last executing test programs: 12m32.930287211s ago: executing program 4 (id=4022): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0x10, 0x2e}, {0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x400009, 0xffffffffffffffbe, 0x1, 0xd}, 0x10000, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x0, @in=@empty, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="00000000000000001000800000000000000000005e3d8c7eb9e94aca899b0382aefaae", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 12m32.333290416s ago: executing program 4 (id=4027): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) shutdown(r0, 0x1) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106}}, 0x20) sendmsg$key(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") add_key(0x0, 0x0, &(0x7f0000000500)="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", 0x1c5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000000000000070000000900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797830000000000900010073797a3000000000080005400000000d4c0012803c0001800a0001006c696d69740000002c0002800c00024000000000000010000c0001400000000000000001080004400000000108000340000100000c000180080001006475700808000340000001"], 0xd8}}, 0x20050800) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) mlockall(0x7) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000004000000040000000400000000000000", @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYBLOB="0400f510e067724e8cf1fe4b243e25b3b5bf1e5c38e15f2383d2f68bdc", @ANYRES32=0x0, @ANYBLOB="00000000f05f00000000000000000000000000000000000085263169f29567ab3b95bc291d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000001480)=ANY=[@ANYRES16=r1, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m31.204208563s ago: executing program 4 (id=4031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="c3fae4", 0x3}], 0x1) 12m31.041962267s ago: executing program 4 (id=4033): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') getdents64(r0, 0x0, 0x0) setfsgid(0xee01) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='io\x00') pread64(r3, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 12m30.457024682s ago: executing program 4 (id=4038): pipe2(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000001d40), 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000000), 0x2, &(0x7f0000000380)={&(0x7f0000000600)=@canfd={{0x4, 0x0, 0x1}, 0xe, 0x3, 0x0, 0x0, "4d0e9c76bf9c4fcd08b419029f1743aeee4f878df7d325a18f2216269763670cdca073aa13aef13678a345e55f01891758001a4ba9cd71f3126ee53697420270"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x1, 0x704, 0x7}, 0x30}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r4, &(0x7f0000000b80)=ANY=[], 0x40) 12m30.146419409s ago: executing program 4 (id=4041): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0x10, 0x2e}, {0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x400009, 0xffffffffffffffbe, 0x1, 0xd}, 0x10000, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x0, @in=@empty, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="00000000000000001000800000000000000000005e3d8c7eb9e94aca899b0382aefaae29", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 12m30.071397691s ago: executing program 32 (id=4041): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0x10, 0x2e}, {0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x400009, 0xffffffffffffffbe, 0x1, 0xd}, 0x10000, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x0, @in=@empty, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="00000000000000001000800000000000000000005e3d8c7eb9e94aca899b0382aefaae29", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 12m29.370303968s ago: executing program 3 (id=4046): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x81, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000480)="c3fae4", 0x3}], 0x1) 12m28.220403086s ago: executing program 3 (id=4049): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private1, 0x4e21, 0x5, 0x4e23, 0x3, 0xa, 0x20, 0x10, 0x2e}, {0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x400009, 0xffffffffffffffbe, 0x1, 0xd}, 0x10000, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x0, @in=@empty, 0x80000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYBLOB="00000000000000001000800000000000000000005e3d8c7eb9e94aca899b0382aefaae2964", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 12m27.860734515s ago: executing program 3 (id=4054): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000d40)='./trace\x00', &(0x7f0000000d80)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000dc0)='./trace/error_log\x00', 0x118) r1 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x15}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) r2 = fsopen(&(0x7f0000000e00)='cramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1c0) openat(r3, &(0x7f0000000c40)='./file1\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', r3, &(0x7f0000000cc0)='./file0\x00', 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x208, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x44ad}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x16, 0x1d3a}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfd}, {0x6, 0x16, 0x5dec}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0xff}, {0x5}}]}, 0x208}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace\x00', 0x1ff) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000640), &(0x7f0000000e40), 0x2, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r6, &(0x7f0000000580)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 12m27.639716121s ago: executing program 3 (id=4056): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') getdents64(r0, 0x0, 0x0) setfsgid(0xee01) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='io\x00') pread64(r3, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 12m27.066603195s ago: executing program 3 (id=4060): ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000200)=0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() semget(0x0, 0x4, 0x28) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffef8, 0x4000004}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x3}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "feb19c0398d4ce8052eb415f9ac5f7c3"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r0, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/39, 0x27}}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, r4, 0x1, 0xfffffffd, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000780)=""/164, 0x89, 0xa4, 0x0, 0x7, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000000000071118500000000008510000002000000850000000000000095000000000000009500a5050000000009d237fef8a48399884cab2da9757372e2c329becb28544ad591fafd1e952be730289bd9b6d6cd087a42a4f011ea802097fef0f01ae863d47daec96925bd619e1549a86a6f67a5b7688160143385d32735ebed1c0db254bc3bb32059daeb37242591df49a7d6f06316b7f786fe95c22de98a07e9506e"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xd4, &(0x7f0000000900)=""/212, 0x0, 0x4, '\x00', 0x0, @fallback, r5, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) syz_open_procfs(r1, &(0x7f0000000140)='clear_refs\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000013c0)={'ip_vti0\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x8000, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010102, @multicast1}}}}) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 12m26.264853945s ago: executing program 3 (id=4064): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') getdents64(r0, 0x0, 0x0) setfsgid(0xee01) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='io\x00') pread64(r3, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 12m26.264601595s ago: executing program 33 (id=4064): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') getdents64(r0, 0x0, 0x0) setfsgid(0xee01) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='io\x00') pread64(r3, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 11m29.0981969s ago: executing program 2 (id=4391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000240)="278ca568de16719bd16a70089ff4d88404e0bc494e2e850343db4533edc4ffdff00d83c7ccf60b62a3766956a85857e3f5d3dabfe9f404ae168daad5bae1db5023470e3a21152b", 0x0}, 0x20) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000090000000000000000001400078008001140000000000500150040000000050001"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000240)={0x50c6, 0x80, 0x3d2}) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000080)={0xf000200a}) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x15}}, 'veth1_to_bridge\x00'}) iopl(0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @private=0xa010101}}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 11m28.205783302s ago: executing program 2 (id=4394): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') getdents64(r1, 0x0, 