last executing test programs: 9m27.0911152s ago: executing program 32 (id=40): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) fcntl$getflags(r1, 0x401) 8m50.351864216s ago: executing program 33 (id=347): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002780), 0x800, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 6m13.915625826s ago: executing program 6 (id=1437): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x20008000) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2}, 0x103) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 6m13.01082411s ago: executing program 6 (id=1444): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x1, 0x40052) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0xd44a) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) r7 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r7, 0x47be, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff6d, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffebe, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0xb, 0x1f, @empty}]}}]}, 0x50}}, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x8, 0xfffffb85, @vifc_lcl_ifindex, @empty}, 0x10) 6m12.496232029s ago: executing program 6 (id=1449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m12.273958092s ago: executing program 6 (id=1453): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x401, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 6m11.856449297s ago: executing program 6 (id=1461): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000140)="26eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") 6m11.383469505s ago: executing program 6 (id=1465): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x1, 0x40052) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0xd44a) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) r7 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r7, 0x47be, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff6d, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffebe, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0xb, 0x1f, @empty}]}}]}, 0x50}}, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x8, 0xfffffb85, @vifc_lcl_ifindex, @empty}, 0x10) 6m11.216693345s ago: executing program 34 (id=1465): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x1, 0x40052) fcntl$notify(0xffffffffffffffff, 0x402, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0xd44a) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) r7 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r7, 0x47be, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff6d, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffebe, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0xb, 0x1f, @empty}]}}]}, 0x50}}, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x8, 0xfffffb85, @vifc_lcl_ifindex, @empty}, 0x10) 4m57.5227146s ago: executing program 7 (id=1944): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m57.102219704s ago: executing program 7 (id=1949): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000140)="26eba9fdb4cbab48929e1af15100", 0xe}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") 4m55.861592737s ago: executing program 7 (id=1952): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r3, 0x1, 0x8, 0x6, @remote}, 0x14) 4m54.205967245s ago: executing program 7 (id=1961): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400000000000000a, &(0x7f0000006680)) pipe2$9p(&(0x7f0000000040), 0x80000) r0 = gettid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@loopback, 0xb23, 0x1, 0x0, 0xe, 0x77f, 0x4000}, 0x20) bind$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x5, "044158"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48) 4m51.700064991s ago: executing program 7 (id=1967): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edec", 0xf}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2}, 0x103) 4m50.550055009s ago: executing program 7 (id=1972): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) 4m50.511961321s ago: executing program 35 (id=1972): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) 2m46.972651941s ago: executing program 4 (id=3168): socket(0x2, 0xa, 0x300) r0 = gettid() mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x40, &(0x7f0000000300)={0x543c, 0x0, 0x0, 0x6}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r2 = gettid() tkill(r2, 0x7) socket$inet6(0xa, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002500010001000000ffdbdf251800000011"], 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x107, &(0x7f0000000340)=""/263}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000b0000000400000001"], 0x50) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r6, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r7}, 0x20) 2m46.908844955s ago: executing program 4 (id=3171): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(0x0, 0x227b00, 0x152) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="76ea092000000000009bb5606c1e", 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) sendmmsg$inet(r5, &(0x7f0000004980), 0x0, 0x20008000) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2}, 0x103) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x206, 0x80, 0xfe, 0xffffffff}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 2m46.861934377s ago: executing program 4 (id=3172): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc4) r0 = inotify_init1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0x5, 0x8}) listen(r1, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000540)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000003c0), 0x1000000000000150) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) acct(&(0x7f0000000480)='./file0\x00') r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000500000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2m46.458794611s ago: executing program 4 (id=3183): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x1000000, 0x0, 0x4044880}, 0x4) 2m46.413532664s ago: executing program 4 (id=3184): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x907b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) socket(0x2, 0x80805, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)) getpid() r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x121c80, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r5, 0x12574000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x300000b, 0x12, r6, 0x3cfcb000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r8 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x9d535000) write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x1, 0xfffffff9}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x4, 0x5, 0x400007f, 0x94e5, 0x3, "42341f9b1b6a00"}) 2m45.506107677s ago: executing program 4 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01042cbd7000ffdbdf2504000000"], 0x14}}, 0x800) 2m29.991792208s ago: executing program 36 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01042cbd7000ffdbdf2504000000"], 0x14}}, 0x800) 1m5.490545797s ago: executing program 9 (id=4458): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x16e) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0xfffffffc, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) open$dir(0x0, 0x0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x83, 0xa0000a2f, 0x401000, 0xe, 0x3, 0x2002000, 0x1, 0x3000000}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x10, 0x2d, 0x100, 0x70bd2a}, 0x10}], 0x1}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="00db371848cca4b4d983f5431568674641ce47ab074002b926aabae1adc49c3df501ef1cb6e009cc4c0ac7987a45caff338790e77f0c47f0b96b9d9ce7c1a1cea89d88a989918f4407752be523d9d99aa01d587227f2b1d479a32f85d448b2710d2959b6cca2541d418e543ffdf3c1c0a64ef1602ac0d95845a3eecf3ff82c9adcc012ede84d1f960a1ff461f400526e8b1451b6910c0ba1d9facd145ba745d6a574043752abe5a013a4f0bd98b836f003f327470df8a75d851e5700"/200, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x2880) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4048000) ppoll(0x0, 0xfffffffffffffd8e, 0x0, 0x0, 0x4e) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="0a0088bebbbbbbbbbbbb00000000000086dd620e204b588d0601fe"], 0x4e) 1m4.362414433s ago: executing program 9 (id=4467): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) setresuid(0x0, 0xee00, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000000900010073797a310000000014000000020a010300000000000000000000000820000000040000000000000000000000010000060900010073797a300000000020000000030a01080000000000000000010000050900010073797a31"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4c22, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000c04000/0x2000)=nil, 0x2000, 0x300000b, 0x50, 0xffffffffffffffff, 0xec776000) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000500)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r3, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m3.101994667s ago: executing program 9 (id=4485): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x5917f8530f65778c, 0x8000, 0x5, 0x1ff, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x66, 0x0, 0x4, 0x29, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x54, 0x3, 0x9, [{@empty, 0xc033}, {@multicast1, 0x4}, {@private=0xa010102, 0x10000}]}, @generic={0x86, 0x7, "8cfde2da02"}, @cipso={0x86, 0x42, 0x1, [{0x0, 0x6, "ea882d24"}, {0x0, 0x3, "f1"}, {0x3, 0xf, "5026ee07773b5ec8475c8bd8b6"}, {0x1, 0xd, "a91bb64f53a708e2e6ffbd"}, {0x1, 0x5, "ca9c71"}, {0x7, 0x2}, {0x6, 0x10, "d768651fb8a4dd9c8e4f1f3d0583"}]}, @generic={0x94, 0xc, "8ff291a9b0d48bab7f66"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', r1, 0x7800, 0x7800, 0x3, 0x3, {{0x37, 0x4, 0x0, 0x0, 0xdc, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1b, 0xa3, [@loopback, @private=0xa010102, @remote, @private=0xa010101, @remote, @private=0xa010100]}, @cipso={0x86, 0x27, 0x3, [{0x0, 0x6, "a43266fe"}, {0x6, 0x9, "671689ae80e067"}, {0x0, 0x10, "ce75b056670f36eaa40136f857b5"}, {0x2, 0x2}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x8, "c42063e4b5c0"}, {0x1, 0x2}, {0x1, 0x8, "9c26742390b3"}]}, @noop, @generic={0x86, 0x6, "a19cb6cb"}, @timestamp_prespec={0x44, 0x24, 0x8f, 0x3, 0x4, [{@loopback, 0x9}, {@local, 0x7ff}, {@local, 0x6}, {@loopback, 0x8}]}, @timestamp_prespec={0x44, 0x34, 0x1f, 0x3, 0x0, [{@multicast2, 0x40000000}, {@loopback, 0x6973fb26}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400000}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0x7fffffff}]}, @generic={0x0, 0xf, "d457e29bf5326fd28318ef620e"}]}}}}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000007c0)={0x0, 0x1000, "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"}, &(0x7f00000002c0)=0x1008) 1m3.04160114s ago: executing program 9 (id=4487): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = openat(r0, 0x0, 0x149941, 0x245) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='O', 0x1}], 0x1}, 0x20040c51) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r4, 0x80000001, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xa8, 0x0, &(0x7f00000002c0)="b9ff1e75268c98a800000000000000000000000000000000d503faff586e07108c6c5522dddece109b9c61ac115842baa8382656084178dbfb15df3429c6e897aa6b5224418b043c9bca56f760b1657f6b0162b60032a6123ca84ae3a846681dc7e29779bf25f4a5cc3ddaba8af11f95020692fdaf38d87124aa69c142bb3b458d2b5b92d7ce7acaa74362d09df2db04646788fbb7ad3a2f623488f52c204b546e2c65440a08e9c8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000380)={0xfb, 0x3}, 0x2) 1m2.625751515s ago: executing program 9 (id=4493): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c"], 0x44}}, 0x0) (fail_nth: 4) 1m1.768734105s ago: executing program 3 (id=4504): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800ef0100800000000000000a0000000000c800000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x11, 0x0, 0x80}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x7, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1m0.765811984s ago: executing program 3 (id=4515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @none}, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) write$qrtrtun(r0, &(0x7f0000000340)="4dbbfe960dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x82a2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 59.719654205s ago: executing program 3 (id=4522): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c0001"], 0x44}}, 0x0) 59.678604038s ago: executing program 3 (id=4524): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000fcffffff00000000"]}, 0x108) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_create(r3, &(0x7f00000001c0)=@objname={'system_u:object_r:cron_spool_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7, 0x20, './file0\x00'}, 0x4e) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) chroot(&(0x7f0000000100)='./file0\x00') r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f00000000c0)=[{0x1, 0x5, 0x800}, {0x1, 0xe, 0x800}, {0x1, 0xff, 0x1800}, {0x4, 0x8e61}, {}], 0x5) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000680)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB=',seclabel,smackfsfloor=,fscontext=']) 58.845876787s ago: executing program 9 (id=4530): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edec", 0xf}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2}, 0x103) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 58.828938178s ago: executing program 37 (id=4530): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edec", 0xf}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2}, 0x103) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 58.773875441s ago: executing program 3 (id=4532): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000002c0)="ff", 0x1, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r2, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000034c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010826bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) getcwd(0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0001083c0001800c00028005000100000000002c00018014000300fe8800000000000000000000000001011400040000000000000000000000ffff0a0101023c0003800c00028005000100000000002c00018014000300fc0000000000000000000000000000001400040000000000000000000000ffff7f0000013c0002800c00028005000100000000002c000180140003"], 0xc8}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}]}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 57.904412792s ago: executing program 3 (id=4541): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair(0x2c, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x3ff, @remote, 0x224}}}, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1fc5ad4a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, 0x1c, 0x0}}], 0x1, 0x14) socket$nl_generic(0x10, 0x3, 0x10) timer_gettime(0x0, &(0x7f0000000380)) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) preadv(r0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f00000013c0)=""/138, 0x8a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000001480)=""/187, 0xbb}], 0x5, 0x7, 0xe) fsmount(0xffffffffffffffff, 0x0, 0x18) 57.902434342s ago: executing program 38 (id=4541): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair(0x2c, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x3ff, @remote, 0x224}}}, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1fc5ad4a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, 0x1c, 0x0}}], 0x1, 0x14) socket$nl_generic(0x10, 0x3, 0x10) timer_gettime(0x0, &(0x7f0000000380)) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) preadv(r0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f00000013c0)=""/138, 0x8a}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000001480)=""/187, 0xbb}], 0x5, 0x7, 0xe) fsmount(0xffffffffffffffff, 0x0, 0x18) 5.761543892s ago: executing program 8 (id=5309): syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0xf5}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) 5.669619097s ago: executing program 8 (id=5312): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$cgroup_devices(r2, 0x0, 0x9) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01030000000000e0ffff2a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) r10 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r11, 0x29, 0xce, 0x0, &(0x7f0000000080)) r12 = fsmount(r10, 0x0, 0x0) fchownat(r12, &(0x7f0000000080)='.