: 0033:0x7f0c4699cece [ 312.785988][T13399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.786066][T13399] RSP: 002b:00007f0c45436fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.786088][T13399] RAX: ffffffffffffffda RBX: 00007f0c454376c0 RCX: 00007f0c4699cece [ 312.786152][T13399] RDX: 000000000000000f RSI: 00007f0c454370a0 RDI: 0000000000000004 [ 312.786166][T13399] RBP: 00007f0c45437090 R08: 0000000000000000 R09: 0000000000000000 [ 312.786179][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.786192][T13399] R13: 00007f0c46c56038 R14: 00007f0c46c55fa0 R15: 00007ffc5c67cd38 [ 312.786211][T13399] [ 312.908435][T13398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.911095][T13400] macvlan4: entered allmulticast mode [ 312.915791][T13405] FAULT_INJECTION: forcing a failure. [ 312.915791][T13405] name failslab, interval 1, probability 0, space 0, times 0 [ 312.936059][T13400] bond2: entered promiscuous mode [ 312.953545][T13398] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.980696][T13400] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 312.993672][T13405] CPU: 0 UID: 0 PID: 13405 Comm: syz.3.2918 Not tainted syzkaller #0 PREEMPT(full) [ 312.993709][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.993722][T13405] Call Trace: [ 312.993729][T13405] [ 312.993738][T13405] __dump_stack+0x1d/0x30 [ 312.993836][T13405] dump_stack_lvl+0x95/0xd0 [ 312.993859][T13405] dump_stack+0x15/0x1b [ 312.993880][T13405] should_fail_ex+0x263/0x280 [ 312.993909][T13405] ? sg_read+0x3cd/0xcb0 [ 312.993936][T13405] should_failslab+0x8c/0xb0 [ 312.993967][T13405] __kmalloc_cache_noprof+0x5f/0x410 [ 312.993990][T13405] sg_read+0x3cd/0xcb0 [ 312.994071][T13405] ? __pfx_sg_read+0x10/0x10 [ 312.994098][T13405] vfs_read+0x1ab/0x7f0 [ 312.994124][T13405] ? __rcu_read_unlock+0x4e/0x70 [ 312.994144][T13405] ? __fget_files+0x184/0x1c0 [ 312.994248][T13405] ksys_read+0xdc/0x1a0 [ 312.994323][T13405] __x64_sys_read+0x40/0x50 [ 312.994350][T13405] x64_sys_call+0x2886/0x3020 [ 312.994436][T13405] do_syscall_64+0x12c/0x370 [ 312.994459][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.994481][T13405] RIP: 0033:0x7f0c469dc629 [ 312.994498][T13405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.994516][T13405] RSP: 002b:00007f0c45437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.994604][T13405] RAX: ffffffffffffffda RBX: 00007f0c46c55fa0 RCX: 00007f0c469dc629 [ 312.994625][T13405] RDX: 000000000000ffd2 RSI: 0000200000000240 RDI: 0000000000000003 [ 312.994639][T13405] RBP: 00007f0c45437090 R08: 0000000000000000 R09: 0000000000000000 [ 312.994652][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.994744][T13405] R13: 00007f0c46c56038 R14: 00007f0c46c55fa0 R15: 00007ffc5c67cd38 [ 312.994763][T13405] [ 313.185409][T13419] tmpfs: Unknown parameter 'context' [ 313.230877][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.240221][T13400] bond2: left promiscuous mode [ 313.273796][T13423] FAULT_INJECTION: forcing a failure. [ 313.273796][T13423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.287591][T13423] CPU: 1 UID: 0 PID: 13423 Comm: syz.1.2923 Not tainted syzkaller #0 PREEMPT(full) [ 313.287621][T13423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.287633][T13423] Call Trace: [ 313.287653][T13423] [ 313.287662][T13423] __dump_stack+0x1d/0x30 [ 313.287691][T13423] dump_stack_lvl+0x95/0xd0 [ 313.287719][T13423] dump_stack+0x15/0x1b [ 313.287742][T13423] should_fail_ex+0x263/0x280 [ 313.287789][T13423] should_fail+0xb/0x20 [ 313.287884][T13423] should_fail_usercopy+0x1a/0x20 [ 313.287913][T13423] _copy_from_iter+0xcf/0xea0 [ 313.287940][T13423] ? __alloc_skb+0x4f6/0x690 [ 313.287963][T13423] ? __alloc_skb+0x200/0x690 [ 313.287985][T13423] netlink_sendmsg+0x4ae/0x6f0 [ 313.288130][T13423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.288163][T13423] ____sys_sendmsg+0x5af/0x600 [ 313.288200][T13423] ___sys_sendmsg+0x195/0x1e0 [ 313.288259][T13423] __x64_sys_sendmsg+0xd4/0x160 [ 313.288294][T13423] x64_sys_call+0x194c/0x3020 [ 313.288330][T13423] do_syscall_64+0x12c/0x370 [ 313.288353][T13423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.288378][T13423] RIP: 0033:0x7f9135f6c629 [ 313.288410][T13423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.288430][T13423] RSP: 002b:00007f91349bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.288453][T13423] RAX: ffffffffffffffda RBX: 00007f91361e5fa0 RCX: 00007f9135f6c629 [ 313.288469][T13423] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 313.288483][T13423] RBP: 00007f91349bf090 R08: 0000000000000000 R09: 0000000000000000 [ 313.288549][T13423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.288562][T13423] R13: 00007f91361e6038 R14: 00007f91361e5fa0 R15: 00007fffcf625878 [ 313.288624][T13423] [ 313.502761][T13427] __nla_validate_parse: 13 callbacks suppressed [ 313.502782][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 313.564950][T13429] netlink: 'syz.3.2927': attribute type 11 has an invalid length. [ 313.608253][T13441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2931'. [ 313.629198][T13441] loop4: detected capacity change from 0 to 512 [ 313.636603][T13441] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 313.686623][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 313.718325][T13461] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2933'. [ 313.748578][T13466] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2934'. [ 314.031584][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2943'. [ 314.166868][T13473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.292916][T13486] syzkaller0: entered promiscuous mode [ 314.298907][T13486] syzkaller0: entered allmulticast mode [ 314.588029][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 314.588111][ T28] audit: type=1326 audit(1771368880.999:15477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.620488][ T28] audit: type=1326 audit(1771368881.039:15478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.647444][ T28] audit: type=1326 audit(1771368881.039:15479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.708360][ T28] audit: type=1326 audit(1771368881.039:15480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.755653][ T28] audit: type=1326 