0x0) setfsgid(0xee01) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='io\x00') pread64(r3, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, r1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, r1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003200)="01000000030000006400000000000000000000000000000000000000000000000000000000000000000000000000000002000000010000", 0x37}, {&(0x7f0000000440)="dbd5", 0x2}], 0x2}}], 0x2, 0x880) truncate(&(0x7f0000000900)='./file1\x00', 0x1000720) 11m27.145203178s ago: executing program 2 (id=4402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4c000, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000800)={0x7, "ecab6a930ac5a0412dcd8aeca607f4a3c568c5f3633d2219ea01b95d22c059d52d9acfb4026de516ecc306c73c2cdd14fdf81a8802cbc44fb0d2fa101ece7b6873b132890941992be5ccfc780216f1092df01488fdcedd75fd04a324b86ac7961b66b305793f3f5bc0ded89a4465cc1264ad52279167922dbdf4210048b603829a411a6a0ccd4783ee0773912658fdc4c0b0738d55431f060c4bbe3d581908a9c1deb3a8698483852c0fc48ebc80b93c2f10909ab5d0dc03fed7876387fadd5ff33dc8c9fc665f30181fa3fabfa1efc089fb621c268c4425f7e2d09b078a559442b7082901c78f95925434f6e4d8485b32d2e91383a663acf80e2c75b45fc113e22e5e0318d83d299c011af4db73768caf0dd2b59a16266f1f28364ffc69f358fc6a67d145bae64f03152c7fec833e85853effce1854d63961f3382f9c27eb6e59f3910ffeef894c28572e79e75a7e6ad611ad026be470a397a4b317f17e6701dfc2cf33bff239a8ecb936b600ac5824e171211eb1a3ec3227b0d5b053344fadc9adbdae9bedc2382e2b6bd36696fc949e3e9139d376513e5cac2f22b5411f10052d29cd215be72c2a7e08dbf01f0a68a8ef0f0a9e05d8bf49c884e8ab878c882c3664c7674d4d6f8e1ffa7e14ea4516faded13329ff8014922df4bd2233a8d4e74ca722f4e78d02635e4aec92eab82b4017687d89b60694e2e87f5a44f78689"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c00024000000000000000011400000011"], 0x60}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x45, &(0x7f00000001c0)=ANY=[], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c00030006000000000000b4080001006370"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 11m26.910949614s ago: executing program 2 (id=4407): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='io\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 11m26.678847919s ago: executing program 2 (id=4408): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) shutdown(r0, 0x1) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106}}, 0x20) sendmsg$key(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") add_key(0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000000000000070000000900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797830000000000900010073797a3000000000080005400000000d4c0012803c0001800a0001006c696d69740000002c0002800c00024000000000000010000c0001400000000000000001080004400000000108000340000100000c000180080001006475700808000340000001"], 0xd8}}, 0x20050800) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r5, 0x0) mlockall(0x7) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000004000000040000000400000000000000", @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYBLOB="0400f510e067724e8cf1fe4b243e25b3b5bf1e5c38e15f2383d2f68bdc", @ANYRES32=0x0, @ANYBLOB="00000000f05f00000000000000000000000000000000000085263169f29567ab3b95bc291d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000001480)=ANY=[@ANYRES16=r1, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m26.24663496s ago: executing program 2 (id=4411): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x81, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000480)="c3fae4", 0x3}], 0x1) 11m26.176244012s ago: executing program 34 (id=4411): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x81, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000480)="c3fae4", 0x3}], 0x1) 11m22.254327258s ago: executing program 7 (id=4434): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="00000000000000001000800000000000000000005e3d8c7eb9e94aca", @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x20000004) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 11m21.709382202s ago: executing program 7 (id=4437): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x81, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000480)="c3fae4", 0x3}], 0x1) 11m20.430152113s ago: executing program 7 (id=4446): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) shutdown(r0, 0x1) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106}}, 0x20) sendmsg$key(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") add_key(0x0, 0x0, &(0x7f0000000500)="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", 0x1c5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000000000000070000000900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797830000000000900010073797a3000000000080005400000000d4c0012803c0001800a0001006c696d69740000002c0002800c00024000000000000010000c0001400000000000000001080004400000000108000340000100000c000180080001006475700808000340000001"], 0xd8}}, 0x20050800) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r5, 0x0) mlockall(0x7) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000004000000040000000400000000000000", @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYBLOB="0400f510e067724e8cf1fe4b243e25b3b5bf1e5c38e15f2383d2f68bdc", @ANYRES32=0x0, @ANYBLOB="00000000f05f00000000000000000000000000000000000085263169f29567ab3b95bc291d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000001480)=ANY=[@ANYRES16=r1, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m19.576975904s ago: executing program 7 (id=4452): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000, 0xf}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='io\x00') pread64(r3, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x100f, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc159, 0x0, 0x7, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 11m19.239450562s ago: executing program 7 (id=4457): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$key(0xf, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) sendmsg$key(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") add_key(0x0, 0x0, &(0x7f0000000500)="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", 0x1c5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000000000000070000000900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797830000000000900010073797a3000000000080005400000000d4c0012803c0001800a0001006c696d69740000002c0002800c00024000000000000010000c0001400000000000000001080004400000000108000340000100000c000180080001006475700808000340000001"], 0xd8}}, 0x20050800) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r5, 0x0) mlockall(0x7) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200000004000000040000000400000000000000", @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYBLOB="0400f510e067724e8cf1fe4b243e25b3b5bf1e5c38e15f2383d2f68bdc", @ANYRES32=0x0, @ANYBLOB="00000000f05f00000000000000000000000000000000000085263169f29567ab3b95bc291d0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000001480)=ANY=[@ANYRES16=r1, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m18.706512346s ago: executing program 7 (id=4460): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='xprtsec\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1001c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$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") socket$kcm(0x2, 0x200000000000001, 0x106) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x18, r4, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 11m18.706288755s ago: executing program 35 (id=4460): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='xprtsec\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1001c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x80, &(0x7f0000000540)={[{@grpjquota}, {@usrquota}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@test_dummy_encryption}, {@dioread_lock}, {@block_validity}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x465, &(0x7f0000001900)="$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") socket$kcm(0x2, 0x200000000000001, 0x106) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x18, r4, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 5.476900225s ago: executing program 5 (id=8714): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x9, 0xffffffffffffffff, &(0x7f0000000280)=0x7fffffffffffffff, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x12) 3.917515913s ago: executing program 6 (id=8729): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000002c0)='8', 0x1) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xd6, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x24, 0xffffffff, 0x8, 0x20000008, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x9) 3.721281218s ago: executing program 6 (id=8733): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0180001001c00"/36], 0x38}}], 0x1, 0xc050) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.514671033s ago: executing program 6 (id=8734): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='9', 0x1) unshare(0x6a040000) unshare(0x6a040000) write(r0, &(0x7f0000000000), 0x0) 2.517047287s ago: executing program 1 (id=8740): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000000) connect(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 2.41456545s ago: executing program 8 (id=8741): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_submit(0x0, 0xfffffffffffffdce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r3 = open(0x0, 0x4827e, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) fallocate(r3, 0x0, 0x0, 0x8800000) io_setup(0x205, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x99}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaa15cc14e96b30800450000270000000000019001ac1414aa0500907803000000450000000000000000000000ffffffff000000005db18b8af5153aba9dac438a313dc59d0b0fe8faaa6734bddd4f418a092e840dcadf1a74e9be7daf0a2e2665dd76ec1e018b6c7666aa81059ef9489ed5a1269bd91205174c3a6c13c9b409000a942fe2efaa2f3c2ab304d9a8e6235fcafb50da7ca695ac935639756d64db070760539695121c79575394d873e86ccc490f08"], 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000640)={&(0x7f00000002c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x3f7, 0x4, 0x70bd36, 0x25cfdbff, {0x27, 0x27, './sys/bus/usb/drivers/usbip-host/rebind', './sys/bus/usb/drivers/usbip-host/rebind'}}, 0x68}, 0x1, 0x0, 0x0, 0x4001c}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, 0x0, 0x9dd7) 2.398691001s ago: executing program 5 (id=8742): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000200)={'dummy0\x00'}) socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, 0x0, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 1.932630572s ago: executing program 0 (id=8744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.896417753s ago: executing program 0 (id=8745): r0 = io_uring_setup(0x383a, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.850719504s ago: executing program 1 (id=8746): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x1b0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.831839365s ago: executing program 5 (id=8747): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x10ffe, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4, 0x1, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000202, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) gettid() munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(0x0, 0x8d, 0x1, 0x0, 0x0, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1000000, r3, 0x0, 0x1, 0x4}}, 0x20) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xa) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000040)=0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ef, &(0x7f0000000200)=0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0xf}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x3}, 0x10000, 0x6, 0x7, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) r8 = syz_genetlink_get_family_id$tipc2(0x0, r6) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000170000006400068014000300313233343536373839303132333435364c00040067636d28616573290000000000ffffffffffffffff00000000000000000000002400000000172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"], 0x78}}, 0x0) 1.635072409s ago: executing program 6 (id=8748): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.60477021s ago: executing program 1 (id=8749): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='md0\n', 0x4) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='1:1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000700), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r7, &(0x7f0000000780)='none\n', 0x5) write(0xffffffffffffffff, &(0x7f0000000800)='active\n', 0x7) 1.59423999s ago: executing program 0 (id=8750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)='\b', 0x1}], 0x1}, 0x804) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000000000000000000000001122334411"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = open(0x0, 0x108843, 0x55) fcntl$setlease(r6, 0x400, 0x1) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r7, r8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 1.534403082s ago: executing program 8 (id=8751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)='\b', 0x1}], 0x1}, 0x804) unshare(0x22020600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000000000000000000000001122334411"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x108843, 0x55) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r5, 0x9) syz_io_uring_complete(r4, r5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 1.033838754s ago: executing program 8 (id=8752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 980.691805ms ago: executing program 5 (id=8753): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) write$tun(r1, &(0x7f0000000080)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@noop]}}, {0x1234, 0x4e20, 0x8}}}, 0x2a) 893.570637ms ago: executing program 1 (id=8754): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000008c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xfc}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd}}}}}}, 0x0) unshare(0x40000000) 892.791337ms ago: executing program 6 (id=8755): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES64=r0], 0x8) 890.052357ms ago: executing program 8 (id=8756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write(r0, &(0x7f0000000680)="ffffffffffffc011223344554305", 0xe) 770.222391ms ago: executing program 5 (id=8757): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000000) connect(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 718.475062ms ago: executing program 6 (id=8758): r0 = socket(0x1e, 0x4, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 607.806735ms ago: executing program 0 (id=8759): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3df, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 607.589704ms ago: executing program 8 (id=8760): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) mount$9p_unix(&(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000200)={'trans=unix,', {[{@cache_none}, {@version_L}], [{@smackfsdef}]}}) 582.695405ms ago: executing program 1 (id=8761): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000008c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xfc}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd}}}}}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000000) connect(r1, 0x0, 0x0) unshare(0x40000000) 449.850108ms ago: executing program 8 (id=8762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x68c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0xdd8c, r7, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="80", 0x1}], 0x1}, 0x4) 386.51031ms ago: executing program 0 (id=8763): mount(0x0, &(0x7f0000000080)='proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 315.045662ms ago: executing program 0 (id=8764): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='10', 0x2) unshare(0x40000600) 308.841532ms ago: executing program 5 (id=8765): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='10', 0x2) unshare(0x40000600) 0s ago: executing program 1 (id=8766): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='md0\n', 0x4) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='1:1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000700), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r7, &(0x7f0000000780)='none\n', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f0000000800)='active\n', 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/block/md0/md/suspend_lo\x00', 0x1, 0x0) write(r9, &(0x7f0000000880)='0\n', 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) kernel console output (not intermixed with test programs): y) [ 1063.558313][T31587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1063.558327][T31587] Call Trace: [ 1063.558334][T31587] [ 1063.558341][T31587] __dump_stack+0x1d/0x30 [ 1063.558375][T31587] dump_stack_lvl+0x95/0xd0 [ 1063.558471][T31587] dump_stack+0x15/0x1b [ 1063.558493][T31587] should_fail_ex+0x262/0x280 [ 1063.558527][T31587] ? find_get_pmu_context+0x5a/0x430 [ 1063.558594][T31587] should_failslab+0x8c/0xb0 [ 1063.558654][T31587] __kmalloc_cache_noprof+0x7a/0x400 [ 1063.558704][T31587] ? __kmalloc_cache_noprof+0x331/0x400 [ 1063.558751][T31587] ? find_get_pmu_context+0x5a/0x430 [ 1063.558819][T31587] find_get_pmu_context+0x5a/0x430 [ 1063.558841][T31587] ? find_get_context+0x41f/0x4f0 [ 1063.558863][T31587] __se_sys_perf_event_open+0x9b5/0x1290 [ 1063.558899][T31587] __x64_sys_perf_event_open+0x67/0x80 [ 1063.559049][T31587] x64_sys_call+0x1f25/0x2550 [ 1063.559085][T31587] do_syscall_64+0x112/0x360 [ 1063.559123][T31587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.559190][T31587] RIP: 0033:0x7f29799be1d9 [ 1063.559244][T31587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.559278][T31587] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1063.559305][T31587] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1063.559406][T31587] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1063.559425][T31587] RBP: 00007f2979a55888 R08: 0000000000000009 R09: 0000000000000000 [ 