\x00', 0x0, r9, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r7, r9}}, './file1\x00'}) 5.475525909s ago: executing program 8 (id=5313): socket(0x2, 0xa, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) ftruncate(r3, 0x1000000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 5.365172475s ago: executing program 8 (id=5315): r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") mkdir(0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000ffdadf250000000047971db1cb8e9b6b62e408e8ba7a2461239b3f3ec995f448173513bb437dc335038c1c609eb61eac3f614c24981d5fdf89f4edb007f62028854bcaf56ff1a3541c9417b2583b21616f754de80ea6baf55e692ae44f4585310dc09b1ae6ae678ba38735bd8e286b8689f6f6f6a4b90ea7af933f45b042c93bf8af125bfa7f9b2cdba1a27f26288511abad3e05729bc101e2", @ANYRES32=0x0, @ANYBLOB="0110040004e80200180034801400350076657468315f746f5f626f6e640000001400030076657468315f746f5f626f6e64000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0x986c6000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x4d) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) symlinkat(&(0x7f0000000200)='./bus\x00', r5, &(0x7f0000000240)='./bus\x00') perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_config_ext={0xfffffffffffffffa}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffebffe}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x5, 0x8012, r6, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) close_range(r3, r3, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 5.209928744s ago: executing program 8 (id=5317): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(0x0, 0x64842, 0x2) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="76ea092000000000009bb5606c1e", 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258", 0x8}], 0x1}}], 0x1, 0x20008000) 4.315903567s ago: executing program 8 (id=5337): socket(0x2, 0xa, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 4.278932209s ago: executing program 39 (id=5337): socket(0x2, 0xa, 0x300) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3.998794935s ago: executing program 5 (id=5347): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(0x0, 0x64842, 0x2) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="76ea092000000000009bb5606c1e", 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258", 0x8}], 0x1}}], 0x1, 0x20008000) 3.434807799s ago: executing program 5 (id=5355): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) ftruncate(r3, 0x1000000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 2.933652068s ago: executing program 5 (id=5358): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) finit_module(r0, 0x0, 0x0) 2.869685882s ago: executing program 5 (id=5360): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fchmodat(r1, 0x0, 0xfffffff7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40001d4}, 0xb5bd9e254ab2d846) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="210000000f7f5939e175b77b8174", 0xe, 0x4daf053149936fac, &(0x7f0000000240)={0x11, 0x1, r6, 0x1, 0x4, 0x6, @random="fcb32e7000"}, 0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f0000000000)=0x17) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000b40)={"1cf34ba16afb85dddff66a6d7ec612b2", 0x0, 0x0, {0x5, 0x5}, {0x5, 0x8b5a}, 0x7, [0xffffffffffffff8c, 0x101, 0x2, 0xfffffffffffffffe, 0x80, 0x4, 0x10000, 0xe, 0x7, 0x4, 0x10001, 0x4, 0x6, 0x971, 0xc1, 0x6]}) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', r7, 0x4000, r5}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 2.514271343s ago: executing program 5 (id=5362): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000003c00)=[{&(0x7f0000000c00)="f7", 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 2.493306474s ago: executing program 5 (id=5364): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x120, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) read(r2, &(0x7f0000000080)=""/65, 0x41) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r3) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setreuid(0xee01, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="02070900040000002dbd7000ffdbdf2502000b"], 0x20}}, 0x4040014) setns(r6, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, r4, 0x0, 0x157) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x7041) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f00000004c0)={0x4, 0xfffffffc, 0x8, 0x3, 0x100, 0x0}) 892.167138ms ago: executing program 0 (id=5384): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000003c00)=[{&(0x7f0000000c00)="f7", 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 831.971792ms ago: executing program 1 (id=5385): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) close_range(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$cgroup_devices(r2, 0x0, 0x9) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01030000000000e0ffff2a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r9, 0x29, 0xce, 0x0, &(0x7f0000000080)) r10 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchownat(r10, &(0x7f0000000080)='.\x00', 0x0, r8, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r7, r8}}, './file1\x00'}) 831.858161ms ago: executing program 2 (id=5386): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 816.667332ms ago: executing program 0 (id=5387): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003ac0)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x67a}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000003400000007000000000000002400000000000000290000003200000000000000000000000000ffff", @ANYRESOCT], 0x40}}], 0x1, 0x40000) (async) r1 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0xea, 0x0, 0x0, 0x0, 0x100, 0x36131, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r3}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ptrace(0x10, r6) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4204, r6, 0x200, &(0x7f0000000480)={0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f00000001c0), 0x0}, 0x20) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1, 0x0, 0xc, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYRESHEX=r1], 0x5b0) close(r8) (async) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000280)={0x60, 0x3, &(0x7f0000da6000/0x2000)=nil, &(0x7f0000af6000/0x3000)=nil, 0x7ff, &(0x7f00000001c0)=[{0x9, 0xf07, 0x80000002}, {0x4, 0x100000001, 0x3}, {0x2, 0xd693, 0x2}, {0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x1, 0x47}, {0x5, 0x17, 0xe}, {0x7, 0x6, 0x7fff}], 0x7, 0x20b, 0x2c, 0x4, 0x6}) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRESOCT=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYBLOB="2f0000000000000000000000ca943aee4c36543bc79bd356cd3bd58ba2a90d55903122c58ad1ccfce20e613694b9a1d5284f04118cd7e8a76a7a77e2f1e03bd3d4e15660f480e92014772f1a55a3c32a232bf237b6e1438faa8e59313ad2c0dc343eb85b23faafd001361cf961b935e7964e1d813ce84c74481f664c2889ab582dbada1dfe75193fa6166c6bf1f2642874b26d5abbcc816f94dca8a6acdcf7e241f2b1fdfaba44ce980947a8d806243d59abb098ec6890de4b49", @ANYRES32, @ANYBLOB="054934abcf063d9e30075f6afa2cb9a2cd0a30e652e6cb96709b22079b27686c2cab60926561cde7a1b98e8ccc0a9d78f3dc20ad422a5b9ed01b7fd0bf1787a0c440f4ada4e6a3c908c3b81f967b33ac09c7", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYRESHEX=r9, @ANYRES32, @ANYRES32=r11, @ANYRES64=0x0, @ANYRES64=r10], 0x20) 786.230014ms ago: executing program 2 (id=5388): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000002a00), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002b40)={@ifindex, 0x3, 0x0, 0x7ff, &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002a80)=[0x0], &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002b00)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002b80)={r2, r3, 0xe, 0x0, @val=@tcx={@void, @value, @void, @void, r4}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f00000010c0), &(0x7f0000001100)=ANY=[@ANYBLOB="00fb2e0103091ef3912812a85baf899b1357a4f79948dbd4f58565af102410b297edb038ba9112046b1f414c5edd"], 0x2e, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d08, 0x40}, 0xee2b, 0x6, 0x0, 0x1, 0x8, 0x8, 0xa, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x1b1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 718.180748ms ago: executing program 1 (id=5389): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 717.727588ms ago: executing program 2 (id=5390): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x9, 0x0, &(0x7f0000000040)="f6f4e9a1d78ad62cee", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7b) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000380), 0x0, 0x2}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 664.556321ms ago: executing program 1 (id=5391): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000240)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x16e) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) open$dir(0x0, 0x0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x83, 0xa0000a2f, 0x401000, 0xe, 0x3, 0x2002000, 0x1, 0x3000000}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x10, 0x2d, 0x1, 0x70bd2a}, 0x10}], 0x1}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x2880) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4048000) r5 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000040)={r0}, &(0x7f00000000c0)=0x8) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)=ANY=[@ANYBLOB='session=0x0000000000000026,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d61703d61636f726e2c681caecefd6749643d", @ANYRESHEX=0x0, @ANYBLOB=',map=acorn,nocompress,nojoliet,nojoliet,map=off,overriderockperm,cruft,\x00'], 0x2, 0xa2f, &(0x7f0000000600)="$eJzs3c1vXGe5APDnjO3EcaskbXN7e6O2OUlvUrf1dcbObULUBTiesTPF9iDbkRKxaErjoCiGQgtSGyGRSogFogIJxAaxqVixqtQN3aDuYAcrFkio/0LFKqyMzpkPjz0znth1PG76+1kzcz6e877P+ZjzZk5mzht8sawdaQw92piytrY+d21tO+NX/rAHGbOPXSp9+sGH72eP9+7GgRiIl5M/RgxHRBoxGBFPRQxNlxar8z0Kuh1xPSI+iUgi4mDUXu/L9Uh+0Tya8zKS32b1tvld/fXA/ZZML2t8qfX7+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP0omS4VixPJgagsXLma1kSkbaZLi9Uk1tba5zSWqfk47/U7+fhnj/SoNyLJHjE83Ojq+6lj67OfjIj0VDxdG3s675A8huPOI08efeWJwUJj+W7ZfC4HuxQ7EG0b5u1379x+fXV15a1tVjG809z2mdnyQmWpWpmfmi2nlaVqevH8+eLZyzNL6Uxlrrx0bWm5PJ9OL5anlquL6ej0C+nExYvn0vL4teqVhdnS+Fy5MfHC/00Wi+fTV8e/UZ5aXKounH11fGn6cmVurrIwm8dks7OYC9mB+PXKcrpcnppP05u3VlfObcqpbTdlQRO91iQLmuwVNFmcnJyYmJyceK/ee3ZzwvmXL758oVgcLG4SbREP6KBlfznUfTc/iNM47Eih1v5HzEUlFuJKXI204990lGIxqjHfZX5do/0/fba8Zb2t7X+9lR9smX08ezoVz9ZHh7u0/11y2bu/t+PduBO34/VYjdVYibf6nlH7X7ZHusw79HnLno1yLEQllqIalZiPqXxKWp+SxsU4H+ejGK/F5TgRS5HGTFRiLsqxFNdiKZajnB9R07EY5ZiK5ajGYqQxGtPxQqQxERfjYpyLNMoxHteiGldiIWajFFN5KTfjVr7dz0U62C3HZtDEFivSDJrcIqitMd92+19u/zckXzK7fxKHHVqrt/8HeoeOTu9FQgAAAMCu+5+/xOFjj//5nxFJPJNfl5+pzJWL/U4LAAAA2EVJJBFPZ09D2egzkfj8DwAAAA+bJP+NXRIRI3GiNtT4JZSLAAAAAPCQyG/X82wkJ9Yn+PwPAAAAD5nmPfZrVwKa99i9OrA+tcdd+JOxxu1/0xu11xv1iHoRIzOVufL4dHXulYk4k99lIP+lQVtpAxHJUP7zgxfjZC3q5EjczV5H1kvM6hzOoibGX5mIF+NUfUVGn8tenhvtEDlZi3y+Fvl8a+RAbIg8l0UCwMPu1Bbtcd66H2yGdm3/X4yxWsTY8bzJHzzeoQ0ualkBYL9o9rHz73qXZm197DQjnu3W/v//Fp//s4jH4+aJ2lcKxuONeDNW40aMRf0bByc6ldrojaD2NYSxlqsBuU1XA0bqX1n424VCjLVdDxhurmtr7EpMxlj9isCh+vz6tYOkGZs0cjhXCxh4ADsAAPrg1Jbt8P21/2M9Pv+P+EohAOwrzR7sH+BAv9cRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAC7775u4P/XMxGrqysRe9BZQHNgeDsZbj1QiD3K+d07g3u2fToODEREv2r/amx7qWwf92dDGeg10OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHsiiRjoNL1wMH8pRsTZvc7pQbrb7wR2S7qzxZJ7cS/eicO7nQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJdd/f7/hai9PlKbFIOFiNMRcT0ivtnvHHfTvX4n0DffyZ9b7v9fiBiKtSQGa7s9kqHp0mJ1Ptv9ycFs/qcffPh+9uhddnuvCnn3EYVNnUvUa2iZMrRxqcfypUZKK2/f/sGb30tLl/ID89LyzFxpfnbxa+uBTyYf1bpAaO0GoZHvj07/6Zctkw/UK/8oW9PONtc7k9dbaq/3vzst3aXe+3BrdWUyq2m5fHX5h9+99U7LrMfjZMRzoxGjG2v6dvboUtPJzdtzo+Sz5KfJ4fhNXM/3f7Y1krUk20VH8vU/dPPW6sr4G2+u3mjm9OMNOR2NExFxI2L4/nM6kZ9PNmjshvyoKwxltRbzoOzpWI/yttRS4kSX7fpYfsiMbGsd0vZ12KDHdq9ndK5jRr/6/hNxZtt7+kyPGjtKPkv+kVyOv8dPWvr/KGT7/3R0fHd2KCKPbDlSWudteHsVapH5mk+2znhtc5ld35U8AD+Pb8VXmvu/0HL+r++rvTkftdTY+X0Rsf33xe+PtLUo6/IW6dimFql+9um4wHAzz2O1qC55/le8FDF4fFtnlJd6nFF2//1fr+/uaPwr7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2P+SiIFO0wsRpyPiaEQcycbTiLXNMXd3UF9hJNlJmrtmJzl/8SQtK7pxjZN7cS/eicP9yAoAAAAAAACA3Xep9OkHH76fPfL/jx+I/y3U56QRgxFxNPn10HRpsTrfo6ChiOuN/9If3l4O17OnR9fHP8nGnuqxUH+/PgAAX2j/CQAA//8RjGs9") pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 643.808413ms ago: executing program 2 (id=5392): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000240)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x16e) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) open$dir(0x0, 0x0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x83, 0xa0000a2f, 0x401000, 0xe, 0x3, 0x2002000, 0x1, 0x3000000}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x10, 0x2d, 0x1, 0x70bd2a}, 0x10}], 0x1}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, 0x0, 0x2880) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4048000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) 428.300565ms ago: executing program 2 (id=5393): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000240)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x16e) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) open$dir(0x0, 0x0, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x83, 0xa0000a2f, 0x401000, 0xe, 0x3, 0x2002000, 0x1, 0x3000000}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x10, 0x2d, 0x1, 0x70bd2a}, 0x10}], 0x1}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x2880) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4048000) r5 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000040)={r0}, &(0x7f00000000c0)=0x8) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)=ANY=[@ANYBLOB='session=0x0000000000000026,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d61703d61636f726e2c681caecefd6749643d", @ANYRESHEX=0x0, @ANYBLOB=',map=acorn,nocompress,nojoliet,nojoliet,map=off,overriderockperm,cruft,\x00'], 0x2, 0xa2f, &(0x7f0000000600)="$eJzs3c1vXGe5APDnjO3EcaskbXN7e6O2OUlvUrf1dcbObULUBTiesTPF9iDbkRKxaErjoCiGQgtSGyGRSogFogIJxAaxqVixqtQN3aDuYAcrFkio/0LFKqyMzpkPjz0znth1PG76+1kzcz6e877P+ZjzZk5mzht8sawdaQw92piytrY+d21tO+NX/rAHGbOPXSp9+sGH72eP9+7GgRiIl5M/RgxHRBoxGBFPRQxNlxar8z0Kuh1xPSI+iUgi4mDUXu/L9Uh+0Tya8zKS32b1tvld/fXA/ZZML2t8qfX7+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP0omS4VixPJgagsXLma1kSkbaZLi9Uk1tba5zSWqfk47/U7+fhnj/SoNyLJHjE83Ojq+6lj67OfjIj0VDxdG3s675A8huPOI08efeWJwUJj+W7ZfC4HuxQ7EG0b5u1379x+fXV15a1tVjG809z2mdnyQmWpWpmfmi2nlaVqevH8+eLZyzNL6Uxlrrx0bWm5PJ9OL5anlquL6ej0C+nExYvn0vL4teqVhdnS+Fy5MfHC/00Wi+fTV8e/UZ5aXKounH11fGn6cmVurrIwm8dks7OYC9mB+PXKcrpcnppP05u3VlfObcqpbTdlQRO91iQLmuwVNFmcnJyYmJyceK/ee3ZzwvmXL758oVgcLG4SbREP6KBlfznUfTc/iNM47Eih1v5HzEUlFuJKXI204990lGIxqjHfZX5do/0/fba8Zb2t7X+9lR9smX08ezoVz9ZHh7u0/11y2bu/t+PduBO34/VYjdVYibf6nlH7X7ZHusw79HnLno1yLEQllqIalZiPqXxKWp+SxsU4H+ejGK/F5TgRS5HGTFRiLsqxFNdiKZajnB9R07EY5ZiK5ajGYqQxGtPxQqQxERfjYpyLNMoxHteiGldiIWajFFN5KTfjVr7dz0U62C3HZtDEFivSDJrcIqitMd92+19u/zckXzK7fxKHHVqrt/8HeoeOTu9FQgAAAMCu+5+/xOFjj//5nxFJPJNfl5+pzJWL/U4LAAAA2EVJJBFPZ09D2egzkfj8DwAAAA+bJP+NXRIRI3GiNtT4JZSLAAAAAPCQyG/X82wkJ9Yn+PwPAAAAD5nmPfZrVwKa99i9OrA+tcdd+JOxxu1/0xu11xv1iHoRIzOVufL4dHXulYk4k99lIP+lQVtpAxHJUP7zgxfjZC3q5EjczV5H1kvM6hzOoibGX5mIF+NUfUVGn8tenhvtEDlZi3y+Fvl8a+RAbIg8l0UCwMPu1Bbtcd66H2yGdm3/X4yxWsTY8bzJHzzeoQ0ualkBYL9o9rHz73qXZm197DQjnu3W/v//Fp//s4jH4+aJ2lcKxuONeDNW40aMRf0bByc6ldrojaD2NYSxlqsBuU1XA0bqX1n424VCjLVdDxhurmtr7EpMxlj9isCh+vz6tYOkGZs0cjhXCxh4ADsAAPrg1Jbt8P21/2M9Pv+P+EohAOwrzR7sH+BAv9cRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAC7775u4P/XMxGrqysRe9BZQHNgeDsZbj1QiD3K+d07g3u2fToODEREv2r/amx7qWwf92dDGeg10OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHsiiRjoNL1wMH8pRsTZvc7pQbrb7wR2S7qzxZJ7cS/eicO7nQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJdd/f7/hai9PlKbFIOFiNMRcT0ivtnvHHfTvX4n0DffyZ9b7v9fiBiKtSQGa7s9kqHp0mJ1Ptv9ycFs/qcffPh+9uhddnuvCnn3EYVNnUvUa2iZMrRxqcfypUZKK2/f/sGb30tLl/ID89LyzFxpfnbxa+uBTyYf1bpAaO0GoZHvj07/6Zctkw/UK/8oW9PONtc7k9dbaq/3vzst3aXe+3BrdWUyq2m5fHX5h9+99U7LrMfjZMRzoxGjG2v6dvboUtPJzdtzo+Sz5KfJ4fhNXM/3f7Y1krUk20VH8vU/dPPW6sr4G2+u3mjm9OMNOR2NExFxI2L4/nM6kZ9PNmjshvyoKwxltRbzoOzpWI/yttRS4kSX7fpYfsiMbGsd0vZ12KDHdq9ndK5jRr/6/hNxZtt7+kyPGjtKPkv+kVyOv8dPWvr/KGT7/3R0fHd2KCKPbDlSWudteHsVapH5mk+2znhtc5ld35U8AD+Pb8VXmvu/0HL+r++rvTkftdTY+X0Rsf33xe+PtLUo6/IW6dimFql+9um4wHAzz2O1qC55/le8FDF4fFtnlJd6nFF2//1fr+/uaPwr7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2P+SiIFO0wsRpyPiaEQcycbTiLXNMXd3UF9hJNlJmrtmJzl/8SQtK7pxjZN7cS/eicP9yAoAAAAAAACA3Xep9OkHH76fPfL/jx+I/y3U56QRgxFxNPn10HRpsTrfo6ChiOuN/9If3l4O17OnR9fHP8nGnuqxUH+/PgAAX2j/CQAA//8RjGs9") pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 340.53232ms ago: executing program 1 (id=5394): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x6, 0x7f, 0x6, 0x7, 0xe, "dc5a5a53568f496c"}) 286.228564ms ago: executing program 0 (id=5395): unshare(0x28020480) accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f00000001c0)=0x6e, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000980)=0x3) 246.597506ms ago: executing program 1 (id=5396): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="2703868d9044ca2f9bc795eadeb6caab131f01eb1c577830d924b4ce8b362105e449f54cdd21b4434dd7e9af5827df", 0x2f}, {&(0x7f0000000200)="7e94fe08bdf194527db11161360b9c1822ee609b506bf037a519d31b0319f5245cbf9abfe63f943622963b50d7c657578a062ca599afe6e5e4608cb080320f9edc8fe5623051ee5c39b589a954f6555cf6a3d3bba944c4dc79e8c6de11f081fbba9413a3370d06f1477981e2e5df5963eec7a50f6041b236e185ce206cbd2c09bd6a6c5e699bce3f7667da721b1488", 0x8f}, {&(0x7f0000000100)="32ceafd3dc3490d3e26d7f91132b6bab2e7d56be3922ba9f7cbdf3c04844fa433ae2bf4fd67b4959a67389e387b0333b19dd", 0x32}, {&(0x7f00000002c0)="05369f50932fdd0e815a2d2c962a7cf30003b14614b8373ea43cb768c0004c16e3c8e21ceeb2dae2c688f28d8f5a5bf90f7eccc101fa659e6f9be6da182edf6c3f05f694c513caca14402284655657759662ce9bc5d6acaa8f34f034b3aae0928c", 0x61}, {&(0x7f0000000340)="8739b0af59f55431b0f5c6897da194addd0f4f42887b66186be6f6f0139e47046c474e13dfeba7bc442c9f28b223", 0x2e}], 0x5}, 0x40881) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331c00"/27, 0x1b}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) eventfd(0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_open_dev$usbmon(&(0x7f0000000040), 0x22a7, 0x20001) poll(&(0x7f00000000c0)=[{r6, 0x3123}, {r5, 0xc42e}], 0x2, 0xfffffff7) r7 = msgget(0x0, 0x710) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='-'], 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x6, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0x3}, &(0x7f0000000540)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001040)=@newqdisc={0x3e4, 0x24, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x45e47ba9fd7ddd2c, 0x5}, {0xfff1, 0x4}, {0x4, 0x4}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x1, 0x8000, 0x7, 0x1, 0x1ff, 0x9, 0x8}}, {0x14, 0x2, [0x4, 0x2, 0x0, 0x7, 0x0, 0x2, 0x5, 0xc]}}, {{0x1c, 0x1, {0x2, 0x27, 0x8a, 0x91, 0x1, 0x0, 0x5f, 0x2}}, {0x8, 0x2, [0x5, 0xf1]}}, {{0x1c, 0x1, {0x4, 0x1, 0x3a0, 0x8001, 0x1, 0x1, 0x1000, 0x3}}, {0xa, 0x2, [0x0, 0x2, 0x9]}}, {{0x1c, 0x1, {0x0, 0x5, 0xffff, 0xc9, 0x2, 0x1, 0x6, 0x6}}, {0x10, 0x2, [0x7, 0x7, 0xc, 0x6b, 0x6, 0x8000]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x6}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_taprio={{0xb}, {0x298, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x12c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x578e}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xef}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x100}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1f85}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x531}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x555}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa61}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x9, 0x3, 0x4, 0x5, 0x9, 0x9, 0x9, 0x1, 0x9, 0x8, 0x8, 0x5, 0x7, 0x10, 0xc, 0x9], 0x0, [0x6, 0x1, 0x7, 0x5, 0x2, 0x8, 0x5, 0x8001, 0x7, 0x7, 0x2, 0x5, 0x4, 0x6, 0x3, 0x4], [0x0, 0x6b29, 0x5, 0x12, 0x3, 0x101, 0x0, 0xc, 0xfffa, 0x7, 0xfff, 0x1, 0x3, 0x7, 0x40, 0x1ff]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0xc, 0x1, 0xf, 0x6, 0xc, 0xd, 0xd, 0x0, 0x5, 0x1, 0x5, 0xa, 0x8, 0x2, 0x9, 0x2], 0x0, [0x0, 0x717, 0x200, 0x7, 0x4, 0x800, 0xf00, 0x40, 0xb0, 0x9, 0x4, 0x0, 0x8, 0xe, 0x3ff, 0x3], [0x800, 0xff, 0x3, 0x400, 0x0, 0x1, 0x7, 0x8001, 0x4, 0x9, 0xcea, 0x6, 0x8, 0xff, 0x9, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x98, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9fd1}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xda}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}]}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x10000}]}}]}, 0x3e4}}, 0x4000) msgctl$IPC_RMID(r7, 0x0) 233.819336ms ago: executing program 0 (id=5397): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000003c00)=[{&(0x7f0000000c00)="f7", 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 177.06011ms ago: executing program 1 (id=5398): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) close_range(r0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$cgroup_devices(r2, 0x0, 0x9) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01030000000000e0ffff2a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r9, 0x29, 0xce, 0x0, &(0x7f0000000080)) r10 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchownat(r10, &(0x7f0000000080)='.