audit(1771368881.039:15481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.780685][ T28] audit: type=1326 audit(1771368881.039:15482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.789980][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2954'. [ 314.805751][ T28] audit: type=1326 audit(1771368881.039:15483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.865081][ T28] audit: type=1326 audit(1771368881.039:15484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.889865][ T28] audit: type=1326 audit(1771368881.039:15485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.915456][ T28] audit: type=1326 audit(1771368881.039:15486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13504 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 314.970184][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2949'. [ 314.988503][T13523] loop4: detected capacity change from 0 to 256 [ 315.003985][T13524] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2956'. [ 315.190530][T13539] loop3: detected capacity change from 0 to 1024 [ 315.223850][T13539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.245781][T13539] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.248590][T13543] Failed to initialize the IGMP autojoin socket (err -2) [ 315.266331][T13539] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2965: corrupted xattr block 128: e_value size too large [ 315.289875][T13546] loop4: detected capacity change from 0 to 512 [ 315.295020][T13539] EXT4-fs (loop3): Remounting filesystem read-only [ 315.302896][T13539] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 315.312209][T13539] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 315.321511][T13539] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 315.364711][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 315.377091][T13546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.445111][T13546] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.599109][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.757903][T13566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2973'. [ 315.758263][T13570] FAULT_INJECTION: forcing a failure. [ 315.758263][T13570] name failslab, interval 1, probability 0, space 0, times 0 [ 315.786749][T13570] CPU: 0 UID: 0 PID: 13570 Comm: syz.6.2975 Not tainted syzkaller #0 PREEMPT(full) [ 315.786844][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.786858][T13570] Call Trace: [ 315.786864][T13570] [ 315.786872][T13570] __dump_stack+0x1d/0x30 [ 315.786955][T13570] dump_stack_lvl+0x95/0xd0 [ 315.786980][T13570] dump_stack+0x15/0x1b [ 315.787002][T13570] should_fail_ex+0x263/0x280 [ 315.787029][T13570] ? alloc_fs_context+0x46/0x580 [ 315.787050][T13570] should_failslab+0x8c/0xb0 [ 315.787249][T13570] __kmalloc_cache_noprof+0x5f/0x410 [ 315.787302][T13570] alloc_fs_context+0x46/0x580 [ 315.787330][T13570] fs_context_for_mount+0x22/0x30 [ 315.787351][T13570] do_new_mount+0xe7/0x8d0 [ 315.787443][T13570] ? security_capable+0x7b/0x90 [ 315.787466][T13570] path_mount+0x4d0/0xbc0 [ 315.787565][T13570] __se_sys_mount+0x28c/0x2e0 [ 315.787587][T13570] ? fput+0x8f/0xc0 [ 315.787614][T13570] __x64_sys_mount+0x67/0x80 [ 315.787649][T13570] x64_sys_call+0x2d61/0x3020 [ 315.787707][T13570] do_syscall_64+0x12c/0x370 [ 315.787775][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.787833][T13570] RIP: 0033:0x7f8f8fd9c629 [ 315.787853][T13570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.787874][T13570] RSP: 002b:00007f8f8e7f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 315.787954][T13570] RAX: ffffffffffffffda RBX: 00007f8f90015fa0 RCX: 00007f8f8fd9c629 [ 315.787971][T13570] RDX: 0000200000000300 RSI: 0000200000000040 RDI: 0000000000000000 [ 315.787985][T13570] RBP: 00007f8f8e7f7090 R08: 00002000000004c0 R09: 0000000000000000 [ 315.788002][T13570] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001 [ 315.788016][T13570] R13: 00007f8f90016038 R14: 00007f8f90015fa0 R15: 00007ffd1bf175c8 [ 315.788099][T13570] [ 316.022575][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.031732][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.298545][T13593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.330141][T13593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.419749][T13614] loop3: detected capacity change from 0 to 512 [ 316.427169][T13614] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 316.437759][T13614] EXT4-fs (loop3): orphan cleanup on readonly fs [ 316.444896][T13614] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.2995: Allocating blocks 41-42 which overlap fs metadata [ 316.458946][T13614] loop3: lost filesystem error report for type 5 error -117 [ 316.459222][T13614] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.2995: Allocating blocks 41-42 which overlap fs metadata [ 316.480729][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 316.480753][ C1] EXT4-fs (loop3): initial error at time 1771368882: ext4_mb_mark_diskspace_used:4224 [ 316.480779][ C1] EXT4-fs (loop3): last error at time 1771368882: ext4_mb_mark_diskspace_used:4224 [ 316.506419][T13614] loop3: lost filesystem error report for type 5 error -117 [ 316.506701][T13614] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.2995: Failed to acquire dquot type 1 [ 316.525536][T13614] loop3: lost filesystem error report for type 5 error -117 [ 316.525875][T13614] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 316.548166][T13614] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.2995: corrupted inode contents [ 316.560272][T13614] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 316.567273][T13614] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #12: comm syz.3.2995: mark_inode_dirty error [ 316.586638][T13624] loop4: detected capacity change from 0 to 512 [ 316.588228][T13614] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 316.594745][T13614] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.2995: corrupted inode contents [ 316.618065][T13614] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 316.618339][T13614] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.2995: mark_inode_dirty error [ 316.623220][T13624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 316.627963][T13614] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 