1063.559493][T31587] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1063.559508][T31587] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1063.559528][T31587] [ 1063.946062][T31593] FAULT_INJECTION: forcing a failure. [ 1063.946062][T31593] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.946104][T31593] CPU: 0 UID: 0 PID: 31593 Comm: syz.1.8427 Not tainted syzkaller #0 PREEMPT(lazy) [ 1063.946134][T31593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1063.946148][T31593] Call Trace: [ 1063.946156][T31593] [ 1063.946214][T31593] __dump_stack+0x1d/0x30 [ 1063.946286][T31593] dump_stack_lvl+0x95/0xd0 [ 1063.946319][T31593] dump_stack+0x15/0x1b [ 1063.946404][T31593] should_fail_ex+0x262/0x280 [ 1063.946453][T31593] ? find_get_pmu_context+0x5a/0x430 [ 1063.946482][T31593] should_failslab+0x8c/0xb0 [ 1063.946540][T31593] __kmalloc_cache_noprof+0x7a/0x400 [ 1063.946641][T31593] ? __kmalloc_cache_noprof+0x331/0x400 [ 1063.946731][T31593] ? find_get_pmu_context+0x5a/0x430 [ 1063.946797][T31593] find_get_pmu_context+0x5a/0x430 [ 1063.946898][T31593] ? find_get_context+0x41f/0x4f0 [ 1063.946923][T31593] __se_sys_perf_event_open+0x9b5/0x1290 [ 1063.947044][T31593] __x64_sys_perf_event_open+0x67/0x80 [ 1063.947080][T31593] x64_sys_call+0x1f25/0x2550 [ 1063.947114][T31593] do_syscall_64+0x112/0x360 [ 1063.947153][T31593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.947184][T31593] RIP: 0033:0x7f29799be1d9 [ 1063.947211][T31593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.947234][T31593] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1063.947263][T31593] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1063.947300][T31593] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1063.947317][T31593] RBP: 00007f2979a55888 R08: 0000000000000009 R09: 0000000000000000 [ 1063.947336][T31593] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1063.947355][T31593] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1063.947404][T31593] [ 1064.187665][T31599] FAULT_INJECTION: forcing a failure. [ 1064.187665][T31599] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.187777][T31599] CPU: 1 UID: 0 PID: 31599 Comm: syz.6.8430 Not tainted syzkaller #0 PREEMPT(lazy) [ 1064.187819][T31599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1064.187874][T31599] Call Trace: [ 1064.187880][T31599] [ 1064.187888][T31599] __dump_stack+0x1d/0x30 [ 1064.187923][T31599] dump_stack_lvl+0x95/0xd0 [ 1064.188030][T31599] dump_stack+0x15/0x1b [ 1064.188104][T31599] should_fail_ex+0x262/0x280 [ 1064.188186][T31599] ? tunnel_key_init+0xaee/0xf50 [ 1064.188228][T31599] should_failslab+0x8c/0xb0 [ 1064.188278][T31599] __kmalloc_cache_noprof+0x7a/0x400 [ 1064.188400][T31599] ? tunnel_key_init+0xaee/0xf50 [ 1064.188450][T31599] tunnel_key_init+0xaee/0xf50 [ 1064.188485][T31599] ? __nla_validate_parse+0x16c7/0x1d70 [ 1064.188583][T31599] ? __pfx_tunnel_key_init+0x10/0x10 [ 1064.188632][T31599] tcf_action_init_1+0x395/0x4d0 [ 1064.188677][T31599] tcf_action_init+0x29d/0x700 [ 1064.188812][T31599] tc_ctl_action+0x29e/0x860 [ 1064.188871][T31599] ? __pfx_tc_ctl_action+0x10/0x10 [ 1064.188966][T31599] rtnetlink_rcv_msg+0x6a7/0x720 [ 1064.189058][T31599] netlink_rcv_skb+0x11e/0x220 [ 1064.189089][T31599] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1064.189178][T31599] rtnetlink_rcv+0x1c/0x30 [ 1064.189223][T31599] netlink_unicast+0x5a9/0x680 [ 1064.189301][T31599] netlink_sendmsg+0x5be/0x6f0 [ 1064.189338][T31599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.189364][T31599] ____sys_sendmsg+0x532/0x580 [ 1064.189475][T31599] ___sys_sendmsg+0x195/0x1e0 [ 1064.189540][T31599] __x64_sys_sendmsg+0xd4/0x160 [ 1064.189614][T31599] x64_sys_call+0x22ab/0x2550 [ 1064.189653][T31599] do_syscall_64+0x112/0x360 [ 1064.189689][T31599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.189760][T31599] RIP: 0033:0x7faae164e1d9 [ 1064.189778][T31599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.189805][T31599] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.189828][T31599] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1064.189993][T31599] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 1064.190007][T31599] RBP: 00007faae16e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1064.190025][T31599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.190043][T31599] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1064.190072][T31599] [ 1064.543947][T31542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.613978][T24548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.695487][T31618] loop0: detected capacity change from 0 to 512 [ 1064.698189][T31618] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1064.703496][T31617] FAULT_INJECTION: forcing a failure. [ 1064.703496][T31617] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.703620][T31617] CPU: 1 UID: 0 PID: 31617 Comm: syz.5.8439 Not tainted syzkaller #0 PREEMPT(lazy) [ 1064.703787][T31617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1064.703833][T31617] Call Trace: [ 1064.703855][T31617] [ 1064.703886][T31617] __dump_stack+0x1d/0x30 [ 1064.704036][T31617] dump_stack_lvl+0x95/0xd0 [ 1064.704114][T31617] dump_stack+0x15/0x1b [ 1064.704192][T31617] should_fail_ex+0x262/0x280 [ 1064.704310][T31617] ? tunnel_key_init+0xaee/0xf50 [ 1064.704415][T31617] should_failslab+0x8c/0xb0 [ 1064.704591][T31617] __kmalloc_cache_noprof+0x7a/0x400 [ 1064.704798][T31617] ? tunnel_key_init+0xaee/0xf50 [ 1064.704925][T31617] tunnel_key_init+0xaee/0xf50 [ 1064.705086][T31617] ? __nla_validate_parse+0x16c7/0x1d70 [ 1064.705267][T31617] ? __pfx_tunnel_key_init+0x10/0x10 [ 1064.705349][T31617] tcf_action_init_1+0x395/0x4d0 [ 1064.705437][T31617] tcf_action_init+0x29d/0x700 [ 1064.705635][T31617] tc_ctl_action+0x29e/0x860 [ 1064.705845][T31617] ? __pfx_tc_ctl_action+0x10/0x10 [ 1064.705993][T31617] rtnetlink_rcv_msg+0x6a7/0x720 [ 1064.706122][T31617] netlink_rcv_skb+0x11e/0x220 [ 1064.706200][T31617] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1064.706329][T31617] rtnetlink_rcv+0x1c/0x30 [ 1064.706425][T31617] netlink_unicast+0x5a9/0x680 [ 1064.706518][T31617] netlink_sendmsg+0x5be/0x6f0 [ 1064.706606][T31617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.706685][T31617] ____sys_sendmsg+0x532/0x580 [ 1064.706875][T31617] ___sys_sendmsg+0x195/0x1e0 [ 1064.707025][T31617] __x64_sys_sendmsg+0xd4/0x160 [ 1064.707126][T31617] x64_sys_call+0x22ab/0x2550 [ 1064.707279][T31617] do_syscall_64+0x112/0x360 [ 1064.707373][T31617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.707461][T31617] RIP: 0033:0x7eff6d52e1d9 [ 1064.707517][T31617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.707644][T31617] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.707724][T31617] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1064.707912][T31617] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 1064.707927][T31617] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1064.707941][T31617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.708027][T31617] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1064.708097][T31617] [ 1064.751555][T31622] tipc: Enabling of bearer rejected, already enabled [ 1064.787315][T31618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 1064.787474][T31618] System zones: 1-12 [ 1064.788102][T31618] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.8438: corrupted in-inode xattr: e_value size too large [ 1064.788233][T31618] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1064.788701][T31618] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.8438: couldn't read orphan inode 15 (err -117) [ 1064.788843][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1064.788918][ C1] EXT4-fs (loop0): initial error at time 1791692612: ext4_iget_extra_inode:5210: inode 15 [ 1064.789013][ C1] EXT4-fs (loop0): last error at time 1791692612: ext4_iget_extra_inode:5210: inode 15 [ 1064.789308][T31618] loop0: lost filesystem error report for type 5 error -117 [ 1064.796727][T31618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.712298][T24548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.842833][T31647] loop0: detected capacity change from 0 to 512 [ 1065.916641][T31647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.916791][T31647] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.022871][T31655] dummy0 speed is unknown, defaulting to 1000 [ 1066.383640][T31674] FAULT_INJECTION: forcing a failure. [ 1066.383640][T31674] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.383697][T31674] CPU: 1 UID: 0 PID: 31674 Comm: syz.1.8460 Not tainted syzkaller #0 PREEMPT(lazy) [ 1066.383724][T31674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1066.383738][T31674] Call Trace: [ 1066.383766][T31674] [ 1066.383775][T31674] __dump_stack+0x1d/0x30 [ 1066.383806][T31674] dump_stack_lvl+0x95/0xd0 [ 1066.383840][T31674] dump_stack+0x15/0x1b [ 1066.383874][T31674] should_fail_ex+0x262/0x280 [ 1066.383916][T31674] ? shrinker_alloc+0x3b/0x6e0 [ 1066.383971][T31674] should_failslab+0x8c/0xb0 [ 1066.384017][T31674] __kmalloc_cache_noprof+0x7a/0x400 [ 1066.384094][T31674] ? shrinker_alloc+0x3b/0x6e0 [ 1066.384205][T31674] shrinker_alloc+0x3b/0x6e0 [ 1066.384235][T31674] ? __percpu_init_rwsem+0x24/0x90 [ 1066.384264][T31674] ? rcu_sync_init+0x32/0x40 [ 1066.384331][T31674] sget_fc+0x875/0xfa0 [ 1066.384377][T31674] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1066.384422][T31674] ? __kmalloc_cache_noprof+0x19b/0x400 [ 1066.384476][T31674] ? mqueue_init_fs_context+0x38/0x2c0 [ 1066.384517][T31674] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1066.384624][T31674] get_tree_nodev+0x2a/0x100 [ 1066.384667][T31674] mqueue_get_tree+0x5d/0x80 [ 1066.384697][T31674] vfs_get_tree+0x57/0x1d0 [ 1066.384783][T31674] fc_mount_longterm+0x18/0xb0 [ 1066.384818][T31674] mq_init_ns+0x2db/0x370 [ 1066.384897][T31674] copy_ipcs+0x26d/0x460 [ 1066.384926][T31674] create_new_namespaces+0x121/0x420 [ 1066.385027][T31674] unshare_nsproxy_namespaces+0x115/0x150 [ 1066.385076][T31674] ksys_unshare+0x3fd/0x6f0 [ 1066.385118][T31674] __x64_sys_unshare+0x1f/0x30 [ 1066.385234][T31674] x64_sys_call+0x1e33/0x2550 [ 1066.385271][T31674] do_syscall_64+0x112/0x360 [ 1066.385328][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.385397][T31674] RIP: 0033:0x7f29799be1d9 [ 1066.385420][T31674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.385470][T31674] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1066.385556][T31674] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1066.385594][T31674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1066.385612][T31674] RBP: 00007f2979a55888 R08: 0000000000000000 R09: 0000000000000000 [ 1066.385632][T31674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.385650][T31674] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1066.385724][T31674] [ 1066.507907][T31674] FAULT_INJECTION: forcing a failure. [ 1066.507907][T31674] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.508092][T31674] CPU: 1 UID: 0 PID: 31674 Comm: syz.1.8460 Not tainted syzkaller #0 PREEMPT(lazy) [ 1066.508192][T31674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1066.508246][T31674] Call Trace: [ 1066.508277][T31674] [ 1066.508302][T31674] __dump_stack+0x1d/0x30 [ 1066.508430][T31674] dump_stack_lvl+0x95/0xd0 [ 1066.508508][T31674] dump_stack+0x15/0x1b [ 1066.508577][T31674] should_fail_ex+0x262/0x280 [ 1066.508684][T31674] ? ipv4_sysctl_init_net+0x174/0x240 [ 1066.508740][T31674] should_failslab+0x8c/0xb0 [ 1066.508786][T31674] __kmalloc_cache_noprof+0x7a/0x400 [ 1066.508947][T31674] ? ipv4_sysctl_init_net+0x174/0x240 [ 1066.509043][T31674] ipv4_sysctl_init_net+0x174/0x240 [ 1066.509151][T31674] ops_init+0x22a/0x2e0 [ 1066.509249][T31674] setup_net+0x9f/0x230 [ 1066.509439][T31674] copy_net_ns+0x333/0x490 [ 1066.509557][T31674] create_new_namespaces+0x1f6/0x420 [ 1066.509676][T31674] unshare_nsproxy_namespaces+0x115/0x150 [ 1066.509789][T31674] ksys_unshare+0x3fd/0x6f0 [ 1066.509916][T31674] __x64_sys_unshare+0x1f/0x30 [ 1066.510072][T31674] x64_sys_call+0x1e33/0x2550 [ 1066.510160][T31674] do_syscall_64+0x112/0x360 [ 1066.510259][T31674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.510354][T31674] RIP: 0033:0x7f29799be1d9 [ 1066.510426][T31674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.510531][T31674] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1066.510621][T31674] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1066.510668][T31674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1066.510743][T31674] RBP: 00007f2979a55888 R08: 0000000000000000 R09: 0000000000000000 [ 1066.510794][T31674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.510839][T31674] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1066.510952][T31674] [ 1066.924936][T31680] dummy0 speed is unknown, defaulting to 1000 [ 1066.997004][T31681] dummy0 speed is unknown, defaulting to 1000 [ 1067.261135][T31686] FAULT_INJECTION: forcing a failure. [ 1067.261135][T31686] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.261173][T31686] CPU: 1 UID: 0 PID: 31686 Comm: syz.5.8464 Not tainted syzkaller #0 PREEMPT(lazy) [ 1067.261285][T31686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.261304][T31686] Call Trace: [ 1067.261313][T31686] [ 1067.261322][T31686] __dump_stack+0x1d/0x30 [ 1067.261349][T31686] dump_stack_lvl+0x95/0xd0 [ 1067.261528][T31686] dump_stack+0x15/0x1b [ 1067.261558][T31686] should_fail_ex+0x262/0x280 [ 1067.261598][T31686] ? shrinker_alloc+0x3b/0x6e0 [ 1067.261656][T31686] should_failslab+0x8c/0xb0 [ 1067.261743][T31686] __kmalloc_cache_noprof+0x7a/0x400 [ 1067.261854][T31686] ? shrinker_alloc+0x3b/0x6e0 [ 1067.261952][T31686] shrinker_alloc+0x3b/0x6e0 [ 1067.261984][T31686] ? __percpu_init_rwsem+0x24/0x90 [ 1067.262008][T31686] ? rcu_sync_init+0x32/0x40 [ 1067.262031][T31686] sget_fc+0x875/0xfa0 [ 1067.262143][T31686] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1067.262190][T31686] ? __kmalloc_cache_noprof+0x19b/0x400 [ 1067.262226][T31686] ? mqueue_init_fs_context+0x38/0x2c0 [ 1067.262279][T31686] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1067.262377][T31686] get_tree_nodev+0x2a/0x100 [ 1067.262410][T31686] mqueue_get_tree+0x5d/0x80 [ 1067.262440][T31686] vfs_get_tree+0x57/0x1d0 [ 1067.262605][T31686] fc_mount_longterm+0x18/0xb0 [ 1067.262648][T31686] mq_init_ns+0x2db/0x370 [ 1067.262687][T31686] copy_ipcs+0x26d/0x460 [ 1067.262736][T31686] create_new_namespaces+0x121/0x420 [ 1067.262776][T31686] unshare_nsproxy_namespaces+0x115/0x150 [ 1067.262813][T31686] ksys_unshare+0x3fd/0x6f0 [ 1067.262890][T31686] __x64_sys_unshare+0x1f/0x30 [ 1067.262922][T31686] x64_sys_call+0x1e33/0x2550 [ 1067.262986][T31686] do_syscall_64+0x112/0x360 [ 1067.263074][T31686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.263141][T31686] RIP: 0033:0x7eff6d52e1d9 [ 1067.263189][T31686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.263215][T31686] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1067.263243][T31686] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1067.263265][T31686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1067.263285][T31686] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1067.263304][T31686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.263331][T31686] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1067.263358][T31686] [ 1067.328497][T31686] FAULT_INJECTION: forcing a failure. [ 1067.328497][T31686] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.328595][T31686] CPU: 1 UID: 0 PID: 31686 Comm: syz.5.8464 Not tainted syzkaller #0 PREEMPT(lazy) [ 1067.328694][T31686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.328740][T31686] Call Trace: [ 1067.328764][T31686] [ 1067.328836][T31686] __dump_stack+0x1d/0x30 [ 1067.329046][T31686] dump_stack_lvl+0x95/0xd0 [ 1067.329118][T31686] dump_stack+0x15/0x1b [ 1067.329187][T31686] should_fail_ex+0x262/0x280 [ 1067.329310][T31686] ? __proc_create+0x3f1/0x6b0 [ 1067.329421][T31686] should_failslab+0x8c/0xb0 [ 1067.329540][T31686] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1067.329706][T31686] ? __proc_create+0x3f1/0x6b0 [ 1067.329832][T31686] __proc_create+0x3f1/0x6b0 [ 1067.329951][T31686] _proc_mkdir+0x5e/0x110 [ 1067.330073][T31686] sctp_proc_init+0x42/0x190 [ 1067.330258][T31686] sctp_defaults_init+0x313/0x500 [ 1067.330379][T31686] ops_init+0x22a/0x2e0 [ 1067.330463][T31686] setup_net+0x9f/0x230 [ 1067.330625][T31686] copy_net_ns+0x333/0x490 [ 1067.330771][T31686] create_new_namespaces+0x1f6/0x420 [ 1067.330953][T31686] unshare_nsproxy_namespaces+0x115/0x150 [ 1067.331073][T31686] ksys_unshare+0x3fd/0x6f0 [ 1067.331237][T31686] __x64_sys_unshare+0x1f/0x30 [ 1067.331412][T31686] x64_sys_call+0x1e33/0x2550 [ 1067.331493][T31686] do_syscall_64+0x112/0x360 [ 1067.331593][T31686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.331650][T31686] RIP: 0033:0x7eff6d52e1d9 [ 1067.331682][T31686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.331762][T31686] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1067.331884][T31686] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1067.331940][T31686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1067.331994][T31686] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1067.332039][T31686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.332084][T31686] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1067.332188][T31686] [ 1067.814960][T31695] batman_adv: batadv0: Adding interface: dummy0 [ 1067.814983][T31695] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.815098][T31695] batman_adv: batadv0: Interface activated: dummy0 [ 1067.824096][T31695] net_ratelimit: 12 callbacks suppressed [ 1067.824158][T31695] batadv0: mtu less than device minimum [ 