\x00', 0x0, r8, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r7, r8}}, './file1\x00'}) 154.364371ms ago: executing program 0 (id=5399): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 100.646584ms ago: executing program 0 (id=5400): socket(0x2, 0xa, 0x300) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) ftruncate(r2, 0x1000000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 0s ago: executing program 2 (id=5401): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(0x0, 0x840, 0x104, 0x0) finit_module(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): [T19129] [ 568.426405][T19128] loop5: detected capacity change from 0 to 512 [ 568.463375][T10077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.473855][T19128] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4661: invalid indirect mapped block 256 (level 2) [ 568.521762][T19136] loop0: detected capacity change from 0 to 256 [ 568.535846][T19128] EXT4-fs (loop5): 2 truncates cleaned up [ 568.542058][T19128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.016548][T19160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19160 comm=syz.0.4670 [ 569.183059][ T29] audit: type=1400 audit(569.140:4530): avc: denied { connect } for pid=19158 comm="syz.0.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 569.240392][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.483847][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4677'. [ 569.484299][T19192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4677'. [ 569.564960][ T29] audit: type=1326 audit(569.520:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19183 comm="syz.0.4677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcda468acb9 code=0x0 [ 569.609920][T19199] loop5: detected capacity change from 0 to 512 [ 569.616911][T19199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.636157][T19199] EXT4-fs (loop5): 1 truncate cleaned up [ 569.642545][T19199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.737741][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.783158][T19211] loop0: detected capacity change from 0 to 512 [ 569.864187][T19211] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4680: bg 0: block 393: padding at end of block bitmap is not set [ 569.903217][T19213] loop5: detected capacity change from 0 to 8192 [ 569.966743][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4684'. [ 569.996280][T19211] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 570.066775][T19211] EXT4-fs (loop0): 2 truncates cleaned up [ 570.087020][T19213] netlink: 'syz.5.4681': attribute type 1 has an invalid length. [ 570.097090][T19211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.207940][T18484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.217523][T19247] FAULT_INJECTION: forcing a failure. [ 570.217523][T19247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.230846][T19247] CPU: 0 UID: 0 PID: 19247 Comm: syz.2.4690 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 570.230888][T19247] Tainted: [W]=WARN [ 570.230898][T19247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.230975][T19247] Call Trace: [ 570.230984][T19247] [ 570.230992][T19247] __dump_stack+0x1d/0x30 [ 570.231017][T19247] dump_stack_lvl+0x95/0xd0 [ 570.231039][T19247] dump_stack+0x15/0x1b [ 570.231067][T19247] should_fail_ex+0x263/0x280 [ 570.231092][T19247] should_fail+0xb/0x20 [ 570.231111][T19247] should_fail_usercopy+0x1a/0x20 [ 570.231137][T19247] _copy_from_user+0x1c/0xb0 [ 570.231190][T19247] do_sock_getsockopt+0xf1/0x210 [ 570.231230][T19247] __x64_sys_getsockopt+0x11d/0x1a0 [ 570.231352][T19247] x64_sys_call+0x2dc7/0x3000 [ 570.231386][T19247] do_syscall_64+0xc0/0x2a0 [ 570.231413][T19247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.231442][T19247] RIP: 0033:0x7f23d610acb9 [ 570.231467][T19247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.231492][T19247] RSP: 002b:00007f23d4b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 570.231563][T19247] RAX: ffffffffffffffda RBX: 00007f23d6385fa0 RCX: 00007f23d610acb9 [ 570.231577][T19247] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004 [ 570.231592][T19247] RBP: 00007f23d4b67090 R08: 0000200000000080 R09: 0000000000000000 [ 570.231609][T19247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.231651][T19247] R13: 00007f23d6386038 R14: 00007f23d6385fa0 R15: 00007ffeb647e918 [ 570.231679][T19247] [ 570.580670][T19276] netlink: 'syz.1.4696': attribute type 3 has an invalid length. [ 570.590733][T19274] loop0: detected capacity change from 0 to 512 [ 570.616952][T19274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.631349][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4694'. [ 570.673767][T19274] EXT4-fs (loop0): 1 truncate cleaned up [ 570.703850][T19287] tmpfs: Bad value for 'mpol' [ 570.708513][T19274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.716996][T19288] dvmrp4: entered allmulticast mode [ 570.781035][T18484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.884315][T19295] loop0: detected capacity change from 0 to 1024 [ 570.884817][T19295] EXT4-fs: inline encryption not supported [ 570.913495][ T29] audit: type=1326 audit(570.869:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19296 comm="syz.1.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186987acb9 code=0x7ffc0000 [ 570.945214][T19295] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 570.957160][ T29] audit: type=1326 audit(570.899:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19296 comm="syz.1.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f186987acb9 code=0x7ffc0000 [ 570.980239][ T29] audit: type=1326 audit(570.899:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19296 comm="syz.1.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186987acb9 code=0x7ffc0000 [ 571.003271][ T29] audit: type=1326 audit(570.899:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19296 comm="syz.1.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f186987acb9 code=0x7ffc0000 [ 571.026336][ T29] audit: type=1326 audit(570.899:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19296 comm="syz.1.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186987acb9 code=0x7ffc0000 [ 571.049302][ T29] audit: type=1326 audit(570.899:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19296 comm="syz.1.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186987acb9 code=0x7ffc0000 [ 571.080623][T19304] loop8: detected capacity change from 0 to 512 [ 571.087027][T19295] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.4700: lblock 2 mapped to illegal pblock 2 (length 1) [ 571.117272][T19310] netlink: 'syz.2.4704': attribute type 22 has an invalid length. [ 571.125390][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4704'. [ 571.171422][T19295] EXT4-fs (loop0): Remounting filesystem read-only [ 571.178227][T19295] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 571.196264][T19304] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4701: bg 0: block 393: padding at end of block bitmap is not set [ 571.213015][ T1617] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.221453][T19310] netlink: 'syz.2.4704': attribute type 22 has an invalid length. [ 571.229330][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4704'. [ 571.238269][ T1617] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.246862][ T1617] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.253606][T19295] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 571.255064][ T1617] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.288063][T19304] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 571.298692][T19304] EXT4-fs (loop8): 2 truncates cleaned up [ 571.304849][T19304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.318024][T19295] EXT4-fs (loop0): 1 orphan inode deleted [ 571.324190][T19295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.372192][T10077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.401938][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4705'. [ 571.419208][T18484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.503407][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4708'. [ 571.599889][T19335] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4709: invalid indirect mapped block 256 (level 2) [ 571.628928][T19335] EXT4-fs (loop5): 2 truncates cleaned up [ 571.646859][T19335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.021556][T19358] set_capacity_and_notify: 3 callbacks suppressed [ 572.021574][T19358] loop8: detected capacity change from 0 to 164 [ 572.177703][T19358] Unable to read rock-ridge attributes [ 572.420456][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.426463][T19336] Unable to read rock-ridge attributes [ 572.536875][T19377] loop0: detected capacity change from 0 to 128 [ 572.577903][T19386] loop5: detected capacity change from 0 to 512 [ 572.619339][T19386] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4716: bg 0: block 393: padding at end of block bitmap is not set [ 572.675277][T19386] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 572.709736][T19388] delete_channel: no stack [ 572.749186][T19386] EXT4-fs (loop5): 2 truncates cleaned up [ 572.756673][T19386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.053914][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.138817][T19437] loop5: detected capacity change from 0 to 512 [ 573.175433][T19437] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4726: invalid indirect mapped block 256 (level 2) [ 573.228910][T19437] EXT4-fs (loop5): 2 truncates cleaned up [ 573.251433][T19437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.253808][T19446] veth3: entered promiscuous mode [ 573.269160][T19446] veth3: entered allmulticast mode [ 573.355003][T19446] netlink: 'syz.0.4728': attribute type 10 has an invalid length. [ 573.417231][T19446] bond0: (slave dummy0): Releasing backup interface [ 573.448797][T19446] team0: Port device dummy0 added [ 573.694370][T19471] syzkaller0: entered promiscuous mode [ 573.700011][T19471] syzkaller0: entered allmulticast mode [ 573.878095][T19477] FAULT_INJECTION: forcing a failure. [ 573.878095][T19477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.891346][T19477] CPU: 1 UID: 0 PID: 19477 Comm: syz.0.4735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 573.891389][T19477] Tainted: [W]=WARN [ 573.891398][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 573.891441][T19477] Call Trace: [ 573.891449][T19477] [ 573.891460][T19477] __dump_stack+0x1d/0x30 [ 573.891491][T19477] dump_stack_lvl+0x95/0xd0 [ 573.891536][T19477] dump_stack+0x15/0x1b [ 573.891582][T19477] should_fail_ex+0x263/0x280 [ 573.891607][T19477] should_fail+0xb/0x20 [ 573.891627][T19477] should_fail_usercopy+0x1a/0x20 [ 573.891652][T19477] _copy_from_user+0x1c/0xb0 [ 573.891816][T19477] ___sys_recvmsg+0xaa/0x3b0 [ 573.891865][T19477] do_recvmmsg+0x1ef/0x560 [ 573.891981][T19477] ? fput+0x8f/0xc0 [ 573.892025][T19477] __x64_sys_recvmmsg+0xe5/0x170 [ 573.892062][T19477] x64_sys_call+0x2b75/0x3000 [ 573.892093][T19477] do_syscall_64+0xc0/0x2a0 [ 573.892121][T19477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.892189][T19477] RIP: 0033:0x7fcda468acb9 [ 573.892210][T19477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.892234][T19477] RSP: 002b:00007fcda30e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 573.892261][T19477] RAX: ffffffffffffffda RBX: 00007fcda4905fa0 RCX: 00007fcda468acb9 [ 573.892392][T19477] RDX: 0000000000000001 RSI: 00002000000077c0 RDI: 0000000000000004 [ 573.892405][T19477] RBP: 00007fcda30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 573.892418][T19477] R10: 0000000000002040 R11: 0000000000000246 R12: 0000000000000001 [ 573.892491][T19477] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 573.892511][T19477] [ 574.104570][T19479] veth9: entered promiscuous mode [ 574.109774][T19479] veth9: entered allmulticast mode [ 574.127053][T19479] netlink: 'syz.8.4737': attribute type 10 has an invalid length. [ 574.150197][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.205920][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 574.205999][ T29] audit: type=1326 audit(574.169:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.298445][ T29] audit: type=1326 audit(574.169:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.321406][ T29] audit: type=1326 audit(574.169:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.344501][ T29] audit: type=1326 audit(574.169:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.367945][ T29] audit: type=1326 audit(574.169:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.390945][ T29] audit: type=1326 audit(574.169:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.413908][ T29] audit: type=1326 audit(574.169:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.437293][ T29] audit: type=1326 audit(574.169:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.460157][ T29] audit: type=1326 audit(574.169:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.483176][ T29] audit: type=1326 audit(574.169:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f23d610acb9 code=0x7ffc0000 [ 574.507683][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4741'. [ 574.516794][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4741'. [ 574.642520][T19493] tipc: Enabling of bearer rejected, failed to enable media [ 574.968495][T19529] veth7: entered promiscuous mode [ 574.973831][T19529] veth7: entered allmulticast mode [ 574.995367][T19529] netlink: 'syz.1.4751': attribute type 10 has an invalid length. [ 575.111187][T19534] loop5: detected capacity change from 0 to 512 [ 575.327894][T19534] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4753: invalid indirect mapped block 256 (level 2) [ 575.374594][T19534] EXT4-fs (loop5): 2 truncates cleaned up [ 575.390520][T19534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.533945][T19551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19551 comm=syz.1.4755 [ 576.063503][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.307640][T19608] loop0: detected capacity change from 0 to 512 [ 576.388675][T19608] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4768: invalid indirect mapped block 256 (level 2) [ 576.404176][T19611] veth3: entered promiscuous mode [ 576.409457][T19611] veth3: entered allmulticast mode [ 576.421296][T19608] EXT4-fs (loop0): 2 truncates cleaned up [ 576.444243][T19608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.512004][T19611] netlink: 'syz.5.4767': attribute type 10 has an invalid length. [ 576.570162][T19611] team0: Device dummy0 is already a lower device of the team interface [ 576.935636][T19650] netlink: 'syz.5.4772': attribute type 10 has an invalid length. [ 576.947117][T19644] netlink: 'syz.2.4771': attribute type 10 has an invalid length. [ 576.992390][T19633] veth11: entered promiscuous mode [ 576.997718][T19633] veth11: entered allmulticast mode [ 577.117593][T19648] veth5: entered promiscuous mode [ 577.122717][T19648] veth5: entered allmulticast mode [ 577.207333][T19650] team0: Failed to send port change of device vlan2 via netlink (err -105) [ 577.226638][T18484] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.230818][T19650] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 577.311662][T19656] syzkaller0: entered promiscuous mode [ 577.317252][T19656] syzkaller0: entered allmulticast mode [ 577.581625][T19690] FAULT_INJECTION: forcing a failure. [ 577.581625][T19690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.594820][T19690] CPU: 0 UID: 0 PID: 19690 Comm: syz.8.4783 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 577.594862][T19690] Tainted: [W]=WARN [ 577.594871][T19690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.594886][T19690] Call Trace: [ 577.594896][T19690] [ 577.594984][T19690] __dump_stack+0x1d/0x30 [ 577.595016][T19690] dump_stack_lvl+0x95/0xd0 [ 577.595051][T19690] dump_stack+0x15/0x1b [ 577.595077][T19690] should_fail_ex+0x263/0x280 [ 577.595106][T19690] should_fail+0xb/0x20 [ 577.595213][T19690] should_fail_usercopy+0x1a/0x20 [ 577.595244][T19690] _copy_to_user+0x20/0xa0 [ 577.595306][T19690] move_addr_to_user+0xf4/0x1a0 [ 577.595340][T19690] __sys_getsockname+0x13b/0x1c0 [ 577.595427][T19690] __x64_sys_getsockname+0x42/0x50 [ 577.595461][T19690] x64_sys_call+0x2d9b/0x3000 [ 577.595491][T19690] do_syscall_64+0xc0/0x2a0 [ 577.595554][T19690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.595611][T19690] RIP: 0033:0x7efd9768acb9 [ 577.595641][T19690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.595731][T19690] RSP: 002b:00007efd960e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 577.595796][T19690] RAX: ffffffffffffffda RBX: 00007efd97905fa0 RCX: 00007efd9768acb9 [ 577.595891][T19690] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 0000000000000003 [ 577.595928][T19690] RBP: 00007efd960e7090 R08: 0000000000000000 R09: 0000000000000000 [ 577.595945][T19690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.595961][T19690] R13: 00007efd97906038 R14: 00007efd97905fa0 R15: 00007ffcc9191528 [ 577.595987][T19690] [ 577.813655][T19692] veth9: entered promiscuous mode [ 577.818813][T19692] veth9: entered allmulticast mode [ 577.869891][T19687] netlink: 'syz.1.4781': attribute type 10 has an invalid length. [ 577.906039][T19687] bond0: (slave dummy0): Releasing backup interface [ 578.214171][T19722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4793'. [ 578.224392][T19718] netlink: 'syz.5.4791': attribute type 3 has an invalid length. [ 578.416957][T19734] veth7: entered promiscuous mode [ 578.422104][T19734] veth7: entered allmulticast mode [ 578.451389][T19734] netlink: 'syz.5.4795': attribute type 10 has an invalid length. [ 578.705296][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4789'. [ 578.742947][T19714] hsr_slave_1 (unregistering): left promiscuous mode [ 578.786995][T19770] loop5: detected capacity change from 0 to 1024 [ 578.834156][T19770] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 578.887384][T19782] loop8: detected capacity change from 0 to 512 [ 578.887677][T19770] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 578.921986][T19770] EXT4-fs (loop5): orphan cleanup on readonly fs [ 578.929174][T19770] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.4804: Invalid inode table block 0 in block_group 0 [ 578.945618][T19770] EXT4-fs (loop5): Remounting filesystem read-only [ 578.976190][T19782] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.994975][T19770] EXT4-fs (loop5): 1 truncate cleaned up [ 579.019656][T19770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 579.063605][T10077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.077108][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4804'. [ 