316.647643][T13614] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.2995: corrupted inode contents [ 316.668872][T13614] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 316.669072][T13614] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 316.680703][T13624] System zones: [ 316.686887][T13614] loop3: lost filesystem error report for type 5 error -117 [ 316.693050][T13614] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.2995: corrupted inode contents [ 316.700490][T13624] 1-20 [ 316.712305][T13614] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 316.715531][T13624] [ 316.727518][T13614] EXT4-fs error (device loop3): ext4_truncate:4587: inode #12: comm syz.3.2995: mark_inode_dirty error [ 316.736989][T13624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.751732][T13614] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 316.751927][T13614] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 316.770485][T13614] loop3: lost filesystem error report for type 5 error -117 [ 316.775827][T13614] EXT4-fs (loop3): 1 truncate cleaned up [ 316.793764][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.810060][T13641] FAULT_INJECTION: forcing a failure. [ 316.810060][T13641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.823626][T13641] CPU: 0 UID: 0 PID: 13641 Comm: syz.6.3003 Not tainted syzkaller #0 PREEMPT(full) [ 316.823652][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.823663][T13641] Call Trace: [ 316.823670][T13641] [ 316.823678][T13641] __dump_stack+0x1d/0x30 [ 316.823707][T13641] dump_stack_lvl+0x95/0xd0 [ 316.823736][T13641] dump_stack+0x15/0x1b [ 316.823824][T13641] should_fail_ex+0x263/0x280 [ 316.823923][T13641] ? __pfx_ucma_listen+0x10/0x10 [ 316.823948][T13641] should_fail+0xb/0x20 [ 316.823970][T13641] should_fail_usercopy+0x1a/0x20 [ 316.823997][T13641] _copy_from_user+0x1c/0xb0 [ 316.824092][T13641] ucma_listen+0x4d/0x330 [ 316.824117][T13641] ? __pfx_ucma_listen+0x10/0x10 [ 316.824140][T13641] ucma_write+0x1c9/0x260 [ 316.824163][T13641] vfs_writev+0x42b/0x900 [ 316.824184][T13641] ? __pfx_ucma_write+0x10/0x10 [ 316.824283][T13641] do_writev+0xe9/0x210 [ 316.824306][T13641] __x64_sys_writev+0x45/0x50 [ 316.824334][T13641] x64_sys_call+0x1c0c/0x3020 [ 316.824404][T13641] do_syscall_64+0x12c/0x370 [ 316.824429][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.824454][T13641] RIP: 0033:0x7f8f8fd9c629 [ 316.824472][T13641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.824491][T13641] RSP: 002b:00007f8f8e7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 316.824515][T13641] RAX: ffffffffffffffda RBX: 00007f8f90015fa0 RCX: 00007f8f8fd9c629 [ 316.824531][T13641] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 316.824546][T13641] RBP: 00007f8f8e7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 316.824601][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.824614][T13641] R13: 00007f8f90016038 R14: 00007f8f90015fa0 R15: 00007ffd1bf175c8 [ 316.824632][T13641] [ 317.014619][T13614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.048666][T13614] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 317.064021][T13646] loop7: detected capacity change from 0 to 1024 [ 317.101556][T13646] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 317.193867][T13659] kernel profiling enabled (shift: 63) [ 317.199440][T13659] profiling shift: 63 too large [ 317.254352][ T4672] hid-generic 0DF6:01FF:0005.0003: item fetching failed at offset 3/5 [ 317.262856][ T4672] hid-generic 0DF6:01FF:0005.0003: probe with driver hid-generic failed with error -22 [ 317.283068][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.495671][T13689] loop6: detected capacity change from 0 to 512 [ 317.536170][T13689] EXT4-fs: Mount option(s) incompatible with ext2 [ 317.641060][T13693] Failed to initialize the IGMP autojoin socket (err -2) [ 317.713577][ T1709] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53239 - 0 [ 317.773765][ T1709] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53239 - 0 [ 317.832532][ T1709] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53239 - 0 [ 317.911583][ T1709] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53239 - 0 [ 318.497941][ T1709] bond1 (unregistering): Released all slaves [ 318.512269][T13748] __nla_validate_parse: 5 callbacks suppressed [ 318.512288][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3034'. [ 318.533934][T13691] Failed to initialize the IGMP autojoin socket (err -2) [ 318.562037][ T1709] hsr_slave_0: left promiscuous mode [ 319.057775][T13777] netlink: 'syz.1.3038': attribute type 21 has an invalid length. [ 319.486163][T13786] 9p: Bad value for 'rfdno' [ 319.549136][T13792] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3045'. [ 319.595783][T13691] chnl_net:caif_netlink_parms(): no params data found [ 319.622131][T13805] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3047'. [ 319.646998][T13804] loop6: detected capacity change from 0 to 736 [ 319.797379][T13691] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.803517][T13814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.817709][T13814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.817919][T13691] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.857200][T13691] bridge_slave_0: entered allmulticast mode [ 319.865045][T13691] bridge_slave_0: entered promiscuous mode [ 319.888425][T13691] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.906752][T13691] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.914393][T13691] bridge_slave_1: entered allmulticast mode [ 319.921648][T13691] bridge_slave_1: entered promiscuous mode [ 319.952958][T13691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.965614][T13691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.002322][T13830] loop6: detected capacity change from 0 to 512 [ 320.018566][T13830] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 320.020571][T13691] team0: Port device team_slave_0 added [ 320.041509][T13830] EXT4-fs (loop6): 1 truncate cleaned up [ 320.058306][T13830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.059866][T13691] team0: Port device team_slave_1 added [ 320.082279][T13830] 9p: Bad value for 'rfdno' [ 320.104696][ T9487] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 320.120600][ T9487] EXT4-fs (loop6): Remounting filesystem read-only [ 320.122849][T13691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.134209][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.161144][T13691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.176948][T13691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.198091][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.225008][T13691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.236967][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 320.236982][ T28] audit: type=1326 audit(1771368886.692:15600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.283348][ T28] audit: type=1326 audit(1771368886.722:15601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.311232][T13837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.313019][T13844] Failed to initialize the IGMP autojoin socket (err -2) [ 320.327130][T13691] hsr_slave_0: entered promiscuous mode [ 320.327788][ T28] audit: type=1326 audit(1771368886.722:15602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.344403][T13691] hsr_slave_1: entered promiscuous mode [ 320.358441][ T28] audit: type=1326 audit(1771368886.722:15603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.387637][ T28] audit: type=1326 audit(1771368886.722:15604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.420423][T13691] debugfs: 'hsr0' already exists in 'hsr' [ 320.421044][ T28] audit: type=1400 audit(1771368886.722:15605): avc: denied { setattr } for pid=13841 comm="syz.3.3053" name="" dev="pipefs" ino=10980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 320.449293][T13691] Cannot create hsr debugfs directory [ 320.467365][ T28] audit: type=1326 audit(1771368886.722:15606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.500514][T13858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3058'. [ 320.513167][ T28] audit: type=1326 audit(1771368886.722:15607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.538168][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 320.552982][ T28] audit: type=1326 audit(1771368886.722:15608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.577429][ T28] audit: type=1326 audit(1771368886.722:15609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7ffc0000 [ 320.759787][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3061'. [ 320.886056][T13876] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13876 comm=syz.7.3061 [ 320.934586][T13876] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3061'. [ 320.958757][T13876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13876 comm=syz.7.3061 [ 320.991164][T13870] Failed to initialize the IGMP autojoin socket (err -2) [ 321.083583][T13901] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3068'. [ 321.162456][T13910] loop3: detected capacity change from 0 to 512 [ 321.196395][T13691] netdevsim netdevsim4 netdevsim0: renamed from eth13 [ 321.206093][T13910] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 321.219662][T13691] netdevsim netdevsim4 netdevsim1: renamed from eth14 [ 321.230527][T13910] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 321.247799][T13691] netdevsim netdevsim4 netdevsim2: renamed from eth15 [ 321.258873][T13910] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 321.271244][T13910] System zones: 0-2, 18-18, 34-35 [ 321.280376][T13691] netdevsim netdevsim4 netdevsim3: renamed from eth16 [ 321.290828][T13910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 321.291147][T13916] FAULT_INJECTION: forcing a failure. [ 321.291147][T13916] name failslab, interval 1, probability 0, space 0, times 0 [ 321.316642][T13916] CPU: 1 UID: 0 PID: 13916 Comm: syz.7.3072 Not tainted syzkaller #0 PREEMPT(full) [ 321.316672][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.316737][T13916] Call Trace: [ 321.316743][T13916] [ 321.316751][T13916] __dump_stack+0x1d/0x30 [ 321.316785][T13916] dump_stack_lvl+0x95/0xd0 [ 321.316861][T13916] dump_stack+0x15/0x1b [ 321.316880][T13916] should_fail_ex+0x263/0x280 [ 321.316902][T13916] ? xfrm_policy_alloc+0x62/0x1b0 [ 321.316924][T13916] should_failslab+0x8c/0xb0 [ 321.317037][T13916] __kmalloc_cache_noprof+0x5f/0x410 [ 321.317058][T13916] xfrm_policy_alloc+0x62/0x1b0 [ 321.317077][T13916] xfrm_policy_construct+0x2f/0x320 [ 321.317183][T13916] xfrm_add_policy+0x156/0x470 [ 321.317210][T13916] xfrm_user_rcv_msg+0x576/0x670 [ 321.317322][T13916] ? __kfree_skb+0x109/0x150 [ 321.317350][T13916] ? nlmon_xmit+0x4f/0x60 [ 321.317386][T13916] ? consume_skb+0x4b/0x160 [ 321.317425][T13916] netlink_rcv_skb+0x123/0x220 [ 321.317525][T13916] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 321.317552][T13916] xfrm_netlink_rcv+0x48/0x60 [ 321.317574][T13916] netlink_unicast+0x5c0/0x690 [ 321.317670][T13916] netlink_sendmsg+0x5c8/0x6f0 [ 321.317699][T13916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.317811][T13916] ____sys_sendmsg+0x5af/0x600 [ 321.317846][T13916] ___sys_sendmsg+0x195/0x1e0 [ 321.317882][T13916] __x64_sys_sendmsg+0xd4/0x160 [ 321.317988][T13916] x64_sys_call+0x194c/0x3020 [ 321.318012][T13916] do_syscall_64+0x12c/0x370 [ 321.318078][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.318102][T13916] RIP: 0033:0x7f27fc42c629 [ 321.318122][T13916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.318212][T13916] RSP: 002b:00007f27fae7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.318233][T13916] RAX: ffffffffffffffda RBX: 00007f27fc6a5fa0 RCX: 00007f27fc42c629 [ 321.318316][T13916] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004 [ 321.318329][T13916] RBP: 00007f27fae7f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.318341][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.318387][T13916] R13: 00007f27fc6a6038 R14: 00007f27fc6a5fa0 R15: 00007ffff59dcee8 [ 321.318408][T13916] [ 321.319656][T13910] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 321.594358][T13910] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 321.605321][T13911] Failed to initialize the IGMP autojoin socket (err -2) [ 321.613173][T13910] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 