1067.825336][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.826647][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.827636][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.829024][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.830345][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.831521][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.832605][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.833848][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1067.835086][T31695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1068.058779][ C1] bridge0: port 1(syz_tun) entered learning state [ 1068.130225][T31711] bridge0: port 1(syz_tun) received tcn bpdu [ 1068.130250][T31711] bridge0: topology change detected, propagating [ 1068.194408][ T30] kauditd_printk_skb: 559 callbacks suppressed [ 1068.194430][ T30] audit: type=1326 audit(1791692615.876:20216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.194480][ T30] audit: type=1326 audit(1791692615.876:20217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.195329][ T30] audit: type=1326 audit(1791692615.876:20218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.195402][ T30] audit: type=1326 audit(1791692615.876:20219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.195653][ T30] audit: type=1326 audit(1791692615.876:20220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.195684][ T30] audit: type=1326 audit(1791692615.876:20221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.195725][ T30] audit: type=1326 audit(1791692615.876:20222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.195888][ T30] audit: type=1326 audit(1791692615.876:20223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.196004][ T30] audit: type=1326 audit(1791692615.876:20224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.198648][ T30] audit: type=1326 audit(1791692615.876:20225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31717 comm="syz.5.8478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d52e1d9 code=0x7ffc0000 [ 1068.640468][T31639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1068.689245][T24548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.722435][T31723] FAULT_INJECTION: forcing a failure. [ 1068.722435][T31723] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.722476][T31723] CPU: 1 UID: 0 PID: 31723 Comm: syz.1.8479 Not tainted syzkaller #0 PREEMPT(lazy) [ 1068.722513][T31723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1068.722530][T31723] Call Trace: [ 1068.722597][T31723] [ 1068.722606][T31723] __dump_stack+0x1d/0x30 [ 1068.722643][T31723] dump_stack_lvl+0x95/0xd0 [ 1068.722676][T31723] dump_stack+0x15/0x1b [ 1068.722707][T31723] should_fail_ex+0x262/0x280 [ 1068.722810][T31723] ? sk_prot_alloc+0xa8/0x180 [ 1068.722839][T31723] should_failslab+0x8c/0xb0 [ 1068.722888][T31723] __kmalloc_noprof+0xd0/0x4d0 [ 1068.722935][T31723] ? sk_prot_alloc+0xa8/0x180 [ 1068.723022][T31723] sk_prot_alloc+0xa8/0x180 [ 1068.723064][T31723] sk_alloc+0x34/0x3e0 [ 1068.723109][T31723] __netlink_kernel_create+0xe9/0x550 [ 1068.723173][T31723] diag_net_init+0x4e/0xa0 [ 1068.723215][T31723] ? __pfx_sock_diag_rcv+0x10/0x10 [ 1068.723332][T31723] ? __pfx_sock_diag_bind+0x10/0x10 [ 1068.723400][T31723] ops_init+0x22a/0x2e0 [ 1068.723430][T31723] setup_net+0x9f/0x230 [ 1068.723477][T31723] copy_net_ns+0x333/0x490 [ 1068.723568][T31723] create_new_namespaces+0x1f6/0x420 [ 1068.723610][T31723] unshare_nsproxy_namespaces+0x115/0x150 [ 1068.723646][T31723] ksys_unshare+0x3fd/0x6f0 [ 1068.723747][T31723] __x64_sys_unshare+0x1f/0x30 [ 1068.723776][T31723] x64_sys_call+0x1e33/0x2550 [ 1068.723815][T31723] do_syscall_64+0x112/0x360 [ 1068.723846][T31723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.723916][T31723] RIP: 0033:0x7f29799be1d9 [ 1068.723941][T31723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.724015][T31723] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1068.724108][T31723] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1068.724130][T31723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1068.724150][T31723] RBP: 00007f2979a55888 R08: 0000000000000000 R09: 0000000000000000 [ 1068.724171][T31723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.724249][T31723] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1068.724278][T31723] [ 1069.154284][T31738] bridge0: port 1(syz_tun) received tcn bpdu [ 1069.154303][T31738] bridge0: topology change detected, propagating [ 1069.170402][T31731] loop8: detected capacity change from 0 to 512 [ 1069.258708][T31743] FAULT_INJECTION: forcing a failure. [ 1069.258708][T31743] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.263512][T31743] CPU: 1 UID: 0 PID: 31743 Comm: syz.1.8488 Not tainted syzkaller #0 PREEMPT(lazy) [ 1069.263554][T31743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1069.263594][T31743] Call Trace: [ 1069.263602][T31743] [ 1069.263611][T31743] __dump_stack+0x1d/0x30 [ 1069.263647][T31743] dump_stack_lvl+0x95/0xd0 [ 1069.263681][T31743] dump_stack+0x15/0x1b [ 1069.263713][T31743] should_fail_ex+0x262/0x280 [ 1069.263787][T31743] should_failslab+0x8c/0xb0 [ 1069.263866][T31743] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 1069.264001][T31743] ? vrf_netns_init+0x97/0x110 [ 1069.264122][T31743] ? vrf_netns_init+0x97/0x110 [ 1069.264242][T31743] kmemdup_noprof+0x2b/0x70 [ 1069.264321][T31743] vrf_netns_init+0x97/0x110 [ 1069.264367][T31743] ops_init+0x22a/0x2e0 [ 1069.264468][T31743] setup_net+0x9f/0x230 [ 1069.264516][T31743] copy_net_ns+0x333/0x490 [ 1069.264595][T31743] create_new_namespaces+0x1f6/0x420 [ 1069.264647][T31743] unshare_nsproxy_namespaces+0x115/0x150 [ 1069.264692][T31743] ksys_unshare+0x3fd/0x6f0 [ 1069.264738][T31743] __x64_sys_unshare+0x1f/0x30 [ 1069.264856][T31743] x64_sys_call+0x1e33/0x2550 [ 1069.264887][T31743] do_syscall_64+0x112/0x360 [ 1069.264922][T31743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.264970][T31743] RIP: 0033:0x7f29799be1d9 [ 1069.264994][T31743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.265023][T31743] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1069.265054][T31743] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1069.265072][T31743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1069.265151][T31743] RBP: 00007f2979a55888 R08: 0000000000000000 R09: 0000000000000000 [ 1069.265172][T31743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.265250][T31743] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1069.265280][T31743] [ 1069.309740][T31731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1069.309973][T31731] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.496355][T31752] tipc: Enabling of bearer rejected, already enabled [ 1069.634600][T28848] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.696162][T31755] dummy0 speed is unknown, defaulting to 1000 [ 1069.763498][T31761] FAULT_INJECTION: forcing a failure. [ 1069.763498][T31761] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.763528][T31761] CPU: 1 UID: 0 PID: 31761 Comm: syz.6.8495 Not tainted syzkaller #0 PREEMPT(lazy) [ 1069.763599][T31761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1069.763619][T31761] Call Trace: [ 1069.763629][T31761] [ 1069.763639][T31761] __dump_stack+0x1d/0x30 [ 1069.763737][T31761] dump_stack_lvl+0x95/0xd0 [ 1069.763761][T31761] dump_stack+0x15/0x1b [ 1069.763783][T31761] should_fail_ex+0x262/0x280 [ 1069.763890][T31761] ? security_inode_alloc+0x37/0x100 [ 1069.763931][T31761] should_failslab+0x8c/0xb0 [ 1069.763976][T31761] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1069.764022][T31761] ? security_inode_alloc+0x37/0x100 [ 1069.764087][T31761] security_inode_alloc+0x37/0x100 [ 1069.764127][T31761] inode_init_always_gfp+0x495/0x4e0 [ 1069.764204][T31761] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1069.764243][T31761] alloc_inode+0x58/0x170 [ 1069.764339][T31761] sock_create_lite+0x79/0x290 [ 1069.764385][T31761] ? _raw_spin_unlock+0x9/0x30 [ 1069.764635][T31761] ? __register_sysctl_table+0xbbe/0xbe0 [ 1069.764740][T31761] __netlink_kernel_create+0x8d/0x550 [ 1069.764771][T31761] ? ops_init+0x4b/0x2e0 [ 1069.764798][T31761] diag_net_init+0x4e/0xa0 [ 1069.764832][T31761] ? __pfx_sock_diag_rcv+0x10/0x10 [ 1069.764873][T31761] ? __pfx_sock_diag_bind+0x10/0x10 [ 1069.764950][T31761] ops_init+0x22a/0x2e0 [ 1069.765059][T31761] setup_net+0x9f/0x230 [ 1069.765107][T31761] copy_net_ns+0x333/0x490 [ 1069.765155][T31761] create_new_namespaces+0x1f6/0x420 [ 1069.765224][T31761] unshare_nsproxy_namespaces+0x115/0x150 [ 1069.765319][T31761] ksys_unshare+0x3fd/0x6f0 [ 1069.765350][T31761] __x64_sys_unshare+0x1f/0x30 [ 1069.765451][T31761] x64_sys_call+0x1e33/0x2550 [ 1069.765514][T31761] do_syscall_64+0x112/0x360 [ 1069.765552][T31761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.765577][T31761] RIP: 0033:0x7faae164e1d9 [ 1069.765597][T31761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.765644][T31761] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1069.765666][T31761] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1069.765699][T31761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1069.765713][T31761] RBP: 