579.121070][T19768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.161520][T19768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.175514][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.208888][T19805] loop8: detected capacity change from 0 to 512 [ 579.255873][T19805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.452788][T10077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.484537][T19835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.493581][T19835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.566368][T19844] veth11: entered promiscuous mode [ 579.572012][T19844] veth11: entered allmulticast mode [ 579.690873][T19849] netlink: 'syz.1.4823': attribute type 10 has an invalid length. [ 579.769199][T19849] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 580.214971][T19876] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4833'. [ 580.263209][T19881] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4833'. [ 580.566201][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4843'. [ 580.663091][T19914] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 580.683761][T19907] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 580.695004][T19914] bond1 (unregistering): Released all slaves [ 580.888964][T19929] veth9: entered promiscuous mode [ 580.894134][T19929] veth9: entered allmulticast mode [ 580.900673][T19932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4854'. [ 580.910793][T19929] netlink: 'syz.5.4853': attribute type 10 has an invalid length. [ 581.022264][T19939] loop5: detected capacity change from 0 to 1024 [ 581.260135][T19958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 581.266626][T19958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 581.335755][T19963] veth13: entered promiscuous mode [ 581.340926][T19963] veth13: entered allmulticast mode [ 581.349720][T19963] netlink: 'syz.1.4866': attribute type 10 has an invalid length. [ 581.458281][T19966] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:0 [ 581.467331][T19966] sctp: [Deprecated]: syz.2.4868 (pid 19966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 581.467331][T19966] Use struct sctp_sack_info instead [ 581.475673][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 581.475733][ T29] audit: type=1400 audit(581.429:4701): avc: denied { write } for pid=19965 comm="syz.2.4868" lport=50695 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 581.681893][T19981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.716377][T19981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.734105][T19976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4872'. [ 582.281009][T20016] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4880'. [ 582.336025][T20021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.389365][T20021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.524219][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4882'. [ 582.533317][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4882'. [ 582.574268][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4884'. [ 582.770347][ T29] audit: type=1400 audit(582.729:4702): avc: denied { watch_reads } for pid=20041 comm="syz.8.4887" path="/proc/1602/task" dev="proc" ino=62050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 582.985678][T20050] loop8: detected capacity change from 0 to 512 [ 583.003991][T20050] ext4: Unknown parameter '@' [ 583.420788][T20059] loop8: detected capacity change from 0 to 512 [ 583.455821][T20059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.471557][T20063] loop5: detected capacity change from 0 to 512 [ 583.485880][T20063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.497417][T20059] EXT4-fs (loop8): 1 truncate cleaned up [ 583.497877][T20063] EXT4-fs (loop5): 1 truncate cleaned up [ 583.537847][T20059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.546333][T20063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.642556][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.666868][T10077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.813515][T20076] veth11: entered promiscuous mode [ 583.818915][T20076] veth11: entered allmulticast mode [ 583.827808][T20076] netlink: 'syz.8.4899': attribute type 10 has an invalid length. [ 583.893053][ T29] audit: type=1326 audit(583.849:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 583.895857][T20092] loop5: detected capacity change from 0 to 128 [ 583.927312][T20093] netlink: 'syz.2.4902': attribute type 10 has an invalid length. [ 583.938731][T20085] veth13: entered promiscuous mode [ 583.943972][T20085] veth13: entered allmulticast mode [ 583.971303][ T29] audit: type=1326 audit(583.849:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 583.994285][ T29] audit: type=1326 audit(583.849:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 584.017614][ T29] audit: type=1326 audit(583.879:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 584.030385][T20092] tipc: Started in network mode [ 584.040625][ T29] audit: type=1326 audit(583.879:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 584.045530][T20092] tipc: Node identity 4, cluster identity 4711 [ 584.045545][T20092] tipc: Node number set to 4 [ 584.068640][ T29] audit: type=1326 audit(583.879:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 584.102411][ T29] audit: type=1326 audit(583.879:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 584.125613][ T29] audit: type=1326 audit(583.879:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20090 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 584.163355][T20093] bond0: (slave dummy0): Releasing backup interface [ 584.358938][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4919'. [ 584.443643][T20113] netlink: 'syz.5.4916': attribute type 10 has an invalid length. [ 584.456075][T20117] netlink: 'syz.2.4917': attribute type 10 has an invalid length. [ 584.462352][T20121] veth11: entered promiscuous mode [ 584.469354][T20121] veth11: entered allmulticast mode [ 584.518898][T20124] veth15: entered promiscuous mode [ 584.524148][T20124] veth15: entered allmulticast mode [ 584.546081][T20113] bond0: (slave dummy0): Releasing backup interface [ 584.568945][T20113] team0: Device dummy0 is already a lower device of the team interface [ 584.599739][T20117] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 584.765736][T20159] FAULT_INJECTION: forcing a failure. [ 584.765736][T20159] name failslab, interval 1, probability 0, space 0, times 0 [ 584.778558][T20159] CPU: 0 UID: 0 PID: 20159 Comm: syz.0.4929 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 584.778647][T20159] Tainted: [W]=WARN [ 584.778662][T20159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.778679][T20159] Call Trace: [ 584.778689][T20159] [ 584.778698][T20159] __dump_stack+0x1d/0x30 [ 584.778730][T20159] dump_stack_lvl+0x95/0xd0 [ 584.778760][T20159] dump_stack+0x15/0x1b [ 584.778781][T20159] should_fail_ex+0x263/0x280 [ 584.778805][T20159] should_failslab+0x8c/0xb0 [ 584.778831][T20159] __kmalloc_cache_noprof+0x64/0x4a0 [ 584.778903][T20159] ? ucma_alloc_ctx+0x30/0x1d0 [ 584.778940][T20159] ? should_fail_ex+0xd9/0x280 [ 584.779030][T20159] ? __pfx_ucma_create_id+0x10/0x10 [ 584.779065][T20159] ucma_alloc_ctx+0x30/0x1d0 [ 584.779172][T20159] ucma_create_id+0x15a/0x280 [ 584.779208][T20159] ? __pfx_ucma_create_id+0x10/0x10 [ 584.779242][T20159] ucma_write+0x1c9/0x260 [ 584.779378][T20159] ? __pfx_ucma_write+0x10/0x10 [ 584.779595][T20159] vfs_write+0x269/0x9f0 [ 584.779621][T20159] ? __rcu_read_unlock+0x4e/0x70 [ 584.779699][T20159] ? __fget_files+0x184/0x1c0 [ 584.779732][T20159] ksys_write+0xdc/0x1a0 [ 584.779798][T20159] __x64_sys_write+0x40/0x50 [ 584.779820][T20159] x64_sys_call+0x2847/0x3000 [ 584.779850][T20159] do_syscall_64+0xc0/0x2a0 [ 584.779889][T20159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.779995][T20159] RIP: 0033:0x7fcda468acb9 [ 584.780026][T20159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.780049][T20159] RSP: 002b:00007fcda30e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 584.780143][T20159] RAX: ffffffffffffffda RBX: 00007fcda4905fa0 RCX: 00007fcda468acb9 [ 584.780160][T20159] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000003 [ 584.780234][T20159] RBP: 00007fcda30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 584.780247][T20159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.780260][T20159] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 584.780286][T20159] [ 584.813425][T20163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20163 comm=syz.1.4928 [ 585.224203][T20182] veth13: entered promiscuous mode [ 585.229645][T20182] veth13: entered allmulticast mode [ 585.243722][T20182] netlink: 'syz.8.4933': attribute type 10 has an invalid length. [ 585.252268][T20182] .`: (slave dummy0): Releasing backup interface [ 586.516579][T20250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20250 comm=syz.8.4947 [ 586.918147][T20282] loop5: detected capacity change from 0 to 512 [ 586.983409][T20282] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4957: bg 0: block 393: padding at end of block bitmap is not set [ 587.038749][T20282] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 587.048589][T20282] EXT4-fs (loop5): 2 truncates cleaned up [ 587.050788][T20292] veth17: entered promiscuous mode [ 587.056241][T20282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.059746][T20292] veth17: entered allmulticast mode [ 587.080531][T20296] __nla_validate_parse: 2 callbacks suppressed [ 587.080549][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'. [ 587.095695][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'. [ 587.156638][T20299] netlink: 'syz.2.4962': attribute type 10 has an invalid length. [ 587.177244][T20299] bond0: (slave dummy0): Releasing backup interface [ 587.296347][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.392768][T20315] loop5: detected capacity change from 0 to 512 [ 587.404666][T20315] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4969: invalid indirect mapped block 256 (level 2) [ 587.446306][T20315] EXT4-fs (loop5): 2 truncates cleaned up [ 587.455259][T20315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.195754][T20339] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4980'. [ 588.215175][T20341] veth15: entered promiscuous mode [ 588.220454][T20341] veth15: entered allmulticast mode [ 588.234694][T20341] netlink: 'syz.1.4977': attribute type 10 has an invalid length. [ 588.275784][T20341] bond0: (slave dummy0): Releasing backup interface [ 588.288025][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.297380][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 588.297397][ T29] audit: type=1400 audit(588.249:4749): avc: denied { getopt } for pid=20338 comm="syz.8.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 588.387370][T20354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.396083][T20354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.404695][T20350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.421188][T20350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.431688][ T29] audit: type=1326 audit(588.389:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.454871][ T29] audit: type=1326 audit(588.389:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.478023][ T29] audit: type=1326 audit(588.389:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.501125][ T29] audit: type=1326 audit(588.389:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.524246][ T29] audit: type=1326 audit(588.389:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.547389][ T29] audit: type=1326 audit(588.389:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.570432][ T29] audit: type=1326 audit(588.389:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.593461][ T29] audit: type=1326 audit(588.389:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.616443][ T29] audit: type=1326 audit(588.389:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.4988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd9768acb9 code=0x7ffc0000 [ 588.800144][T20378] loop8: detected capacity change from 0 to 164 [ 588.814601][T20378] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 588.839405][T20382] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4998'. [ 588.849092][T20382] netlink: zone id is out of range [ 588.854236][T20382] netlink: zone id is out of range [ 588.859634][T20382] netlink: zone id is out of range [ 588.875691][T20382] netlink: set zone limit has 8 unknown bytes [ 589.145770][T20392] loop8: detected capacity change from 0 to 512 [ 589.154615][T20392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 589.186098][T20392] EXT4-fs (loop8): 1 truncate cleaned up [ 589.192284][T20392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.339518][T10077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.398880][T20405] loop5: detected capacity change from 0 to 8192 [ 589.478010][T20405] xt_TCPMSS: Only works on TCP SYN packets [ 589.513694][T20422] netlink: 'syz.2.5012': attribute type 1 has an invalid length. [ 589.542998][T20422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.558464][T20422] bond1: (slave bond2): making interface the new active one [ 589.588757][T20422] bond1: (slave bond2): Enslaving as an active interface with an up link [ 589.607769][T20428] FAULT_INJECTION: forcing a failure. [ 589.607769][T20428] name failslab, interval 1, probability 0, space 0, times 0 [ 589.620516][T20428] CPU: 0 UID: 0 PID: 20428 Comm: syz.5.5013 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 589.620549][T20428] Tainted: [W]=WARN [ 589.620556][T20428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.620570][T20428] Call Trace: [ 589.620580][T20428] [ 589.620629][T20428] __dump_stack+0x1d/0x30 [ 589.620656][T20428] dump_stack_lvl+0x95/0xd0 [ 589.620682][T20428] dump_stack+0x15/0x1b [ 589.620706][T20428] should_fail_ex+0x263/0x280 [ 589.620730][T20428] should_failslab+0x8c/0xb0 [ 589.620789][T20428] __kmalloc_noprof+0xb8/0x580 [ 589.620815][T20428] ? ethnl_perphy_start+0x8f/0x390 [ 589.620846][T20428] ethnl_perphy_start+0x8f/0x390 [ 589.620872][T20428] ? genl_start+0x117/0x390 [ 589.620967][T20428] ? __pfx_ethnl_perphy_start+0x10/0x10 [ 589.620990][T20428] genl_start+0x2e3/0x390 [ 589.621015][T20428] __netlink_dump_start+0x334/0x520 [ 589.621051][T20428] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 589.621099][T20428] ? __pfx_genl_start+0x10/0x10 [ 589.621123][T20428] ? __pfx_genl_dumpit+0x10/0x10 [ 589.621154][T20428] ? __pfx_genl_done+0x10/0x10 [ 589.621184][T20428] genl_rcv_msg+0x400/0x470 [ 589.621277][T20428] ? __pfx_ethnl_perphy_start+0x10/0x10 [ 589.621303][T20428] ? __pfx_ethnl_perphy_dumpit+0x10/0x10 [ 589.621334][T20428] ? __pfx_ethnl_perphy_done+0x10/0x10 [ 589.621387][T20428] netlink_rcv_skb+0x123/0x220 [ 589.621426][T20428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.621461][T20428] genl_rcv+0x28/0x40 [ 589.621516][T20428] netlink_unicast+0x5c0/0x690 [ 589.621558][T20428] netlink_sendmsg+0x5c8/0x6f0 [ 589.621585][T20428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.621611][T20428] __sock_sendmsg+0x145/0x170 [ 589.621663][T20428] ____sys_sendmsg+0x31e/0x4a0 [ 589.621706][T20428] ___sys_sendmsg+0x195/0x1e0 [ 589.621749][T20428] __x64_sys_sendmsg+0xd4/0x160 [ 589.621850][T20428] x64_sys_call+0x17ba/0x3000 [ 589.621880][T20428] do_syscall_64+0xc0/0x2a0 [ 589.621909][T20428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.621938][T20428] RIP: 0033:0x7f3aee5bacb9 [ 589.621957][T20428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.621980][T20428] RSP: 002b:00007f3aed017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.621999][T20428] RAX: ffffffffffffffda RBX: 00007f3aee835fa0 RCX: 00007f3aee5bacb9 [ 589.622013][T20428] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 589.622027][T20428] RBP: 00007f3aed017090 R08: 0000000000000000 R09: 0000000000000000 [ 589.622042][T20428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.622057][T20428] R13: 00007f3aee836038 R14: 00007f3aee835fa0 R15: 00007ffcf5df5c18 [ 589.622080][T20428] [ 590.064232][T20144] bridge_slave_1: left allmulticast mode [ 590.070085][T20144] bridge_slave_1: left promiscuous mode [ 590.075809][T20144] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.098614][T20144] bridge_slave_0: left allmulticast mode [ 590.104345][T20144] bridge_slave_0: left promiscuous mode [ 590.110259][T20144] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.178690][T20144] .` (unregistering): (slave bridge0): Releasing backup interface [ 590.230842][T20144] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.241058][T20144] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.256692][T20144] .