321.649925][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.682178][T13691] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.706751][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.713957][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.753905][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.761239][T12321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.841397][T13944] loop7: detected capacity change from 0 to 128 [ 321.856062][T13691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.874795][T13944] FAT-fs (loop7): bogus sectors per cluster 7 [ 321.888123][T13944] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 321.910856][T13949] loop3: detected capacity change from 0 to 512 [ 321.911316][T13691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.928317][T13944] FAT-fs (loop7): Can't find a valid FAT filesystem [ 321.954176][T13949] EXT4-fs: Ignoring removed i_version option [ 321.967681][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3078'. [ 321.977327][T13949] EXT4-fs: Ignoring removed bh option [ 322.011636][T13949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.044615][T13949] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.128484][T13691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.153163][T13945] Failed to initialize the IGMP autojoin socket (err -2) [ 322.469068][T13691] veth0_vlan: entered promiscuous mode [ 322.478447][T13691] veth1_vlan: entered promiscuous mode [ 322.512584][T13691] veth0_macvtap: entered promiscuous mode [ 322.525818][T13691] veth1_macvtap: entered promiscuous mode [ 322.574545][T13691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.592806][ T5337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.619010][T13691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.658601][T13691] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 322.694683][T13994] Failed to initialize the IGMP autojoin socket (err -2) [ 322.694683][T13691] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 322.695521][T13691] wireguard: wg0: Could not create IPv4 socket [ 322.729299][T13691] wireguard: wg1: Could not create IPv4 socket [ 322.736186][T14012] syzkaller1: entered promiscuous mode [ 322.741842][T14012] syzkaller1: entered allmulticast mode [ 322.756053][T13691] wireguard: wg2: Could not create IPv4 socket [ 323.219538][T14069] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3085'. [ 323.239326][T14067] syzkaller1: entered promiscuous mode [ 323.259561][T14067] syzkaller1: entered allmulticast mode [ 323.451817][T14104] usb usb7: usbfs: process 14104 (syz.3.3093) did not claim interface 63 before use [ 323.492432][T14071] Failed to initialize the IGMP autojoin socket (err -2) [ 323.652095][T14122] Failed to initialize the IGMP autojoin socket (err -2) [ 324.344881][T14214] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3102'. [ 324.376806][T14218] FAULT_INJECTION: forcing a failure. [ 324.376806][T14218] name failslab, interval 1, probability 0, space 0, times 0 [ 324.393682][T14218] CPU: 0 UID: 0 PID: 14218 Comm: syz.7.3103 Not tainted syzkaller #0 PREEMPT(full) [ 324.393752][T14218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.393766][T14218] Call Trace: [ 324.393774][T14218] [ 324.393783][T14218] __dump_stack+0x1d/0x30 [ 324.393807][T14218] dump_stack_lvl+0x95/0xd0 [ 324.393872][T14218] dump_stack+0x15/0x1b [ 324.393896][T14218] should_fail_ex+0x263/0x280 [ 324.393925][T14218] should_failslab+0x8c/0xb0 [ 324.393961][T14218] kmem_cache_alloc_noprof+0x66/0x400 [ 324.394057][T14218] ? can_rx_register+0x104/0x4d0 [ 324.394087][T14218] can_rx_register+0x104/0x4d0 [ 324.394182][T14218] ? __pfx_isotp_rcv+0x10/0x10 [ 324.394211][T14218] isotp_bind+0x38c/0x4b0 [ 324.394253][T14218] __sys_bind+0x1d0/0x290 [ 324.394285][T14218] __x64_sys_bind+0x3f/0x50 [ 324.394372][T14218] x64_sys_call+0x2b30/0x3020 [ 324.394402][T14218] do_syscall_64+0x12c/0x370 [ 324.394424][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.394445][T14218] RIP: 0033:0x7f27fc42c629 [ 324.394461][T14218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.394598][T14218] RSP: 002b:00007f27fae7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 324.394619][T14218] RAX: ffffffffffffffda RBX: 00007f27fc6a5fa0 RCX: 00007f27fc42c629 [ 324.394632][T14218] RDX: 0000000000000018 RSI: 0000200000000380 RDI: 0000000000000003 [ 324.394661][T14218] RBP: 00007f27fae7f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.394677][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.394691][T14218] R13: 00007f27fc6a6038 R14: 00007f27fc6a5fa0 R15: 00007ffff59dcee8 [ 324.394714][T14218] [ 324.603186][T14218] can: receive list entry not found for dev vcan0, id 003, mask C00007FF [ 324.661039][T14203] Failed to initialize the IGMP autojoin socket (err -2) [ 324.751794][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 324.795034][T14258] Failed to initialize the IGMP autojoin socket (err -2) [ 325.466672][T14353] netlink: 'syz.4.3116': attribute type 62 has an invalid length. [ 325.630769][T14352] Process accounting paused [ 325.655175][T14361] Failed to initialize the IGMP autojoin socket (err -2) [ 325.762256][T14414] loop7: detected capacity change from 0 to 2048 [ 325.776903][T14414] EXT4-fs: Ignoring removed nobh option [ 325.794856][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'. [ 325.816795][T14418] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 325.824812][T14418] netlink: 'syz.1.3130': attribute type 2 has an invalid length. [ 325.836174][T14408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.850242][T14414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.850874][T14408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.873950][T14414] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.892476][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 325.892494][ T28] audit: type=1400 audit(1771368892.372:15717): avc: denied { write } for pid=14413 comm="syz.7.3129" path="/117/file0/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 325.939343][ T28] audit: type=1400 audit(1771368892.382:15718): avc: denied { map } for pid=14413 comm="syz.7.3129" path="/117/file0/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 325.965996][T12050] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.972961][ T28] audit: type=1400 audit(1771368892.382:15719): avc: denied { execute } for pid=14413 comm="syz.7.3129" path="/117/file0/file0/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 326.642120][T14513] Failed to initialize the IGMP autojoin socket (err -2) [ 326.660226][ T28] audit: type=1400 audit(1771368893.136:15720): avc: denied { ioctl } for pid=14509 comm="syz.1.3132" path="socket:[45066]" dev="sockfs" ino=45066 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 326.852070][ T28] audit: type=1400 audit(1771368893.307:15721): avc: denied { listen } for pid=14524 comm="syz.4.