00007faae16e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1069.765733][T31761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.765752][T31761] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1069.765779][T31761] [ 1070.047260][T31766] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1070.076789][T31765] FAULT_INJECTION: forcing a failure. [ 1070.076789][T31765] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.076818][T31765] CPU: 1 UID: 0 PID: 31765 Comm: syz.5.8497 Not tainted syzkaller #0 PREEMPT(lazy) [ 1070.076915][T31765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.076934][T31765] Call Trace: [ 1070.076941][T31765] [ 1070.077005][T31765] __dump_stack+0x1d/0x30 [ 1070.077039][T31765] dump_stack_lvl+0x95/0xd0 [ 1070.077141][T31765] dump_stack+0x15/0x1b [ 1070.077189][T31765] should_fail_ex+0x262/0x280 [ 1070.077237][T31765] ? __kernfs_new_node+0x70/0x440 [ 1070.077268][T31765] should_failslab+0x8c/0xb0 [ 1070.077437][T31765] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1070.077553][T31765] ? __kernfs_new_node+0x70/0x440 [ 1070.077579][T31765] __kernfs_new_node+0x70/0x440 [ 1070.077682][T31765] kernfs_new_node+0xcf/0xf0 [ 1070.077713][T31765] __kernfs_create_file+0x4b/0x180 [ 1070.077742][T31765] ? __pfx_class_attr_show+0x10/0x10 [ 1070.077808][T31765] ? __pfx_class_attr_store+0x10/0x10 [ 1070.077840][T31765] sysfs_add_file_mode_ns+0x132/0x1b0 [ 1070.077922][T31765] sysfs_create_file_ns+0xd9/0x120 [ 1070.077968][T31765] class_create_file_ns+0xf4/0x130 [ 1070.077998][T31765] netdev_class_create_file_ns+0x24/0x30 [ 1070.078084][T31765] bond_create_sysfs+0x40/0xb0 [ 1070.078113][T31765] bond_net_init+0x86/0xa0 [ 1070.078143][T31765] ops_init+0x22a/0x2e0 [ 1070.078170][T31765] setup_net+0x9f/0x230 [ 1070.078230][T31765] copy_net_ns+0x333/0x490 [ 1070.078316][T31765] create_new_namespaces+0x1f6/0x420 [ 1070.078403][T31765] unshare_nsproxy_namespaces+0x115/0x150 [ 1070.078448][T31765] ksys_unshare+0x3fd/0x6f0 [ 1070.078499][T31765] __x64_sys_unshare+0x1f/0x30 [ 1070.078616][T31765] x64_sys_call+0x1e33/0x2550 [ 1070.078645][T31765] do_syscall_64+0x112/0x360 [ 1070.078750][T31765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.078782][T31765] RIP: 0033:0x7eff6d52e1d9 [ 1070.078806][T31765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.078850][T31765] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1070.078880][T31765] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1070.078901][T31765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1070.078919][T31765] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1070.078933][T31765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.078998][T31765] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1070.079019][T31765] [ 1070.253911][T31765] dummy0 speed is unknown, defaulting to 1000 [ 1070.560691][T31780] FAULT_INJECTION: forcing a failure. [ 1070.560691][T31780] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.560734][T31780] CPU: 1 UID: 0 PID: 31780 Comm: syz.6.8503 Not tainted syzkaller #0 PREEMPT(lazy) [ 1070.560839][T31780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.560874][T31780] Call Trace: [ 1070.560885][T31780] [ 1070.560896][T31780] __dump_stack+0x1d/0x30 [ 1070.560974][T31780] dump_stack_lvl+0x95/0xd0 [ 1070.561000][T31780] dump_stack+0x15/0x1b [ 1070.561033][T31780] should_fail_ex+0x262/0x280 [ 1070.561072][T31780] ? find_get_pmu_context+0x5a/0x430 [ 1070.561120][T31780] should_failslab+0x8c/0xb0 [ 1070.561173][T31780] __kmalloc_cache_noprof+0x7a/0x400 [ 1070.561281][T31780] ? find_get_pmu_context+0x5a/0x430 [ 1070.561313][T31780] find_get_pmu_context+0x5a/0x430 [ 1070.561341][T31780] ? find_get_context+0x41f/0x4f0 [ 1070.561368][T31780] __se_sys_perf_event_open+0x9b5/0x1290 [ 1070.561597][T31780] __x64_sys_perf_event_open+0x67/0x80 [ 1070.561622][T31780] x64_sys_call+0x1f25/0x2550 [ 1070.561687][T31780] do_syscall_64+0x112/0x360 [ 1070.561717][T31780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.561743][T31780] RIP: 0033:0x7faae164e1d9 [ 1070.561835][T31780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.561855][T31780] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1070.561945][T31780] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1070.561966][T31780] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1070.561986][T31780] RBP: 00007faae16e5888 R08: 0000000000000009 R09: 0000000000000000 [ 1070.562004][T31780] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1070.562024][T31780] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1070.562051][T31780] [ 1070.820775][T31784] FAULT_INJECTION: forcing a failure. [ 1070.820775][T31784] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.820809][T31784] CPU: 1 UID: 0 PID: 31784 Comm: syz.6.8506 Not tainted syzkaller #0 PREEMPT(lazy) [ 1070.820869][T31784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1070.820938][T31784] Call Trace: [ 1070.820948][T31784] [ 1070.820960][T31784] __dump_stack+0x1d/0x30 [ 1070.820995][T31784] dump_stack_lvl+0x95/0xd0 [ 1070.821051][T31784] dump_stack+0x15/0x1b [ 1070.821073][T31784] should_fail_ex+0x262/0x280 [ 1070.821102][T31784] ? tunnel_key_init+0xaee/0xf50 [ 1070.821251][T31784] should_failslab+0x8c/0xb0 [ 1070.821294][T31784] __kmalloc_cache_noprof+0x7a/0x400 [ 1070.821343][T31784] ? tunnel_key_init+0xaee/0xf50 [ 1070.821438][T31784] tunnel_key_init+0xaee/0xf50 [ 1070.821478][T31784] ? __nla_validate_parse+0x16c7/0x1d70 [ 1070.821538][T31784] ? __pfx_tunnel_key_init+0x10/0x10 [ 1070.821582][T31784] tcf_action_init_1+0x395/0x4d0 [ 1070.821669][T31784] tcf_action_init+0x29d/0x700 [ 1070.821771][T31784] tc_ctl_action+0x29e/0x860 [ 1070.821875][T31784] ? __pfx_tc_ctl_action+0x10/0x10 [ 1070.821975][T31784] rtnetlink_rcv_msg+0x6a7/0x720 [ 1070.822017][T31784] netlink_rcv_skb+0x11e/0x220 [ 1070.822047][T31784] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1070.822280][T31784] rtnetlink_rcv+0x1c/0x30 [ 1070.822317][T31784] netlink_unicast+0x5a9/0x680 [ 1070.822393][T31784] netlink_sendmsg+0x5be/0x6f0 [ 1070.822419][T31784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.822447][T31784] ____sys_sendmsg+0x532/0x580 [ 1070.822521][T31784] ___sys_sendmsg+0x195/0x1e0 [ 1070.822617][T31784] __x64_sys_sendmsg+0xd4/0x160 [ 1070.822655][T31784] x64_sys_call+0x22ab/0x2550 [ 1070.822682][T31784] do_syscall_64+0x112/0x360 [ 1070.822747][T31784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.822771][T31784] RIP: 0033:0x7faae164e1d9 [ 1070.822788][T31784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.822814][T31784] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.822846][T31784] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1070.822866][T31784] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 1070.822886][T31784] RBP: 00007faae16e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1070.822905][T31784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.822980][T31784] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1070.823008][T31784] [ 1070.842387][T31779] tipc: Enabling of bearer rejected, already enabled [ 1071.107580][T31786] dummy0 speed is unknown, defaulting to 1000 [ 1071.299225][T31797] dummy0 speed is unknown, defaulting to 1000 [ 1071.700070][T31819] tipc: Enabling of bearer rejected, already enabled [ 1072.255782][T31834] bridge0: port 1(syz_tun) received tcn bpdu [ 1072.255833][T31834] bridge0: topology change detected, propagating [ 1072.318057][T31840] team0: Port device dummy0 removed [ 1072.318652][ T281] dummy0 speed is unknown, defaulting to 1000 [ 1072.408871][T31844] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8533'. [ 1072.623587][T31863] FAULT_INJECTION: forcing a failure. [ 1072.623587][T31863] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.623688][T31863] CPU: 1 UID: 0 PID: 31863 Comm: syz.0.8542 Not tainted syzkaller #0 PREEMPT(lazy) [ 1072.623725][T31863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1072.623743][T31863] Call Trace: [ 1072.623753][T31863] [ 1072.623763][T31863] __dump_stack+0x1d/0x30 [ 1072.623847][T31863] dump_stack_lvl+0x95/0xd0 [ 1072.623880][T31863] dump_stack+0x15/0x1b [ 1072.623927][T31863] should_fail_ex+0x262/0x280 [ 1072.623987][T31863] should_failslab+0x8c/0xb0 [ 1072.624034][T31863] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 1072.624082][T31863] ? sock_alloc_inode+0x36/0xf0 [ 1072.624157][T31863] ? sock_alloc_inode+0x36/0xf0 [ 1072.624202][T31863] ? selinux_socket_create+0xfd/0x180 [ 1072.624254][T31863] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1072.624287][T31863] sock_alloc_inode+0x36/0xf0 [ 1072.624327][T31863] alloc_inode+0x40/0x170 [ 1072.624419][T31863] __sock_create+0x121/0x580 [ 1072.624499][T31863] ? __se_sys_futex+0x2f6/0x370 [ 1072.624537][T31863] ? xfd_validate_state+0x45/0xf0 [ 1072.624568][T31863] __sys_socket+0xaf/0x180 [ 1072.624587][T31863] __x64_sys_socket+0x3f/0x50 [ 1072.624686][T31863] x64_sys_call+0x246e/0x2550 [ 1072.624720][T31863] do_syscall_64+0x112/0x360 [ 1072.624748][T31863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.624771][T31863] RIP: 