` (unregistering): Released all slaves [ 590.347764][T20144] hsr_slave_0: left promiscuous mode [ 590.491771][T20484] netlink: 'syz.5.5022': attribute type 10 has an invalid length. [ 590.532120][T20472] veth13: entered promiscuous mode [ 590.537465][T20472] veth13: entered allmulticast mode [ 590.545610][T20484] team0: Device dummy0 is already a lower device of the team interface [ 590.732169][T20144] IPVS: stop unused estimator thread 0... [ 590.760333][T20415] chnl_net:caif_netlink_parms(): no params data found [ 590.824457][T20505] veth5: entered promiscuous mode [ 590.829600][T20505] veth5: entered allmulticast mode [ 590.838372][T20505] netlink: 'syz.0.5029': attribute type 10 has an invalid length. [ 590.867493][T20505] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 590.876597][T20505] team0: Port device dummy0 removed [ 590.884325][T20505] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 590.944121][T20415] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.951454][T20415] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.999499][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5035'. [ 591.009627][T20415] bridge_slave_0: entered allmulticast mode [ 591.017567][T20415] bridge_slave_0: entered promiscuous mode [ 591.036466][T20530] vlan2: entered allmulticast mode [ 591.049582][T20530] dummy0: entered allmulticast mode [ 591.075636][T20530] batman_adv: batadv0: Adding interface: vlan2 [ 591.083385][T20530] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.109521][T20530] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 591.123652][T20415] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.131041][T20415] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.138939][T20415] bridge_slave_1: entered allmulticast mode [ 591.154496][T20415] bridge_slave_1: entered promiscuous mode [ 591.226646][T20415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.258146][T20415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.322541][T20415] team0: Port device team_slave_0 added [ 591.346997][T20415] team0: Port device team_slave_1 added [ 591.357353][T20556] FAULT_INJECTION: forcing a failure. [ 591.357353][T20556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.370784][T20556] CPU: 0 UID: 0 PID: 20556 Comm: syz.2.5040 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 591.370818][T20556] Tainted: [W]=WARN [ 591.370841][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.370857][T20556] Call Trace: [ 591.370867][T20556] [ 591.370878][T20556] __dump_stack+0x1d/0x30 [ 591.370915][T20556] dump_stack_lvl+0x95/0xd0 [ 591.370953][T20556] dump_stack+0x15/0x1b [ 591.370979][T20556] should_fail_ex+0x263/0x280 [ 591.371010][T20556] should_fail+0xb/0x20 [ 591.371111][T20556] should_fail_usercopy+0x1a/0x20 [ 591.371142][T20556] _copy_from_user+0x1c/0xb0 [ 591.371170][T20556] memdup_user+0x5e/0xd0 [ 591.371192][T20556] strndup_user+0x68/0xb0 [ 591.371347][T20556] __se_sys_mount+0x4d/0x2e0 [ 591.371369][T20556] ? fput+0x8f/0xc0 [ 591.371394][T20556] ? ksys_write+0x194/0x1a0 [ 591.371450][T20556] __x64_sys_mount+0x67/0x80 [ 591.371479][T20556] x64_sys_call+0x2cca/0x3000 [ 591.371513][T20556] do_syscall_64+0xc0/0x2a0 [ 591.371543][T20556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.371592][T20556] RIP: 0033:0x7f23d610acb9 [ 591.371613][T20556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.371646][T20556] RSP: 002b:00007f23d4b67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.371672][T20556] RAX: ffffffffffffffda RBX: 00007f23d6385fa0 RCX: 00007f23d610acb9 [ 591.371690][T20556] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 591.371776][T20556] RBP: 00007f23d4b67090 R08: 0000200000000140 R09: 0000000000000000 [ 591.371795][T20556] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 591.371812][T20556] R13: 00007f23d6386038 R14: 00007f23d6385fa0 R15: 00007ffeb647e918 [ 591.371841][T20556] [ 591.572104][T20415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.579313][T20415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.605780][T20415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.696662][T20415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.703712][T20415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.729770][T20415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.814993][T20578] netlink: 67 bytes leftover after parsing attributes in process `syz.2.5046'. [ 591.824376][T20415] hsr_slave_0: entered promiscuous mode [ 591.841645][T20415] hsr_slave_1: entered promiscuous mode [ 591.858233][T20415] debugfs: 'hsr0' already exists in 'hsr' [ 591.864293][T20415] Cannot create hsr debugfs directory [ 592.071433][T20598] veth17: entered promiscuous mode [ 592.076719][T20598] veth17: entered allmulticast mode [ 592.101654][T20598] netlink: 'syz.1.5050': attribute type 10 has an invalid length. [ 592.155998][T20607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20607 comm=syz.2.5052 [ 592.212711][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 592.300402][T20621] loop5: detected capacity change from 0 to 1024 [ 592.315995][T20621] EXT4-fs: Ignoring removed nobh option [ 592.321635][T20621] EXT4-fs: inline encryption not supported [ 592.382832][T20415] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 592.411189][T20621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.418895][T20627] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5053'. [ 592.435897][T20415] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 592.460485][T20415] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 592.477680][T20415] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 592.580418][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5056'. [ 592.621412][T20415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.652590][T20415] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.712383][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.719543][ T8044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.751426][T20415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 592.762330][T20415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.800866][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.808010][ T8044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.971188][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.032673][T20415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.045637][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5057'. [ 593.058658][T20666] bond0: entered promiscuous mode [ 593.063755][T20666] bond_slave_0: entered promiscuous mode [ 593.069658][T20666] bond_slave_1: entered promiscuous mode [ 593.096371][T20666] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 593.107081][T20666] bond0: left promiscuous mode [ 593.112006][T20666] bond_slave_0: left promiscuous mode [ 593.117793][T20666] bond_slave_1: left promiscuous mode [ 593.360496][T20691] veth15: entered promiscuous mode [ 593.365724][T20691] veth15: entered allmulticast mode [ 593.391087][T20415] veth0_vlan: entered promiscuous mode [ 593.395606][T20691] netlink: 'syz.5.5063': attribute type 10 has an invalid length. [ 593.427419][T20415] veth1_vlan: entered promiscuous mode [ 593.464127][T20415] veth0_macvtap: entered promiscuous mode [ 593.499856][T20415] veth1_macvtap: entered promiscuous mode [ 593.573587][T20415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.610869][T20415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.782574][ T3750] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.811824][ T3750] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.830654][T20691] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 593.931647][ T3750] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.977364][ T3750] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.096197][T20716] loop8: detected capacity change from 0 to 128 [ 594.114577][T20711] vlan3: entered promiscuous mode [ 594.119964][T20711] geneve1: entered promiscuous mode [ 594.126319][T20711] vlan3: entered allmulticast mode [ 594.131636][T20711] geneve1: entered allmulticast mode [ 594.141783][T20716] tipc: Started in network mode [ 594.146731][T20716] tipc: Node identity 4, cluster identity 4711 [ 594.153179][T20716] tipc: Node number set to 4 [ 594.208443][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 594.208462][ T29] audit: type=1326 audit(594.169:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20725 comm="syz.1.5072" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f186987acb9 code=0x0 [ 594.448034][T20745] veth3: entered promiscuous mode [ 594.453138][T20745] veth3: entered allmulticast mode [ 594.478461][T20745] netlink: 'syz.8.5079': attribute type 10 has an invalid length. [ 594.527042][T20745] team0: Port device dummy0 added [ 594.586819][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5082'. [ 594.598809][T20757] loop5: detected capacity change from 0 to 512 [ 594.601863][T20759] erspan0: entered promiscuous mode [ 594.612260][T20759] erspan0: left promiscuous mode [ 594.898207][T20757] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5078: bg 0: block 393: padding at end of block bitmap is not set [ 595.146641][T20774] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.154387][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5086'. [ 595.163491][T20774] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 595.217703][T20757] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 595.275972][T20757] EXT4-fs (loop5): 2 truncates cleaned up [ 595.282266][T20757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.418725][T20787] FAULT_INJECTION: forcing a failure. [ 595.418725][T20787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.432248][T20787] CPU: 0 UID: 0 PID: 20787 Comm: syz.0.5090 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 595.432337][T20787] Tainted: [W]=WARN [ 595.432347][T20787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.432364][T20787] Call Trace: [ 595.432374][T20787] [ 595.432384][T20787] __dump_stack+0x1d/0x30 [ 595.432414][T20787] dump_stack_lvl+0x95/0xd0 [ 595.432446][T20787] dump_stack+0x15/0x1b [ 595.432471][T20787] should_fail_ex+0x263/0x280 [ 595.432503][T20787] should_fail+0xb/0x20 [ 595.432602][T20787] should_fail_usercopy+0x1a/0x20 [ 595.432637][T20787] _copy_from_user+0x1c/0xb0 [ 595.432674][T20787] sock_do_ioctl+0xe5/0x230 [ 595.432707][T20787] sock_ioctl+0x41b/0x610 [ 595.432767][T20787] ? __pfx_sock_ioctl+0x10/0x10 [ 595.432793][T20787] __se_sys_ioctl+0xce/0x140 [ 595.432889][T20787] __x64_sys_ioctl+0x43/0x50 [ 595.432937][T20787] x64_sys_call+0x14b0/0x3000 [ 595.433048][T20787] do_syscall_64+0xc0/0x2a0 [ 595.433126][T20787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.433149][T20787] RIP: 0033:0x7fcda468acb9 [ 595.433166][T20787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.433261][T20787] RSP: 002b:00007fcda30e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.433283][T20787] RAX: ffffffffffffffda RBX: 00007fcda4905fa0 RCX: 00007fcda468acb9 [ 595.433297][T20787] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000031 [ 595.433313][T20787] RBP: 00007fcda30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 595.433329][T20787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.433408][T20787] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 595.433431][T20787] [ 595.615940][T20793] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 595.623925][T20793] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 595.684325][T20795] SELinux: Context is not valid (left unmapped). [ 595.709458][ T29] audit: type=1400 audit(595.669:4838): avc: denied { create } for pid=20794 comm="syz.0.5096" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F7 [ 595.760900][ T29] audit: type=1400 audit(595.669:4839): avc: denied { associate } for pid=20794 comm="syz.0.5096" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=F7 [ 595.772866][T20798] loop8: detected capacity change from 0 to 512 [ 595.783343][ T29] audit: type=1400 audit(595.669:4840): avc: denied { read write open } for pid=20794 comm="syz.0.5096" path="/101/file1" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F7 [ 595.813954][ T29] audit: type=1400 audit(595.669:4841): avc: denied { execute } for pid=20794 comm="syz.0.5096" name="file1" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F7 [ 595.837104][ T29] audit: type=1400 audit(595.669:4842): avc: denied { execute_no_trans } for pid=20794 comm="syz.0.5096" path="/101/file1" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F7 [ 595.852706][T20798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.861381][ T29] audit: type=1400 audit(595.709:4843): avc: denied { unlink } for pid=18484 comm="syz-executor" name="file1" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F7 [ 595.921200][T20798] EXT4-fs (loop8): 1 truncate cleaned up [ 595.950456][T20798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.001701][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.044909][T20415] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.762045][T20859] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 20859 comm: syz.5.5116) [ 596.767842][ T29] audit: type=1400 audit(596.719:4844): avc: denied { module_load } for pid=20858 comm="syz.5.5116" path=2F2173656C696E7578776B311FD06DC37F39C99E2A0D5493FDE291EFAA16236A978FBCDE590FCCC56D56CB15766D2870C92D515A23D27B84BF06 dev="mqueue" ino=65789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 596.919334][ T29] audit: type=1326 audit(596.789:4845): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20858 comm="syz.5.5116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aee5bacb9 code=0x0 [ 597.265101][ T29] audit: type=1326 audit(597.219:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20877 comm="syz.1.5122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f186987acb9 code=0x0 [ 597.311507][T20882] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 597.319598][T20882] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.5124'. [ 597.608933][T20895] loop8: detected capacity change from 0 to 512 [ 597.679933][T20893] syzkaller0: entered promiscuous mode [ 597.685527][T20893] syzkaller0: entered allmulticast mode [ 597.710475][T20899] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5130'. [ 597.795518][T20902] netlink: 'syz.5.5129': attribute type 10 has an invalid length. [ 597.830131][T20897] veth17: entered promiscuous mode [ 597.835406][T20897] veth17: entered allmulticast mode [ 597.899402][T20902] bond0: (slave dummy0): Releasing backup interface [ 597.917222][T20902] team0: Device dummy0 is already a lower device of the team interface [ 597.926458][T20908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=20908 comm=syz.8.5132 [ 598.023642][T20912] tipc: Enabled bearer , priority 10 [ 598.137701][T20922] loop8: detected capacity change from 0 to 512 [ 598.304958][T20922] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5139: invalid indirect mapped block 256 (level 2) [ 598.318288][T20932] FAULT_INJECTION: forcing a failure. [ 598.318288][T20932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.318379][T20932] CPU: 1 UID: 0 PID: 20932 Comm: syz.0.5141 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 598.318439][T20932] Tainted: [W]=WARN [ 598.318456][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.318527][T20932] Call Trace: [ 598.318565][T20932] [ 598.318663][T20932] __dump_stack+0x1d/0x30 [ 598.318787][T20932] dump_stack_lvl+0x95/0xd0 [ 598.318810][T20932] dump_stack+0x15/0x1b [ 598.318829][T20932] should_fail_ex+0x263/0x280 [ 598.318899][T20932] should_fail+0xb/0x20 [ 598.318965][T20932] should_fail_usercopy+0x1a/0x20 [ 598.319077][T20932] _copy_to_user+0x20/0xa0 [ 598.319165][T20932] simple_read_from_buffer+0xb5/0x130 [ 598.319336][T20932] proc_fail_nth_read+0x10e/0x150 [ 598.319495][T20932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.319583][T20932] vfs_read+0x1ab/0x7f0 [ 598.319778][T20932] ksys_read+0xdc/0x1a0 [ 598.319841][T20932] __x64_sys_read+0x40/0x50 [ 598.320027][T20932] x64_sys_call+0x2889/0x3000 [ 598.320117][T20932] do_syscall_64+0xc0/0x2a0 [ 598.320190][T20932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.320263][T20932] RIP: 0033:0x7fcda464b58e [ 598.320350][T20932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 598.320443][T20932] RSP: 002b:00007fcda30e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.320521][T20932] RAX: ffffffffffffffda RBX: 00007fcda30e76c0 RCX: 00007fcda464b58e [ 598.320567][T20932] RDX: 000000000000000f RSI: 00007fcda30e70a0 RDI: 0000000000000007 [ 598.320610][T20932] RBP: 00007fcda30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 598.320652][T20932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.320694][T20932] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 598.320766][T20932] [ 598.569196][T20935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5140'. [ 598.655817][T20922] EXT4-fs (loop8): 2 truncates cleaned up [ 598.673557][T20922] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.100077][T20945] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5139'. [ 599.191942][T20940] veth19: entered promiscuous mode [ 599.197280][T20940] veth19: entered allmulticast mode [ 599.478007][T20951] FAULT_INJECTION: forcing a failure. [ 599.478007][T20951] name failslab, interval 1, probability 0, space 0, times 0 [ 599.490801][T20951] CPU: 1 UID: 0 PID: 20951 Comm: syz.1.5146 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 599.490833][T20951] Tainted: [W]=WARN [ 599.490840][T20951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.490853][T20951] Call Trace: [ 599.490862][T20951] [ 599.490872][T20951] __dump_stack+0x1d/0x30 [ 599.490976][T20951] dump_stack_lvl+0x95/0xd0 [ 599.490999][T20951] dump_stack+0x15/0x1b [ 599.491021][T20951] should_fail_ex+0x263/0x280 [ 599.491045][T20951] should_failslab+0x8c/0xb0 [ 599.491172][T20951] kmem_cache_alloc_noprof+0x68/0x490 [ 599.491197][T20951] ? getname_flags+0x7f/0x3b0 [ 599.491222][T20951] getname_flags+0x7f/0x3b0 [ 599.491329][T20951] do_sys_openat2+0x60/0x150 [ 599.491421][T20951] __x64_sys_openat+0xf2/0x120 [ 599.491452][T20951] x64_sys_call+0x2b07/0x3000 [ 599.491485][T20951] do_syscall_64+0xc0/0x2a0 [ 599.491514][T20951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.491546][T20951] RIP: 0033:0x7f186983b58e [ 599.491567][T20951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 599.491588][T20951] RSP: 002b:00007f1868294b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.491614][T20951] RAX: ffffffffffffffda RBX: 00007f18682956c0 RCX: 00007f186983b58e [ 599.491633][T20951] RDX: 0000000000101301 RSI: 00007f1868294c00 RDI: ffffffffffffff9c [ 599.491729][T20951] RBP: 00007f1868294c00 R08: 0000000000000000 R09: 0000000000000000 [ 599.491746][T20951] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 599.491759][T20951] R13: 00007f1869af6218 R14: 00007f1869af6180 R15: 00007fff3bf863e8 [ 599.491783][T20951] [ 599.757533][T20415] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.818413][T20956] netlink: 'syz.5.5143': attribute type 10 has an invalid length. [ 599.840245][T20955] FAULT_INJECTION: forcing a failure. [ 599.840245][T20955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.853598][T20955] CPU: 1 UID: 0 PID: 20955 Comm: syz.2.5149 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 599.853639][T20955] Tainted: [W]=WARN [ 599.853710][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.853727][T20955] Call Trace: [ 599.853734][T20955] [ 599.853742][T20955] __dump_stack+0x1d/0x30 [ 599.853788][T20955] dump_stack_lvl+0x95/0xd0 [ 599.853809][T20955] dump_stack+0x15/0x1b [ 599.853829][T20955] should_fail_ex+0x263/0x280 [ 599.853852][T20955] should_fail+0xb/0x20 [ 599.853916][T20955] should_fail_usercopy+0x1a/0x20 [ 599.853948][T20955] _copy_to_user+0x20/0xa0 [ 599.854042][T20955] copy_siginfo_to_user+0x22/0xb0 [ 599.854081][T20955] x64_setup_rt_frame+0x2b4/0x4e0 [ 599.854117][T20955] arch_do_signal_or_restart+0x24b/0x450 [ 599.854177][T20955] exit_to_user_mode_loop+0x6a/0x6f0 [ 599.854202][T20955] ? __x64_sys_sendfile64+0x105/0x150 [ 599.854229][T20955] do_syscall_64+0x1d3/0x2a0 [ 599.854312][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.854409][T20955] RIP: 0033:0x7f23d610acb7 [ 599.854429][T20955] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 599.854455][T20955] RSP: 002b:00007f23d4b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 599.854480][T20955] RAX: 0000000000000028 RBX: 00007f23d6385fa0 RCX: 00007f23d610acb9 [ 599.854493][T20955] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 599.854505][T20955] RBP: 00007f23d4b67090 R08: 0000000000000000 R09: 0000000000000000 [ 599.854517][T20955] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.854595][T20955] R13: 00007f23d6386038 R14: 00007f23d6385fa0 R15: 00007ffeb647e918 [ 599.854621][T20955] [ 