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 327.276248][ T28] audit: type=1326 audit(1771368893.759:15722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5d45c629 code=0x7ffc0000 [ 327.304484][ T28] audit: type=1326 audit(1771368893.759:15723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5d45c629 code=0x7ffc0000 [ 327.329260][ T28] audit: type=1326 audit(1771368893.759:15724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f5f5d45c629 code=0x7ffc0000 [ 327.353523][ T28] audit: type=1326 audit(1771368893.759:15725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5d45c629 code=0x7ffc0000 [ 327.390075][ T28] audit: type=1326 audit(1771368893.790:15726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.4.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f5d45c629 code=0x7ffc0000 [ 327.671494][T14532] IPv6: sit1: Disabled Multicast RS [ 328.268201][T14640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3139'. [ 328.869847][T14636] Failed to initialize the IGMP autojoin socket (err -2) [ 329.940256][T14813] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3141'. [ 329.979529][T14817] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3144'. [ 330.007126][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.022658][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.182016][T14826] Failed to initialize the IGMP autojoin socket (err -2) [ 330.402544][T14865] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3147'. [ 330.415423][T14866] ip6gre1: entered promiscuous mode [ 331.501877][T15015] netlink: 'syz.1.3154': attribute type 1 has an invalid length. [ 331.553995][T15022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'. [ 331.671716][T15022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.117008][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 332.133336][T15014] Failed to initialize the IGMP autojoin socket (err -2) [ 332.142619][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3159'. [ 332.453707][T15063] netlink: 'syz.1.3160': attribute type 3 has an invalid length. [ 332.871992][T15065] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3162'. [ 333.514607][T15160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3166'. [ 333.557147][T15157] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3163'. [ 333.569411][T15163] loop4: detected capacity change from 0 to 736 [ 333.820069][T15168] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 333.915364][T10704] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.943738][T10704] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.966501][T10704] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.985312][T10704] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.016681][T10704] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.039946][T15196] loop3: detected capacity change from 0 to 512 [ 334.042840][T10704] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.054626][T15212] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3173'. [ 334.066874][T15196] ext4: Unknown parameter 'audit' [ 334.070974][T10704] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.096876][T10704] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.114166][T10704] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.131436][T10704] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.140044][T10704] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.150118][T10704] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.158830][T10704] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.168517][T10704] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.177549][T10704] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.206238][T10704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.274981][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 335.298510][T15274] netlink: 'syz.4.3178': attribute type 8 has an invalid length. [ 335.337798][T15280] FAULT_INJECTION: forcing a failure. [ 335.337798][T15280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.364026][T15280] CPU: 1 UID: 0 PID: 15280 Comm: syz.1.3180 Not tainted syzkaller #0 PREEMPT(full) [ 335.364057][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.364070][T15280] Call Trace: [ 335.364078][T15280] [ 335.364086][T15280] __dump_stack+0x1d/0x30 [ 335.364153][T15280] dump_stack_lvl+0x95/0xd0 [ 335.364176][T15280] dump_stack+0x15/0x1b [ 335.364195][T15280] should_fail_ex+0x263/0x280 [ 335.364261][T15280] should_fail+0xb/0x20 [ 335.364281][T15280] should_fail_usercopy+0x1a/0x20 [ 335.364304][T15280] strncpy_from_user+0x27/0x250 [ 335.364387][T15280] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 335.364499][T15280] do_getname+0x59/0x1c0 [ 335.364523][T15280] __se_sys_symlink+0x20/0x1b0 [ 335.364546][T15280] __x64_sys_symlink+0x31/0x40 [ 335.364611][T15280] x64_sys_call+0x2465/0x3020 [ 335.364639][T15280] do_syscall_64+0x12c/0x370 [ 335.364661][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.364685][T15280] RIP: 0033:0x7f9135f6c629 [ 335.364703][T15280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.364757][T15280] RSP: 002b:00007f91349bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 335.364901][T15280] RAX: ffffffffffffffda RBX: 00007f91361e5fa0 RCX: 00007f9135f6c629 [ 335.364915][T15280] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000540 [ 335.364930][T15280] RBP: 00007f91349bf090 R08: 0000000000000000 R09: 0000000000000000 [ 335.364945][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.364960][T15280] R13: 00007f91361e6038 R14: 00007f91361e5fa0 R15: 00007fffcf625878 [ 335.365035][T15280] [ 335.544601][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 335.544619][ T28] audit: type=1400 audit(1771368902.069:15788): avc: denied { setopt } for pid=15273 comm="syz.3.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 335.600639][ T28] audit: type=1326 audit(1771368902.129:15789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.7.