600.141034][T20956] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 600.150906][T20961] loop8: detected capacity change from 0 to 512 [ 600.183194][T20961] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5148: bg 0: block 393: padding at end of block bitmap is not set [ 600.225701][T20961] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 600.248021][T20961] EXT4-fs (loop8): 2 truncates cleaned up [ 600.285560][T20961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.387090][T20978] loop5: detected capacity change from 0 to 512 [ 600.417934][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5159'. [ 600.459064][T20415] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.532820][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 600.532841][ T29] audit: type=1326 audit(600.489:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.535880][T20978] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5156: invalid indirect mapped block 256 (level 2) [ 600.564915][ T29] audit: type=1326 audit(600.509:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.598596][ T29] audit: type=1326 audit(600.509:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.621744][ T29] audit: type=1326 audit(600.509:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.645797][ T29] audit: type=1326 audit(600.509:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.678973][ T29] audit: type=1326 audit(600.569:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcda468aa22 code=0x7ffc0000 [ 600.702106][ T29] audit: type=1326 audit(600.569:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcda468aa22 code=0x7ffc0000 [ 600.710302][T20978] EXT4-fs (loop5): 2 truncates cleaned up [ 600.725586][ T29] audit: type=1326 audit(600.569:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.725626][ T29] audit: type=1326 audit(600.569:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.765805][ T29] audit: type=1326 audit(600.639:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20986 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 600.858622][T20978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.133643][T21006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5156'. [ 601.155444][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5164'. [ 601.382857][T20988] chnl_net:caif_netlink_parms(): no params data found [ 601.539520][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.652851][T20988] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.660034][T20988] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.691389][T20988] bridge_slave_0: entered allmulticast mode [ 601.698385][T20988] bridge_slave_0: entered promiscuous mode [ 601.706374][T20988] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.713482][T20988] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.721174][T20988] bridge_slave_1: entered allmulticast mode [ 601.728312][T20988] bridge_slave_1: entered promiscuous mode [ 601.748389][T20988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.759316][T20988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.788528][T21030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 601.801807][T21030] block device autoloading is deprecated and will be removed. [ 601.845436][T20988] team0: Port device team_slave_0 added [ 601.873832][T20988] team0: Port device team_slave_1 added [ 601.898074][T20988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.905090][T20988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.931781][T20988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.949765][T20988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.956862][T20988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.983105][T20988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.002185][T21036] veth19: entered promiscuous mode [ 602.007479][T21036] veth19: entered allmulticast mode [ 602.043857][T21036] netlink: 'syz.2.5175': attribute type 10 has an invalid length. [ 602.078607][T20988] hsr_slave_0: entered promiscuous mode [ 602.088347][T20988] hsr_slave_1: entered promiscuous mode [ 602.094497][T20988] debugfs: 'hsr0' already exists in 'hsr' [ 602.100386][T20988] Cannot create hsr debugfs directory [ 602.238619][T20988] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.327338][T20988] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.403758][T21056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5179'. [ 602.547695][T20988] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.608137][T20988] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.788625][T20988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.804231][T20988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.824551][T21060] syz_tun: entered allmulticast mode [ 602.839666][T20988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.859376][T20988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.892391][ T3541] hid (null): global environment stack underflow [ 602.908000][ T3541] hid-generic 0001:000A:0006.0005: global environment stack underflow [ 602.916451][ T3541] hid-generic 0001:000A:0006.0005: item 0 1 1 11 parsing failed [ 602.939784][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5185'. [ 602.988420][T20988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.000278][ T3541] hid-generic 0001:000A:0006.0005: probe with driver hid-generic failed with error -22 [ 603.027078][T20988] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.049455][T21076] veth7: entered promiscuous mode [ 603.054595][T21076] veth7: entered allmulticast mode [ 603.068866][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.076071][ T1617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.112869][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.120008][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.141687][T21076] netlink: 'syz.0.5187': attribute type 10 has an invalid length. [ 603.161510][T20988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.178312][T21076] bond0: (slave dummy0): Releasing backup interface [ 603.191783][T21076] batman_adv: batadv0: Interface activated: vlan2 [ 603.206570][T21076] team0: Port device dummy0 added [ 603.262679][T21093] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 21093 comm: syz.2.5192) [ 603.318775][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'. [ 603.346859][T20988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.534453][T20988] veth0_vlan: entered promiscuous mode [ 603.551213][T20988] veth1_vlan: entered promiscuous mode [ 603.560938][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5205'. [ 603.582580][T20988] veth0_macvtap: entered promiscuous mode [ 603.591253][T20988] veth1_macvtap: entered promiscuous mode [ 603.595543][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5205'. [ 603.630543][T20988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.642851][T20988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.668817][T20140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.682757][T20140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.702920][T20140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.724455][ T339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.739784][T21137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5208'. [ 603.824294][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5213'. [ 603.973737][T21163] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.5218'. [ 603.997346][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5214'. [ 604.008928][T21163] No such timeout policy "syz1" [ 604.034515][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'. [ 604.053846][T21170] hsr_slave_1 (unregistering): left promiscuous mode [ 604.064269][T21172] FAULT_INJECTION: forcing a failure. [ 604.064269][T21172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.077542][T21172] CPU: 1 UID: 0 PID: 21172 Comm: syz.0.5221 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 604.077575][T21172] Tainted: [W]=WARN [ 604.077582][T21172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.077606][T21172] Call Trace: [ 604.077615][T21172] [ 604.077624][T21172] __dump_stack+0x1d/0x30 [ 604.077651][T21172] dump_stack_lvl+0x95/0xd0 [ 604.077676][T21172] dump_stack+0x15/0x1b [ 604.077713][T21172] should_fail_ex+0x263/0x280 [ 604.077740][T21172] should_fail+0xb/0x20 [ 604.077800][T21172] should_fail_usercopy+0x1a/0x20 [ 604.077877][T21172] _copy_to_user+0x20/0xa0 [ 604.077913][T21172] simple_read_from_buffer+0xb5/0x130 [ 604.077985][T21172] proc_fail_nth_read+0x10e/0x150 [ 604.078023][T21172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 604.078058][T21172] vfs_read+0x1ab/0x7f0 [ 604.078248][T21172] ? __rcu_read_unlock+0x4e/0x70 [ 604.078276][T21172] ? __fget_files+0x184/0x1c0 [ 604.078304][T21172] ? mutex_lock+0x57/0x90 [ 604.078337][T21172] ksys_read+0xdc/0x1a0 [ 604.078370][T21172] __x64_sys_read+0x40/0x50 [ 604.078394][T21172] x64_sys_call+0x2889/0x3000 [ 604.078427][T21172] do_syscall_64+0xc0/0x2a0 [ 604.078456][T21172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.078540][T21172] RIP: 0033:0x7fcda464b58e [ 604.078561][T21172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 604.078585][T21172] RSP: 002b:00007fcda30e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 604.078606][T21172] RAX: ffffffffffffffda RBX: 00007fcda30e76c0 RCX: 00007fcda464b58e [ 604.078620][T21172] RDX: 000000000000000f RSI: 00007fcda30e70a0 RDI: 0000000000000005 [ 604.078714][T21172] RBP: 00007fcda30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 604.078730][T21172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.078746][T21172] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 604.078773][T21172] [ 604.343278][T21176] veth5: entered promiscuous mode [ 604.348440][T21176] veth5: entered allmulticast mode [ 604.357581][T21176] netlink: 'syz.8.5223': attribute type 10 has an invalid length. [ 604.368629][T21176] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 604.378151][T21176] team0: Port device dummy0 removed [ 604.386805][T21176] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 604.521563][T21190] loop8: detected capacity change from 0 to 512 [ 604.530822][T21190] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5228: invalid indirect mapped block 256 (level 2) [ 604.545674][T21190] EXT4-fs (loop8): 2 truncates cleaned up [ 604.552081][T21190] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.879931][T21201] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0000 with DS=0x91 [ 604.995909][T21205] loop5: detected capacity change from 0 to 512 [ 605.043254][T21205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.112349][T21201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.250615][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.344535][T21218] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 21218 comm: syz.0.5237) [ 605.366506][T21216] loop5: detected capacity change from 0 to 512 [ 605.373417][T21216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 605.405859][T21216] EXT4-fs (loop5): 1 truncate cleaned up [ 605.412028][T21216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.450112][T20415] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.504180][T21224] FAULT_INJECTION: forcing a failure. [ 605.504180][T21224] name failslab, interval 1, probability 0, space 0, times 0 [ 605.516947][T21224] CPU: 1 UID: 0 PID: 21224 Comm: syz.0.5240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 605.516981][T21224] Tainted: [W]=WARN [ 605.516989][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.517004][T21224] Call Trace: [ 605.517014][T21224] [ 605.517024][T21224] __dump_stack+0x1d/0x30 [ 605.517056][T21224] dump_stack_lvl+0x95/0xd0 [ 605.517125][T21224] dump_stack+0x15/0x1b [ 605.517149][T21224] should_fail_ex+0x263/0x280 [ 605.517214][T21224] should_failslab+0x8c/0xb0 [ 605.517252][T21224] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 605.517369][T21224] ? __alloc_skb+0x2f0/0x4b0 [ 605.517402][T21224] __alloc_skb+0x2f0/0x4b0 [ 605.517462][T21224] ? __alloc_skb+0x219/0x4b0 [ 605.517575][T21224] netlink_alloc_large_skb+0xbf/0xf0 [ 605.517615][T21224] netlink_sendmsg+0x40c/0x6f0 [ 605.517713][T21224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.517733][T21224] __sock_sendmsg+0x145/0x170 [ 605.517841][T21224] ____sys_sendmsg+0x345/0x4a0 [ 605.517876][T21224] ___sys_sendmsg+0x195/0x1e0 [ 605.518006][T21224] __sys_sendmmsg+0x185/0x320 [ 605.518054][T21224] __x64_sys_sendmmsg+0x57/0x70 [ 605.518094][T21224] x64_sys_call+0x1e28/0x3000 [ 605.518175][T21224] do_syscall_64+0xc0/0x2a0 [ 605.518203][T21224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.518231][T21224] RIP: 0033:0x7fcda468acb9 [ 605.518294][T21224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.518319][T21224] RSP: 002b:00007fcda30e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 605.518361][T21224] RAX: ffffffffffffffda RBX: 00007fcda4905fa0 RCX: 00007fcda468acb9 [ 605.518486][T21224] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 605.518505][T21224] RBP: 00007fcda30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 605.518522][T21224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.518538][T21224] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 605.518563][T21224] [ 605.522202][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.650987][T21227] veth7: entered promiscuous mode [ 605.699898][T21228] netlink: 'syz.8.5239': attribute type 10 has an invalid length. [ 605.702616][T21227] veth7: entered allmulticast mode [ 605.772674][T21228] bond0: (slave dummy0): Releasing backup interface [ 605.801855][T21228] team0: Port device dummy0 added [ 605.915605][T21233] loop5: detected capacity change from 0 to 8192 [ 605.926006][T21233] vfat: Unknown parameter 'GPL' [ 605.936273][T21246] bond0: entered promiscuous mode [ 605.941353][T21246] bond_slave_0: entered promiscuous mode [ 605.947329][T21246] bond_slave_1: entered promiscuous mode [ 605.964297][T21246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.973302][T21246] bond0: left promiscuous mode [ 605.978190][T21246] bond_slave_0: left promiscuous mode [ 605.983850][T21246] bond_slave_1: left promiscuous mode [ 606.006349][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 606.006378][ T29] audit: type=1326 audit(605.969:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.044098][ T29] audit: type=1326 audit(605.999:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.067173][ T29] audit: type=1326 audit(605.999:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.090162][ T29] audit: type=1326 audit(605.999:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.113283][ T29] audit: type=1326 audit(605.999:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.136295][ T29] audit: type=1326 audit(605.999:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.159328][ T29] audit: type=1326 audit(605.999:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.174834][T21250] netdevsim netdevsim0: Direct firmware load for / [ 606.174834][T21250] failed with error -2 [ 606.182436][ T29] audit: type=1326 audit(605.999:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.182465][ T29] audit: type=1326 audit(605.999:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.182489][ T29] audit: type=1326 audit(605.999:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 606.236323][T21252] block device autoloading is deprecated and will be removed. [ 606.357419][T21255] loop5: detected capacity change from 0 to 512 [ 606.369310][T21255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 606.385834][T21255] EXT4-fs (loop5): 1 truncate cleaned up [ 606.391995][T21255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.401301][T21263] veth3: entered promiscuous mode [ 606.409195][T21263] veth3: entered allmulticast mode [ 606.419784][T21258] netlink: 'syz.1.5252': attribute type 10 has an invalid length. [ 606.432727][T21258] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 606.464333][T21268] FAULT_INJECTION: forcing a failure. [ 606.464333][T21268] name failslab, interval 1, probability 0, space 0, times 0 [ 606.477249][T21268] CPU: 1 UID: 0 PID: 21268 Comm: syz.8.5255 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 606.477347][T21268] Tainted: [W]=WARN [ 606.477354][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.477366][T21268] Call Trace: [ 606.477372][T21268] [ 606.477379][T21268] __dump_stack+0x1d/0x30 [ 606.477401][T21268] dump_stack_lvl+0x95/0xd0 [ 606.477441][T21268] dump_stack+0x15/0x1b [ 606.477468][T21268] should_fail_ex+0x263/0x280 [ 606.477501][T21268] should_failslab+0x8c/0xb0 [ 606.477521][T21268] __kmalloc_cache_noprof+0x64/0x4a0 [ 606.477560][T21268] ? alloc_fs_context+0x46/0x590 [ 606.477627][T21268] alloc_fs_context+0x46/0x590 [ 606.477708][T21268] fs_context_for_mount+0x22/0x30 [ 606.477728][T21268] do_new_mount+0xea/0x700 [ 606.477745][T21268] ? security_capable+0x7b/0x90 [ 606.477835][T21268] path_mount+0x4c0/0xb90 [ 606.477852][T21268] ? user_path_at+0xbf/0x130 [ 606.477878][T21268] __se_sys_mount+0x28c/0x2e0 [ 606.477969][T21268] ? fput+0x8f/0xc0 [ 606.477994][T21268] __x64_sys_mount+0x67/0x80 [ 606.478012][T21268] x64_sys_call+0x2cca/0x3000 [ 606.478073][T21268] do_syscall_64+0xc0/0x2a0 [ 606.478094][T21268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.478114][T21268] RIP: 0033:0x7f475995acb9 [ 606.478128][T21268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.478145][T21268] RSP: 002b:00007f47583b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 606.478215][T21268] RAX: ffffffffffffffda RBX: 00007f4759bd5fa0 RCX: 00007f475995acb9 [ 606.478227][T21268] RDX: 0000200000001200 RSI: 00002000000000c0 RDI: 00002000000001c0 [ 606.478239][T21268] RBP: 00007f47583b7090 R08: 0000000000000000 R09: 0000000000000000 [ 606.478250][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.478261][T21268] R13: 00007f4759bd6038 R14: 00007f4759bd5fa0 R15: 00007ffff9026548 [ 606.478279][T21268] [ 606.745436][T18517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.750809][T21273] veth5: entered promiscuous mode [ 606.759539][T21273] veth5: entered allmulticast mode [ 606.790081][T21273] netlink: 'syz.1.5257': attribute type 10 has an invalid length. [ 606.817518][T21280] FAULT_INJECTION: forcing a failure. [ 606.817518][T21280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.830772][T21280] CPU: 0 UID: 0 PID: 21280 Comm: syz.0.5260 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 606.830942][T21280] Tainted: [W]=WARN [ 606.830952][T21280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.830968][T21280] Call Trace: [ 606.831007][T21280] [ 606.831019][T21280] __dump_stack+0x1d/0x30 [ 606.831050][T21280] dump_stack_lvl+0x95/0xd0 [ 606.831076][T21280] dump_stack+0x15/0x1b [ 606.831097][T21280] should_fail_ex+0x263/0x280 [ 606.831144][T21280] should_fail+0xb/0x20 [ 606.831210][T21280] should_fail_usercopy+0x1a/0x20 [ 606.831241][T21280] _copy_from_user+0x1c/0xb0 [ 606.831311][T21280] snd_seq_write+0x1d5/0x560 [ 606.831348][T21280] ? __pfx_snd_seq_write+0x10/0x10 [ 606.831378][T21280] vfs_write+0x269/0x9f0 [ 606.831397][T21280] ? __rcu_read_unlock+0x4e/0x70 [ 606.831497][T21280] ? __fget_files+0x184/0x1c0 [ 606.831536][T21280] ksys_write+0xdc/0x1a0 [ 606.831614][T21280] __x64_sys_write+0x40/0x50 [ 606.831631][T21280] x64_sys_call+0x2847/0x3000 [ 606.831655][T21280] do_syscall_64+0xc0/0x2a0 [ 606.831675][T21280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.831745][T21280] RIP: 0033:0x7fcda468acb9 [ 606.831760][T21280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.831776][T21280] RSP: 002b:00007fcda30e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.831801][T21280] RAX: ffffffffffffffda RBX: 00007fcda4905fa0 RCX: 00007fcda468acb9 [ 606.831874][T21280] RDX: 000000000001001a RSI: 0000200000000000 RDI: 0000000000000003 [ 606.831886][T21280] RBP: 00007fcda30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 606.831900][T21280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.831910][T21280] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 606.831928][T21280] [ 606.832820][T21273] bond0: (slave dummy0): Releasing backup interface [ 607.034268][T21273] team0: Port device dummy0 added [ 607.288024][T21314] FAULT_INJECTION: forcing a failure. [ 607.288024][T21314] name failslab, interval 1, probability 0, space 0, times 0 [ 607.300902][T21314] CPU: 1 UID: 0 PID: 21314 Comm: syz.1.5273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 607.301019][T21314] Tainted: [W]=WARN [ 607.301028][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.301045][T21314] Call Trace: [ 607.301052][T21314] [ 607.301060][T21314] __dump_stack+0x1d/0x30 [ 607.301086][T21314] dump_stack_lvl+0x95/0xd0 [ 607.301109][T21314] dump_stack+0x15/0x1b [ 607.301135][T21314] should_fail_ex+0x263/0x280 [ 607.301165][T21314] should_failslab+0x8c/0xb0 [ 607.301203][T21314] kmem_cache_alloc_noprof+0x68/0x490 [ 607.301232][T21314] ? skb_clone+0x151/0x1f0 [ 607.301355][T21314] skb_clone+0x151/0x1f0 [ 607.301434][T21314] __netlink_deliver_tap+0x2c9/0x500 [ 607.301481][T21314] ? netlink_attachskb+0x2e2/0x660 [ 607.301520][T21314] netlink_sendskb+0x126/0x150 [ 607.301601][T21314] netlink_unicast+0x2a2/0x690 [ 607.301633][T21314] ovs_ct_limit_cmd_get+0x5f8/0x7a0 [ 607.301729][T21314] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 607.301760][T21314] genl_family_rcv_msg_doit+0x187/0x1f0 [ 607.301808][T21314] genl_rcv_msg+0x432/0x470 [ 607.301841][T21314] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 607.301915][T21314] netlink_rcv_skb+0x123/0x220 [ 607.301948][T21314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 607.302047][T21314] genl_rcv+0x28/0x40 [ 607.302068][T21314] netlink_unicast+0x5c0/0x690 [ 607.302104][T21314] netlink_sendmsg+0x5c8/0x6f0 [ 607.302160][T21314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.302189][T21314] __sock_sendmsg+0x145/0x170 [ 607.302218][T21314] ____sys_sendmsg+0x31e/0x4a0 [ 607.302296][T21314] ___sys_sendmsg+0x195/0x1e0 [ 607.302415][T21314] __x64_sys_sendmsg+0xd4/0x160 [ 607.302460][T21314] x64_sys_call+0x17ba/0x3000 [ 607.302515][T21314] do_syscall_64+0xc0/0x2a0 [ 607.302543][T21314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.302572][T21314] RIP: 0033:0x7fa6b5f8acb9 [ 607.302618][T21314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.302642][T21314] RSP: 002b:00007fa6b49e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.302663][T21314] RAX: ffffffffffffffda RBX: 00007fa6b6205fa0 RCX: 00007fa6b5f8acb9 [ 607.302676][T21314] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 607.302689][T21314] RBP: 00007fa6b49e7090 R08: 0000000000000000 R09: 0000000000000000 [ 607.302718][T21314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.302734][T21314] R13: 00007fa6b6206038 R14: 00007fa6b6205fa0 R15: 00007ffd3bae10f8 [ 607.302759][T21314] [ 607.585792][T21317] __nla_validate_parse: 5 callbacks suppressed [ 607.585808][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5274'. [ 607.604383][T21317] bond0: entered promiscuous mode [ 607.609528][T21317] bond_slave_0: entered promiscuous mode [ 607.615565][T21317] bond_slave_1: entered promiscuous mode [ 607.623199][T21317] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 607.631902][T21317] bond0: left promiscuous mode [ 607.636780][T21317] bond_slave_0: left promiscuous mode [ 607.642307][T21317] bond_slave_1: left promiscuous mode [ 607.699497][T21321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5276'. [ 607.709251][T21321] netlink: 'syz.5.5276': attribute type 1 has an invalid length. [ 607.717124][T21321] netlink: 'syz.5.5276': attribute type 1 has an invalid length. [ 607.786283][T21327] veth21: entered promiscuous mode [ 607.791673][T21327] veth21: entered allmulticast mode [ 607.801965][T21327] netlink: 'syz.5.5278': attribute type 10 has an invalid length. [ 607.817802][T21327] bond0: (slave dummy0): Releasing backup interface [ 607.826504][T21327] team0: Device dummy0 is already a lower device of the team interface [ 608.028385][T21336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.095595][T21336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.382233][T21376] FAULT_INJECTION: forcing a failure. [ 608.382233][T21376] name failslab, interval 1, probability 0, space 0, times 0 [ 608.395067][T21376] CPU: 1 UID: 0 PID: 21376 Comm: syz.5.5299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 608.395103][T21376] Tainted: [W]=WARN [ 608.395113][T21376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.395181][T21376] Call Trace: [ 608.395197][T21376] [ 608.395208][T21376] __dump_stack+0x1d/0x30 [ 608.395240][T21376] dump_stack_lvl+0x95/0xd0 [ 608.395274][T21376] dump_stack+0x15/0x1b [ 608.395334][T21376] should_fail_ex+0x263/0x280 [ 608.395358][T21376] should_failslab+0x8c/0xb0 [ 608.395385][T21376] __kvmalloc_node_noprof+0x148/0x680 [ 608.395466][T21376] ? xt_alloc_table_info+0x40/0x80 [ 608.395485][T21376] ? should_fail_ex+0xd9/0x280 [ 608.395514][T21376] xt_alloc_table_info+0x40/0x80 [ 608.395537][T21376] do_ip6t_set_ctl+0x5e5/0x8f0 [ 608.395659][T21376] nf_setsockopt+0x199/0x1b0 [ 608.395691][T21376] ipv6_setsockopt+0x11a/0x130 [ 608.395795][T21376] udpv6_setsockopt+0x99/0xb0 [ 608.395873][T21376] sock_common_setsockopt+0x69/0x80 [ 608.395910][T21376] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 608.395938][T21376] __sys_setsockopt+0x184/0x200 [ 608.395979][T21376] __x64_sys_setsockopt+0x64/0x80 [ 608.396046][T21376] x64_sys_call+0x21d5/0x3000 [ 608.396079][T21376] do_syscall_64+0xc0/0x2a0 [ 608.396227][T21376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.396251][T21376] RIP: 0033:0x7f3aee5bacb9 [ 608.396271][T21376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.396295][T21376] RSP: 002b:00007f3aed017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 608.396403][T21376] RAX: ffffffffffffffda RBX: 00007f3aee835fa0 RCX: 00007f3aee5bacb9 [ 608.396418][T21376] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 608.396430][T21376] RBP: 00007f3aed017090 R08: 0000000000000570 R09: 0000000000000000 [ 608.396456][T21376] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.396474][T21376] R13: 00007f3aee836038 R14: 00007f3aee835fa0 R15: 00007ffcf5df5c18 [ 608.396500][T21376] [ 608.596785][T21348] loop8: detected capacity change from 0 to 1024 [ 608.721869][T21384] FAULT_INJECTION: forcing a failure. [ 608.721869][T21384] name failslab, interval 1, probability 0, space 0, times 0 [ 608.734726][T21384] CPU: 0 UID: 0 PID: 21384 Comm: syz.2.5302 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 608.734760][T21384] Tainted: [W]=WARN [ 608.734770][T21384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.734787][T21384] Call Trace: [ 608.734795][T21384] [ 608.734806][T21384] __dump_stack+0x1d/0x30 [ 608.734837][T21384] dump_stack_lvl+0x95/0xd0 [ 608.734967][T21384] dump_stack+0x15/0x1b [ 608.734993][T21384] should_fail_ex+0x263/0x280 [ 608.735024][T21384] should_failslab+0x8c/0xb0 [ 608.735052][T21384] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 608.735155][T21384] ? __alloc_skb+0x2f0/0x4b0 [ 608.735187][T21384] __alloc_skb+0x2f0/0x4b0 [ 608.735217][T21384] ? __alloc_skb+0x219/0x4b0 [ 608.735343][T21384] netlink_alloc_large_skb+0xbf/0xf0 [ 608.735384][T21384] netlink_sendmsg+0x40c/0x6f0 [ 608.735411][T21384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.735458][T21384] __sock_sendmsg+0x145/0x170 [ 608.735485][T21384] ____sys_sendmsg+0x31e/0x4a0 [ 608.735528][T21384] ___sys_sendmsg+0x195/0x1e0 [ 608.735725][T21384] __x64_sys_sendmsg+0xd4/0x160 [ 608.735771][T21384] x64_sys_call+0x17ba/0x3000 [ 608.735870][T21384] do_syscall_64+0xc0/0x2a0 [ 608.735896][T21384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.735969][T21384] RIP: 0033:0x7f23d610acb9 [ 608.735988][T21384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.736009][T21384] RSP: 002b:00007f23d4b67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.736040][T21384] RAX: ffffffffffffffda RBX: 00007f23d6385fa0 RCX: 00007f23d610acb9 [ 608.736095][T21384] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 608.736162][T21384] RBP: 00007f23d4b67090 R08: 0000000000000000 R09: 0000000000000000 [ 608.736177][T21384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.736191][T21384] R13: 00007f23d6386038 R14: 00007f23d6385fa0 R15: 00007ffeb647e918 [ 608.736214][T21384] [ 609.053207][T21348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 609.067298][T21348] System zones: 0-1, 3-12 [ 609.101343][T21348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.164308][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5305'. [ 609.216969][T20415] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.259019][T21403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5309'. [ 609.287137][T21406] loop2: detected capacity change from 0 to 128 [ 609.296478][T21406] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 512 [ 609.390701][T21410] loop8: detected capacity change from 0 to 512 [ 609.397589][T21410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 609.406564][T21410] EXT4-fs (loop8): 1 truncate cleaned up [ 609.419456][T21410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.508587][T20415] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.570739][T21415] veth9: entered promiscuous mode [ 609.575888][T21415] veth9: entered allmulticast mode [ 609.591774][T21415] netlink: 'syz.8.5313': attribute type 10 has an invalid length. [ 609.652697][T21419] loop8: detected capacity change from 0 to 128 [ 609.668746][T21419] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 609.688608][T21419] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5315'. [ 609.740373][T20415] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 609.769293][T20415] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 609.784570][T20415] EXT4-fs error (device loop8): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 609.799489][T20415] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 609.815833][T20415] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 609.839390][T20415] EXT4-fs error (device loop8): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 609.854058][T20415] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 609.874083][T20415] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 609.897662][T20415] EXT4-fs error (device loop8): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 609.911289][T20415] EXT4-fs error (device loop8): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 609.994019][T21438] FAULT_INJECTION: forcing a failure. [ 609.994019][T21438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.007322][T21438] CPU: 0 UID: 0 PID: 21438 Comm: syz.1.5322 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 610.007408][T21438] Tainted: [W]=WARN [ 610.007417][T21438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.007434][T21438] Call Trace: [ 610.007444][T21438] [ 610.007455][T21438] __dump_stack+0x1d/0x30 [ 610.007487][T21438] dump_stack_lvl+0x95/0xd0 [ 610.007584][T21438] dump_stack+0x15/0x1b [ 610.007611][T21438] should_fail_ex+0x263/0x280 [ 610.007639][T21438] should_fail+0xb/0x20 [ 610.007660][T21438] should_fail_usercopy+0x1a/0x20 [ 610.007760][T21438] _copy_from_user+0x1c/0xb0 [ 610.007798][T21438] kstrtouint_from_user+0x69/0xf0 [ 610.007823][T21438] ? 0xffffffff81000000 [ 610.007885][T21438] ? selinux_file_permission+0x1e1/0x320 [ 610.007996][T21438] proc_fail_nth_write+0x50/0x160 [ 610.008070][T21438] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 610.008107][T21438] vfs_write+0x269/0x9f0 [ 610.008126][T21438] ? __rcu_read_unlock+0x4e/0x70 [ 610.008146][T21438] ? __fget_files+0x184/0x1c0 [ 610.008168][T21438] ? mutex_lock+0x57/0x90 [ 610.008243][T21438] ksys_write+0xdc/0x1a0 [ 610.008269][T21438] __x64_sys_write+0x40/0x50 [ 610.008333][T21438] x64_sys_call+0x2847/0x3000 [ 610.008435][T21438] do_syscall_64+0xc0/0x2a0 [ 610.008467][T21438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.008561][T21438] RIP: 0033:0x7fa6b5f4b58e [ 610.008577][T21438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 610.008611][T21438] RSP: 002b:00007fa6b49e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 610.008691][T21438] RAX: ffffffffffffffda RBX: 00007fa6b49e76c0 RCX: 00007fa6b5f4b58e [ 610.008732][T21438] RDX: 0000000000000001 RSI: 00007fa6b49e70a0 RDI: 0000000000000004 [ 610.008745][T21438] RBP: 00007fa6b49e7090 R08: 0000000000000000 R09: 0000000000000000 [ 610.008757][T21438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.008769][T21438] R13: 00007fa6b6206038 R14: 00007fa6b6205fa0 R15: 00007ffd3bae10f8 [ 610.008817][T21438] [ 610.279566][T20732] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 610.419221][T21469] FAULT_INJECTION: forcing a failure. [ 610.419221][T21469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.432583][T21469] CPU: 0 UID: 0 PID: 21469 Comm: syz.2.5336 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 610.432667][T21469] Tainted: [W]=WARN [ 610.432706][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.432723][T21469] Call Trace: [ 610.432731][T21469] [ 610.432741][T21469] __dump_stack+0x1d/0x30 [ 610.432772][T21469] dump_stack_lvl+0x95/0xd0 [ 610.432799][T21469] dump_stack+0x15/0x1b [ 610.432852][T21469] should_fail_ex+0x263/0x280 [ 610.432911][T21469] should_fail+0xb/0x20 [ 610.432937][T21469] should_fail_usercopy+0x1a/0x20 [ 610.433019][T21469] _copy_from_user+0x1c/0xb0 [ 610.433109][T21469] do_ipv6_setsockopt+0x124/0x21d0 [ 610.433134][T21469] ? kstrtoull+0x111/0x140 [ 610.433163][T21469] ? avc_has_perm_noaudit+0xab/0x130 [ 610.433188][T21469] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 610.433265][T21469] ipv6_setsockopt+0x59/0x130 [ 610.433322][T21469] udpv6_setsockopt+0x99/0xb0 [ 610.433416][T21469] sock_common_setsockopt+0x69/0x80 [ 610.433440][T21469] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 610.433499][T21469] __sys_setsockopt+0x184/0x200 [ 610.433537][T21469] __x64_sys_setsockopt+0x64/0x80 [ 610.433577][T21469] x64_sys_call+0x21d5/0x3000 [ 610.433607][T21469] do_syscall_64+0xc0/0x2a0 [ 610.433635][T21469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.433663][T21469] RIP: 0033:0x7f23d610acb9 [ 610.433685][T21469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.433798][T21469] RSP: 002b:00007f23d4b67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 610.433825][T21469] RAX: ffffffffffffffda RBX: 00007f23d6385fa0 RCX: 00007f23d610acb9 [ 610.433843][T21469] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 610.433878][T21469] RBP: 00007f23d4b67090 R08: 0000000000000004 R09: 0000000000000000 [ 610.433894][T21469] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 610.433909][T21469] R13: 00007f23d6386038 R14: 00007f23d6385fa0 R15: 00007ffeb647e918 [ 610.433932][T21469] [ 610.660691][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.702339][T21464] veth9: entered promiscuous mode [ 610.707518][T21464] veth9: entered allmulticast mode [ 610.729246][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.739426][T21464] netlink: 'syz.0.5333': attribute type 10 has an invalid length. [ 610.777574][T21464] batman_adv: batadv0: Interface deactivated: vlan2 [ 610.803948][T21464] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 610.825815][T21464] team0: Port device dummy0 removed [ 610.853779][T21464] batman_adv: batadv0: Interface activated: vlan2 [ 610.872052][T21464] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 610.896796][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5344'. [ 610.928245][T21478] syzkaller0: entered promiscuous mode [ 610.933790][T21478] syzkaller0: entered allmulticast mode [ 610.944080][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.014341][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.034243][T21502] FAULT_INJECTION: forcing a failure. [ 611.034243][T21502] name failslab, interval 1, probability 0, space 0, times 0 [ 611.047131][T21502] CPU: 1 UID: 0 PID: 21502 Comm: syz.0.5346 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 611.047174][T21502] Tainted: [W]=WARN [ 611.047210][T21502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.047227][T21502] Call Trace: [ 611.047238][T21502] [ 611.047249][T21502] __dump_stack+0x1d/0x30 [ 611.047380][T21502] dump_stack_lvl+0x95/0xd0 [ 611.047402][T21502] dump_stack+0x15/0x1b [ 611.047425][T21502] should_fail_ex+0x263/0x280 [ 611.047457][T21502] should_failslab+0x8c/0xb0 [ 611.047622][T21502] kmem_cache_alloc_noprof+0x68/0x490 [ 611.047653][T21502] ? __anon_vma_prepare+0xcd/0x2f0 [ 611.047690][T21502] __anon_vma_prepare+0xcd/0x2f0 [ 611.047760][T21502] handle_mm_fault+0x2163/0x3030 [ 611.047872][T21502] ? __rcu_read_unlock+0x4e/0x70 [ 611.047907][T21502] ? check_vma_flags+0x26d/0x330 [ 611.048014][T21502] __get_user_pages+0x1023/0x1ea0 [ 611.048127][T21502] __gup_longterm_locked+0x8d7/0xe30 [ 611.048246][T21502] ? security_ptrace_access_check+0x61/0x70 [ 611.048288][T21502] ? __ptrace_may_access+0x2bc/0x340 [ 611.048389][T21502] pin_user_pages_remote+0x7e/0xb0 [ 611.048435][T21502] process_vm_rw+0x49b/0x9c0 [ 611.048493][T21502] __x64_sys_process_vm_writev+0x78/0x90 [ 611.048592][T21502] x64_sys_call+0x27ef/0x3000 [ 611.048617][T21502] do_syscall_64+0xc0/0x2a0 [ 611.048639][T21502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.048664][T21502] RIP: 0033:0x7fcda468acb9 [ 611.048706][T21502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.048738][T21502] RSP: 002b:00007fcda30e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 611.048767][T21502] RAX: ffffffffffffffda RBX: 00007fcda4905fa0 RCX: 00007fcda468acb9 [ 611.048785][T21502] RDX: 