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fc42c629 code=0x7ffc0000 [ 335.653273][ T28] audit: type=1326 audit(1771368902.129:15790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.7.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fc42c629 code=0x7ffc0000 [ 335.702741][ T28] audit: type=1326 audit(1771368902.159:15791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.7.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f27fc42c629 code=0x7ffc0000 [ 335.712056][T15284] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 335.754335][ T28] audit: type=1326 audit(1771368902.159:15792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.7.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fc42c629 code=0x7ffc0000 [ 335.805864][ T28] audit: type=1326 audit(1771368902.159:15793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.7.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fc42c629 code=0x7ffc0000 [ 336.112955][ T28] audit: type=1326 audit(1771368902.631:15794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7fc00000 [ 336.176627][ T28] audit: type=1326 audit(1771368902.631:15795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c469dc629 code=0x7fc00000 [ 336.235402][ T28] audit: type=1326 audit(1771368902.631:15796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7fc00000 [ 336.285954][ T28] audit: type=1326 audit(1771368902.631:15797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.3.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c469dc629 code=0x7fc00000 [ 337.233123][T15465] FAULT_INJECTION: forcing a failure. [ 337.233123][T15465] name failslab, interval 1, probability 0, space 0, times 0 [ 337.246712][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.7.3186 Not tainted syzkaller #0 PREEMPT(full) [ 337.246756][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.246811][T15465] Call Trace: [ 337.246817][T15465] [ 337.246825][T15465] __dump_stack+0x1d/0x30 [ 337.246852][T15465] dump_stack_lvl+0x95/0xd0 [ 337.246873][T15465] dump_stack+0x15/0x1b [ 337.246892][T15465] should_fail_ex+0x263/0x280 [ 337.246914][T15465] should_failslab+0x8c/0xb0 [ 337.246970][T15465] __kmalloc_noprof+0xb8/0x4e0 [ 337.246987][T15465] ? iovec_from_user+0x84/0x200 [ 337.247012][T15465] ? should_fail_ex+0xd9/0x280 [ 337.247100][T15465] iovec_from_user+0x84/0x200 [ 337.247197][T15465] __import_iovec+0xf3/0x530 [ 337.247223][T15465] ? io_cache_alloc_new+0x70/0xb0 [ 337.247278][T15465] io_recvmsg_prep+0x6a9/0x880 [ 337.247304][T15465] io_submit_sqes+0x75a/0x1270 [ 337.247375][T15465] __se_sys_io_uring_enter+0x1c9/0xf50 [ 337.247444][T15465] ? __fget_files+0x184/0x1c0 [ 337.247514][T15465] ? mutex_unlock+0x4e/0x90 [ 337.247543][T15465] ? fput+0x8f/0xc0 [ 337.247573][T15465] __x64_sys_io_uring_enter+0x78/0x90 [ 337.247608][T15465] x64_sys_call+0x1e16/0x3020 [ 337.247705][T15465] do_syscall_64+0x12c/0x370 [ 337.247760][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.247784][T15465] RIP: 0033:0x7f27fc42c629 [ 337.247805][T15465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.247826][T15465] RSP: 002b:00007f27fae7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 337.247868][T15465] RAX: ffffffffffffffda RBX: 00007f27fc6a5fa0 RCX: 00007f27fc42c629 [ 337.247885][T15465] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 337.247908][T15465] RBP: 00007f27fae7f090 R08: 0000000000000000 R09: 0000000000000000 [ 337.247923][T15465] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 337.247938][T15465] R13: 00007f27fc6a6038 R14: 00007f27fc6a5fa0 R15: 00007ffff59dcee8 [ 337.247960][T15465] [ 337.480717][T15473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15473 comm=syz.4.3189 [ 337.493700][T15470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15470 comm=syz.4.3189 [ 337.524224][T15482] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3190'. [ 337.547312][T15482] tipc: Started in network mode [ 337.552664][T15482] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 337.562050][T15482] tipc: Enabling of bearer rejected, failed to enable media [ 337.632231][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3194'. [ 337.643683][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3194'. [ 337.663657][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3194'. [ 337.697462][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3194'. [ 337.706079][T15474] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 337.895191][T15522] loop7: detected capacity change from 0 to 736 [ 339.373644][T15718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3200'. [ 339.416663][T15721] dvmrp0: entered allmulticast mode [ 339.469936][T13691] ================================================================== [ 339.478757][T13691] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 339.487550][T13691] [ 339.489967][T13691] write to 0xffff88811bf83044 of 4 bytes by task 3299 on cpu 1: [ 339.497784][T13691] fsnotify_detach_mark+0xb9/0x160 [ 339.503014][T13691] fsnotify_destroy_mark+0x6f/0x150 [ 339.508235][T13691] __se_sys_inotify_rm_watch+0xe8/0x170 [ 339.513917][T13691] __x64_sys_inotify_rm_watch+0x31/0x40 [ 339.519754][T13691] x64_sys_call+0xc88/0x3020 [ 339.524389][T13691] do_syscall_64+0x12c/0x370 [ 339.529008][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.535015][T13691] [ 339.537441][T13691] read to 0xffff88811bf83044 of 4 bytes by task 13691 on cpu 0: [ 339.545257][T13691] inotify_handle_inode_event+0x34c/0x3d0 [ 339.551081][T13691] fsnotify_handle_inode_event+0x1c0/0x220 [ 339.556908][T13691] fsnotify+0x15d0/0x1730 [ 339.561347][T13691] __fsnotify_parent+0x2f8/0x3a0 [ 339.566304][T13691] __fput+0x1de/0x650 [ 339.570300][T13691] fput_close_sync+0xad/0x190 [ 339.575022][T13691] __x64_sys_close+0x55/0xf0 [ 339.579636][T13691] x64_sys_call+0x275d/0x3020 [ 339.584332][T13691] do_syscall_64+0x12c/0x370 [ 339.589022][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.595014][T13691] [ 339.597340][T13691] value changed: 0x00000003 -> 0x00000000 [ 339.603065][T13691] [ 339.605406][T13691] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.611745][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 339.621308][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.631417][T13691] ================================================================== [ 339.648389][T15731] 9pnet_fd: p9_fd_create_tcp (15731): problem connecting socket to 127.0.0.1 [ 340.023685][ T1709] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.071448][ T1709] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.120766][ T1709] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.160726][ T1709] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.217225][ T30] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.231968][ T30] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.248097][ T30] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.259364][ T30] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.267953][ T1709] bridge_slave_1: left allmulticast mode [ 340.274015][ T1709] bridge_slave_1: left promiscuous mode [ 340.280028][ T1709] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.288672][ T1709] bridge_slave_0: left allmulticast mode [ 340.294343][ T1709] bridge_slave_0: left promiscuous mode [ 340.300799][ T1709] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.390810][ T1709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.408667][ T1709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.419542][ T1709] bond0 (unregistering): Released all slaves [ 340.427330][ T1709] bond1 (unregistering): Released all slaves [ 340.436887][ T1709] bond2 (unregistering): Released all slaves [ 340.445872][ T1709] bond3 (unregistering): Released all slaves [ 340.488896][ T1709] hsr_slave_0: left promiscuous mode [ 340.505587][ T1709] hsr_slave_1: left promiscuous mode [ 340.521077][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.538588][ T1709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.559632][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.567172][ T1709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.595805][ T1709] veth1_macvtap: left promiscuous mode [ 340.612333][ T1709] veth0_macvtap: left promiscuous mode [ 340.618196][ T1709] veth1_vlan: left promiscuous mode [ 340.623726][ T1709] veth0_vlan: left promiscuous mode [ 340.722718][ T1709] team0 (unregistering): Port device team_slave_1 removed [ 340.733870][ T1709] team0 (unregistering): Port device team_slave_0 removed [ 340.828104][ C1] lapbether: lapb_data_request error - 4 [ 340.833969][ C1] lapbether: lapb_data_request error - 4 [ 340.840926][ C1] lapbether: lapb_data_request error - 4 [ 340.846724][ C1] lapbether: lapb_data_request error - 4 [ 341.063340][ T1709] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.124981][ T1709] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.181197][ T1709] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.231762][ T1709] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.294528][ T406] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.321788][ T406] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.337651][ T406] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.354960][ T1709] bridge_slave_1: left allmulticast mode [ 341.360632][ T1709] bridge_slave_1: left promiscuous mode [ 341.366675][ T1709] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.378107][ T1709] bridge_slave_0: left allmulticast mode [ 341.383832][ T1709] bridge_slave_0: left promiscuous mode [ 341.391136][ T1709] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.518516][ T1709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.543676][ T1709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.563386][ T1709] bond0 (unregistering): Released all slaves [ 341.571578][ T1709] bond1 (unregistering): Released all slaves [ 341.586230][ T1709] bond2 (unregistering): Released all slaves [ 341.595527][ T406] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.626033][ T1709] tipc: Left network mode [ 341.642932][ T1709] hsr_slave_0: left promiscuous mode [ 341.656209][ T1709] hsr_slave_1: left promiscuous mode [ 341.661982][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.686349][ T1709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.705963][ T1709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.714608][ T1709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.736800][ T1709] veth1_macvtap: left promiscuous mode [ 341.742404][ T1709] veth0_macvtap: left promiscuous mode [ 341.748686][ T1709] veth1_vlan: left promiscuous mode [ 341.755214][ T1709] veth0_vlan: left promiscuous mode [ 341.893564][ T1709] team0 (unregistering): Port device team_slave_1 removed [ 341.904288][ T1709] team0 (unregistering): Port device team_slave_0 removed [ 344.816807][ C1] lapbether: lapb_data_request error - 4 [ 344.823455][ C1] lapbether: lapb_data_request error - 4 [ 344.952130][ T3039] wireguard: wg0: Could not create IPv6 socket [ 345.063130][ T3039] wireguard: wg2: Could not create IPv6 socket [ 345.127668][ T3039] wireguard: wg1: Could not create IPv6 socket [ 346.122507][ C0] lapbether: lapb_data_request error - 4 [ 346.128351][ C0] lapbether: lapb_data_request error - 4 [ 346.134069][ C0] lapbether: lapb_data_request error - 4 [ 346.139957][ C0] lapbether: lapb_data_request error - 4 [ 346.145733][ C0] lapbether: lapb_data_request error - 4 [ 346.151395][ C0] lapbether: lapb_data_request error - 4 [ 346.157443][ C0] lapbether: lapb_data_request error - 4 [ 346.953999][ C0] lapbether: lapb_data_request error - 4 [ 346.959764][ C0] lapbether: lapb_data_request error - 4 [ 346.975020][ C0] lapbether: lapb_data_request error - 4 [ 346.980800][ C0] lapbether: lapb_data_request error - 4 [ 346.986716][ C0] lapbether: lapb_data_request error - 4 [ 347.002329][ C0] lapbether: lapb_data_request error - 4 [ 347.014448][ C0] lapbether: lapb_data_request error - 4 [ 347.020310][ C0] lapbether: lapb_data_request error - 4 [ 347.029947][ C0] lapbether: lapb_data_request error - 4 [ 347.035647][ C0] lapbether: lapb_data_request error - 4 [ 347.201516][ C0] lapbether: lapb_data_request error - 4 [ 347.207252][ C0] lapbether: lapb_data_request error - 4 [ 347.213044][ C0] lapbether: lapb_data_request error - 4 [ 347.218789][ C0] lapbether: lapb_data_request error - 4 [ 347.224566][ C0] lapbether: lapb_data_request error - 4 [ 347.230661][ C0] lapbether: lapb_data_request error - 4 [ 347.236351][ C0] lapbether: lapb_data_request error - 4