0000000000000020 RSI: 0000200000001c80 RDI: 00000000000001c6 [ 611.048801][T21502] RBP: 00007fcda30e7090 R08: 0000000000000001 R09: 0000000000000000 [ 611.048819][T21502] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 611.048836][T21502] R13: 00007fcda4906038 R14: 00007fcda4905fa0 R15: 00007fff268c0a68 [ 611.048864][T21502] [ 611.327081][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5348'. [ 611.336052][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 611.355881][ T3744] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.365856][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5348'. [ 611.374830][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5348'. [ 611.403530][T21507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=21507 comm=syz.1.5348 [ 611.429906][ T3744] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.439028][ T31] bridge_slave_1: left allmulticast mode [ 611.445236][ T31] bridge_slave_1: left promiscuous mode [ 611.451040][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.460839][ T31] bridge_slave_0: left allmulticast mode [ 611.466612][ T31] bridge_slave_0: left promiscuous mode [ 611.472335][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.500954][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 611.500974][ T29] audit: type=1326 audit(611.459:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.536156][ T29] audit: type=1326 audit(611.499:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.559149][ T29] audit: type=1326 audit(611.499:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.582290][ T29] audit: type=1326 audit(611.499:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.605409][ T29] audit: type=1326 audit(611.499:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.628347][ T29] audit: type=1326 audit(611.499:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.651358][ T29] audit: type=1326 audit(611.499:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.674304][ T29] audit: type=1326 audit(611.499:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.697349][ T29] audit: type=1326 audit(611.499:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.721966][ T29] audit: type=1326 audit(611.499:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda468acb9 code=0x7ffc0000 [ 611.849666][T21533] netlink: 'syz.5.5355': attribute type 10 has an invalid length. [ 611.860230][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.870830][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.880815][ T31] bond0 (unregistering): Released all slaves [ 611.891988][ T3744] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.940888][T21535] syzkaller0: entered promiscuous mode [ 611.946669][T21535] syzkaller0: entered allmulticast mode [ 611.961217][T21530] veth23: entered promiscuous mode [ 611.966539][T21530] veth23: entered allmulticast mode [ 611.974621][T21533] team0: Failed to send port change of device vlan2 via netlink (err -105) [ 611.987725][T21533] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 612.002472][ T3744] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.011462][ T31] tipc: Disabling bearer [ 612.016809][ T31] tipc: Left network mode [ 612.043207][ T31] hsr_slave_0: left promiscuous mode [ 612.053658][ T31] hsr_slave_1: left promiscuous mode [ 612.065809][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.073261][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.083037][T21546] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 21546 comm: syz.5.5358) [ 612.108421][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.115952][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.132194][ T31] veth1_macvtap: left promiscuous mode [ 612.138040][ T31] veth0_macvtap: left promiscuous mode [ 612.143789][ T31] veth1_vlan: left promiscuous mode [ 612.152997][ T31] veth0_vlan: left promiscuous mode [ 612.172985][T21548] loop2: detected capacity change from 0 to 4096 [ 612.186124][T21548] EXT4-fs: Ignoring removed bh option [ 612.195682][T21548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.286186][ T31] team0 (unregistering): Port device team_slave_1 removed [ 612.290688][ T31] team0 (unregistering): Port device team_slave_0 removed [ 612.330495][T21553] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz.2.5359: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 612.330722][T21553] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz.2.5359: directory missing '..' [ 612.350658][ T31] team0 (unregistering): Port device dummy0 removed [ 612.373431][T21541] netdevsim netdevsim1: Direct firmware load for / [ 612.373431][T21541] failed with error -2 [ 612.524733][T21569] loop5: detected capacity change from 0 to 128 [ 612.556411][T14432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.607772][T21484] chnl_net:caif_netlink_parms(): no params data found [ 612.690167][T21579] netdevsim netdevsim1: Direct firmware load for / [ 612.690167][T21579] failed with error -2 [ 612.804777][T21593] __nla_validate_parse: 1 callbacks suppressed [ 612.804796][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5365'. [ 612.860993][T21484] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.868198][T21484] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.895058][T21594] loop2: detected capacity change from 0 to 512 [ 612.915827][T21484] bridge_slave_0: entered allmulticast mode [ 612.994586][T21484] bridge_slave_0: entered promiscuous mode [ 613.028058][T21484] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.035239][T21484] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.076698][T21594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5366: bg 0: block 393: padding at end of block bitmap is not set [ 613.099188][T21484] bridge_slave_1: entered allmulticast mode [ 613.107352][T21484] bridge_slave_1: entered promiscuous mode [ 613.139775][T21597] veth7: entered promiscuous mode [ 613.144899][T21597] veth7: entered allmulticast mode [ 613.162772][T21594] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 613.196868][T21594] EXT4-fs (loop2): 2 truncates cleaned up [ 613.210475][T21597] netlink: 'syz.1.5368': attribute type 10 has an invalid length. [ 613.246051][T21594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.260548][T21484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.273360][T21597] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 613.283081][T21597] team0: Port device dummy0 removed [ 613.293588][T21597] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 613.304473][T21484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.340452][T21484] team0: Port device team_slave_0 added [ 613.347702][T21484] team0: Port device team_slave_1 added [ 613.366337][T21484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.373437][T21484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.401401][T21484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.445441][T21484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.452472][T21484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.478544][T21484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.545965][T14432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.579405][T21484] hsr_slave_0: entered promiscuous mode [ 613.609259][T21484] hsr_slave_1: entered promiscuous mode [ 613.636023][T21484] debugfs: 'hsr0' already exists in 'hsr' [ 613.641830][T21484] Cannot create hsr debugfs directory [ 613.666735][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5371'. [ 614.080200][T21484] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.108690][T21484] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.130425][T21484] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.154398][T21484] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.315509][T21484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.372108][T21484] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.407231][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.414913][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.450668][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.457911][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.466316][T21742] netdevsim netdevsim1: Direct firmware load for / [ 614.466316][T21742] failed with error -2 [ 614.717483][T21484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.785742][T21771] loop2: detected capacity change from 0 to 1764 [ 614.826683][T21771] iso9660: Unknown parameter 'hgId' [ 614.968108][T21823] veth11: entered promiscuous mode [ 614.973324][T21823] veth11: entered allmulticast mode [ 614.984043][T21823] netlink: 'syz.0.5400': attribute type 10 has an invalid length. [ 615.006929][T21823] batman_adv: batadv0: Interface deactivated: vlan2 [ 615.030474][T21831] ================================================================== [ 615.038715][T21831] BUG: KCSAN: data-race in css_set_move_task / memcpy_and_pad [ 615.046236][T21831] [ 615.048600][T21831] write to 0xffff888102534b60 of 8 bytes by task 31 on cpu 1: [ 615.056080][T21831] css_set_move_task+0x212/0x430 [ 615.061065][T21831] cgroup_task_dead+0x6f/0x2b0 [ 615.065954][T21831] finish_task_switch+0x1b1/0x280 [ 615.071114][T21831] __schedule+0x82d/0xc90 [ 615.075526][T21831] schedule+0x5e/0xd0 [ 615.079546][T21831] do_wait+0x10e/0x240 [ 615.083648][T21831] kernel_wait+0x72/0x100 [ 615.088008][T21831] call_usermodehelper_exec_work+0x9c/0x160 [ 615.094504][T21831] process_scheduled_works+0x4cd/0x9d0 [ 615.100537][T21831] worker_thread+0x581/0x770 [ 615.105170][T21831] kthread+0x488/0x510 [ 615.109289][T21831] ret_from_fork+0x148/0x280 [ 615.113940][T21831] ret_from_fork_asm+0x1a/0x30 [ 615.118734][T21831] [ 615.121080][T21831] read to 0xffff888102534200 of 3264 bytes by task 21831 on cpu 0: [ 615.128991][T21831] memcpy_and_pad+0x48/0x80 [ 615.133697][T21831] arch_dup_task_struct+0x2c/0x40 [ 615.138935][T21831] dup_task_struct+0x6e/0x940 [ 615.143642][T21831] copy_process+0x37e/0x1f10 [ 615.148445][T21831] kernel_clone+0x16b/0x5b0 [ 615.152985][T21831] __x64_sys_clone+0x143/0x180 [ 615.157874][T21831] x64_sys_call+0x12d0/0x3000 [ 615.162595][T21831] do_syscall_64+0xc0/0x2a0 [ 615.167126][T21831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.173047][T21831] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 615.175392][T21831] Reported by Kernel Concurrency Sanitizer on: [ 615.181563][T21831] CPU: 0 UID: 0 PID: 21831 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 615.193481][T21831] Tainted: [W]=WARN [ 615.197307][T21831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.207385][T21831] ================================================================== [ 615.468552][T21580] syz_tun (unregistering): left allmulticast mode [ 615.578818][ T8044] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.588719][ T8044] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.689719][ T8044] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.699705][ T8044] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.760312][ T8044] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.770427][ T8044] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.827335][ T8044] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.837323][ T8044] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.940114][ T8044] bridge_slave_1: left allmulticast mode [ 615.946153][ T8044] bridge_slave_1: left promiscuous mode [ 615.951939][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.961109][ T8044] bridge_slave_0: left allmulticast mode [ 615.966935][ T8044] bridge_slave_0: left promiscuous mode [ 615.972684][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.157597][ T8044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.168520][ T8044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.179490][ T8044] bond0 (unregistering): Released all slaves [ 616.187707][ T8044] bond1 (unregistering): (slave bond2): Releasing backup interface [ 616.196330][ T8044] bond1 (unregistering): Released all slaves [ 616.205482][ T8044] bond2 (unregistering): Released all slaves [ 616.248173][ T8044] tipc: Left network mode [ 616.262155][ T8044] hsr_slave_0: left promiscuous mode [ 616.267995][ T8044] hsr_slave_1: left promiscuous mode [ 616.273720][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.281228][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.296923][ T8044] veth1_macvtap: left promiscuous mode [ 616.302547][ T8044] veth0_macvtap: left promiscuous mode [ 616.308648][ T8044] veth1_vlan: left promiscuous mode [ 616.313948][ T8044] veth0_vlan: left promiscuous mode [ 617.483866][ T8044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.494251][ T8044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.548437][ T8044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.558833][ T8044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.599343][ T8044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.609909][ T8044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.678559][ T8044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.689220][ T8044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.806043][ T8044] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.858725][ T8044] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.909246][ T8044] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.958594][ T8044] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.027140][ T8044] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.068529][ T8044] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.118972][ T8044] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.169004][ T8044] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.252011][ T8044] bridge_slave_1: left allmulticast mode [ 618.257786][ T8044] bridge_slave_1: left promiscuous mode [ 618.263446][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.272318][ T8044] bridge_slave_0: left allmulticast mode [ 618.278111][ T8044] bridge_slave_0: left promiscuous mode [ 618.283845][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.293338][ T8044] bridge_slave_1: left allmulticast mode [ 618.299088][ T8044] bridge_slave_1: left promiscuous mode [ 618.304848][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.312941][ T8044] bridge_slave_0: left allmulticast mode [ 618.318824][ T8044] bridge_slave_0: left promiscuous mode [ 618.324543][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.333702][ T8044] bridge_slave_1: left allmulticast mode [ 618.339474][ T8044] bridge_slave_1: left promiscuous mode [ 618.345219][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.356542][ T8044] bridge_slave_0: left allmulticast mode [ 618.362432][ T8044] bridge_slave_0: left promiscuous mode [ 618.368243][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.379198][ T8044] bridge_slave_1: left allmulticast mode [ 618.384990][ T8044] bridge_slave_1: left promiscuous mode [ 618.390862][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.399350][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.568110][ T8044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.579074][ T8044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.588934][ T8044] bond0 (unregistering): Released all slaves [ 618.648122][ T8044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.658163][ T8044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.668976][ T8044] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 618.678641][ T8044] bond0 (unregistering): Released all slaves [ 618.777916][ T8044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.788493][ T8044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.798991][ T8044] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 618.810992][ T8044] bond0 (unregistering): Released all slaves [ 618.957678][ T8044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.968220][ T8044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.978777][ T8044] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 618.987960][ T8044] bond0 (unregistering): Released all slaves [ 619.056874][ T8044] tipc: Left network mode [ 619.061823][ T8044] tipc: Left network mode [ 619.072809][ T8044] hsr_slave_0: left promiscuous mode [ 619.079903][ T8044] hsr_slave_1: left promiscuous mode [ 619.086487][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.094424][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.105104][ T8044] hsr_slave_0: left promiscuous mode [ 619.111943][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.119776][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.129393][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.136941][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.148488][ T8044] hsr_slave_0: left promiscuous mode [ 619.154446][ T8044] hsr_slave_1: left promiscuous mode [ 619.161815][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.169995][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.178149][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.185738][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.197154][ T8044] hsr_slave_0: left promiscuous mode [ 619.204042][ T8044] hsr_slave_1: left promiscuous mode [ 619.210322][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.217823][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.225934][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.233513][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.242119][ T8044] batman_adv: batadv0: Removing interface: vlan2 [ 619.256714][ T8044] veth1_macvtap: left promiscuous mode [ 619.262439][ T8044] veth0_macvtap: left promiscuous mode [ 619.268487][ T8044] veth1_vlan: left promiscuous mode [ 619.273847][ T8044] veth0_vlan: left promiscuous mode [ 619.279709][ T8044] veth1_macvtap: left promiscuous mode [ 619.285482][ T8044] veth0_macvtap: left promiscuous mode [ 619.291182][ T8044] veth1_vlan: left promiscuous mode [ 619.297305][ T8044] veth0_vlan: left promiscuous mode [ 619.303169][ T8044] veth1_macvtap: left promiscuous mode [ 619.308784][ T8044] veth0_macvtap: left promiscuous mode [ 619.314360][ T8044] veth1_vlan: left promiscuous mode [ 619.319949][ T8044] veth0_vlan: left promiscuous mode [ 619.498925][ T8044] team0 (unregistering): Port device team_slave_1 removed [ 619.508863][ T8044] team0 (unregistering): Port device team_slave_0 removed [ 619.576516][ T8044] team0 (unregistering): Port device team_slave_1 removed [ 619.586945][ T8044] team0 (unregistering): Port device team_slave_0 removed [ 619.646582][ T8044] team0 (unregistering): Port device vlan2 removed [ 619.681384][ T8044] team0 (unregistering): Port device team_slave_1 removed [ 619.691934][ T8044] team0 (unregistering): Port device team_slave_0 removed [ 619.764848][ T8044] team0 (unregistering): Port device team_slave_1 removed [ 619.776719][ T8044] team0 (unregistering): Port device team_slave_0 removed