0033:0x7f89be53e1d9 [ 1072.624858][T31863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.624900][T31863] RSP: 002b:00007f89bcf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1072.624929][T31863] RAX: ffffffffffffffda RBX: 00007f89be7c5fa0 RCX: 00007f89be53e1d9 [ 1072.624983][T31863] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1072.624997][T31863] RBP: 00007f89be5d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1072.625012][T31863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.625075][T31863] R13: 00007f89be7c6038 R14: 00007f89be7c5fa0 R15: 00007ffd14314388 [ 1072.625096][T31863] [ 1072.876475][T31871] FAULT_INJECTION: forcing a failure. [ 1072.876475][T31871] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.876515][T31871] CPU: 1 UID: 0 PID: 31871 Comm: syz.1.8545 Not tainted syzkaller #0 PREEMPT(lazy) [ 1072.876577][T31871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1072.876593][T31871] Call Trace: [ 1072.876603][T31871] [ 1072.876614][T31871] __dump_stack+0x1d/0x30 [ 1072.876645][T31871] dump_stack_lvl+0x95/0xd0 [ 1072.876668][T31871] dump_stack+0x15/0x1b [ 1072.876736][T31871] should_fail_ex+0x262/0x280 [ 1072.876767][T31871] should_failslab+0x8c/0xb0 [ 1072.876803][T31871] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 1072.876995][T31871] ? vrf_netns_init+0x97/0x110 [ 1072.877032][T31871] ? vrf_netns_init+0x97/0x110 [ 1072.877072][T31871] ? ops_init+0x4b/0x2e0 [ 1072.877124][T31871] kmemdup_noprof+0x2b/0x70 [ 1072.877163][T31871] vrf_netns_init+0x97/0x110 [ 1072.877207][T31871] ops_init+0x22a/0x2e0 [ 1072.877236][T31871] setup_net+0x9f/0x230 [ 1072.877329][T31871] copy_net_ns+0x333/0x490 [ 1072.877372][T31871] create_new_namespaces+0x1f6/0x420 [ 1072.877407][T31871] unshare_nsproxy_namespaces+0x115/0x150 [ 1072.877550][T31871] ksys_unshare+0x3fd/0x6f0 [ 1072.877593][T31871] __x64_sys_unshare+0x1f/0x30 [ 1072.877634][T31871] x64_sys_call+0x1e33/0x2550 [ 1072.877699][T31871] do_syscall_64+0x112/0x360 [ 1072.877776][T31871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.877806][T31871] RIP: 0033:0x7f29799be1d9 [ 1072.877827][T31871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.877847][T31871] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1072.877875][T31871] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1072.877937][T31871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1072.877951][T31871] RBP: 00007f2979a55888 R08: 0000000000000000 R09: 0000000000000000 [ 1072.877965][T31871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.877981][T31871] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1072.878011][T31871] [ 1073.105681][T31877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8548'. [ 1073.178767][ C1] bridge0: port 1(syz_tun) entered learning state [ 1073.199149][ T30] kauditd_printk_skb: 591 callbacks suppressed [ 1073.199164][ T30] audit: type=1326 audit(1791692620.886:20817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.203033][ T30] audit: type=1326 audit(1791692620.886:20818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.207026][ T30] audit: type=1326 audit(1791692620.886:20819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.212294][ T30] audit: type=1326 audit(1791692620.896:20820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.213613][ T30] audit: type=1326 audit(1791692620.896:20821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.215969][ T30] audit: type=1326 audit(1791692620.896:20822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.218098][ T30] audit: type=1326 audit(1791692620.896:20823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.219620][ T30] audit: type=1326 audit(1791692620.906:20824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.221419][ T30] audit: type=1326 audit(1791692620.906:20825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.223204][ T30] audit: type=1326 audit(1791692620.906:20826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.8.8539" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa62640ea0e code=0x7ffc0000 [ 1073.383947][T31885] tipc: Enabling of bearer rejected, already enabled [ 1073.568471][T31888] dummy0 speed is unknown, defaulting to 1000 [ 1073.573044][T31889] dummy0 speed is unknown, defaulting to 1000 [ 1074.232290][T31908] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1074.302834][T31915] FAULT_INJECTION: forcing a failure. [ 1074.302834][T31915] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.302876][T31915] CPU: 0 UID: 0 PID: 31915 Comm: syz.1.8565 Not tainted syzkaller #0 PREEMPT(lazy) [ 1074.302954][T31915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1074.302969][T31915] Call Trace: [ 1074.302976][T31915] [ 1074.302984][T31915] __dump_stack+0x1d/0x30 [ 1074.303011][T31915] dump_stack_lvl+0x95/0xd0 [ 1074.303205][T31915] dump_stack+0x15/0x1b [ 1074.303312][T31915] should_fail_ex+0x262/0x280 [ 1074.303350][T31915] ? __register_sysctl_table+0x52/0xbe0 [ 1074.303389][T31915] should_failslab+0x8c/0xb0 [ 1074.303509][T31915] __kmalloc_noprof+0xd0/0x4d0 [ 1074.303543][T31915] ? __register_sysctl_table+0x52/0xbe0 [ 1074.303620][T31915] __register_sysctl_table+0x52/0xbe0 [ 1074.303656][T31915] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 1074.303710][T31915] ? vrf_netns_init+0x97/0x110 [ 1074.303822][T31915] ? vrf_netns_init+0x97/0x110 [ 1074.303865][T31915] register_net_sysctl_sz+0x118/0x190 [ 1074.303917][T31915] vrf_netns_init+0xc6/0x110 [ 1074.304001][T31915] ops_init+0x22a/0x2e0 [ 1074.304052][T31915] setup_net+0x9f/0x230 [ 1074.304092][T31915] copy_net_ns+0x333/0x490 [ 1074.304129][T31915] create_new_namespaces+0x1f6/0x420 [ 1074.304216][T31915] unshare_nsproxy_namespaces+0x115/0x150 [ 1074.304267][T31915] ksys_unshare+0x3fd/0x6f0 [ 1074.304355][T31915] __x64_sys_unshare+0x1f/0x30 [ 1074.304396][T31915] x64_sys_call+0x1e33/0x2550 [ 1074.304442][T31915] do_syscall_64+0x112/0x360 [ 1074.304529][T31915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.304563][T31915] RIP: 0033:0x7f29799be1d9 [ 1074.304586][T31915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.304610][T31915] RSP: 002b:00007f2978417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1074.304641][T31915] RAX: ffffffffffffffda RBX: 00007f2979c45fa0 RCX: 00007f29799be1d9 [ 1074.304662][T31915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1074.304681][T31915] RBP: 00007f2979a55888 R08: 0000000000000000 R09: 0000000000000000 [ 1074.304700][T31915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.304714][T31915] R13: 00007f2979c46038 R14: 00007f2979c45fa0 R15: 00007ffd56af2088 [ 1074.304763][T31915] [ 1074.648672][T31928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8571'. [ 1074.736090][T31930] dummy0 speed is unknown, defaulting to 1000 [ 1074.774812][T31934] dummy0 speed is unknown, defaulting to 1000 [ 1074.887319][T31938] FAULT_INJECTION: forcing a failure. [ 1074.887319][T31938] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.887354][T31938] CPU: 1 UID: 0 PID: 31938 Comm: syz.5.8575 Not tainted syzkaller #0 PREEMPT(lazy) [ 1074.887384][T31938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1074.887400][T31938] Call Trace: [ 1074.887408][T31938] [ 1074.887428][T31938] __dump_stack+0x1d/0x30 [ 1074.887459][T31938] dump_stack_lvl+0x95/0xd0 [ 1074.887535][T31938] dump_stack+0x15/0x1b [ 1074.887560][T31938] should_fail_ex+0x262/0x280 [ 1074.887631][T31938] ? ops_init+0x4b/0x2e0 [ 1074.887730][T31938] should_failslab+0x8c/0xb0 [ 1074.887830][T31938] __kmalloc_noprof+0xd0/0x4d0 [ 1074.887925][T31938] ? ops_init+0x4b/0x2e0 [ 1074.887946][T31938] ? bond_create_sysfs+0x7c/0xb0 [ 1074.887988][T31938] ops_init+0x4b/0x2e0 [ 1074.888011][T31938] setup_net+0x9f/0x230 [ 1074.888049][T31938] copy_net_ns+0x333/0x490 [ 1074.888087][T31938] create_new_namespaces+0x1f6/0x420 [ 1074.888131][T31938] unshare_nsproxy_namespaces+0x115/0x150 [ 1074.888172][T31938] ksys_unshare+0x3fd/0x6f0 [ 1074.888205][T31938] __x64_sys_unshare+0x1f/0x30 [ 1074.888345][T31938] x64_sys_call+0x1e33/0x2550 [ 1074.888380][T31938] do_syscall_64+0x112/0x360 [ 1074.888420][T31938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.888509][T31938] RIP: 0033:0x7eff6d52e1d9 [ 1074.888528][T31938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.888597][T31938] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1074.888623][T31938] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1074.888696][T31938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1074.888716][T31938] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1074.888736][T31938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.888761][T31938] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1074.888787][T31938] [ 1075.683527][T31974] loop8: detected capacity change from 0 to 2048 [ 1075.709820][T31974] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.727952][T31976] FAULT_INJECTION: forcing a failure. [ 1075.727952][T31976] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.728058][T31976] CPU: 0 UID: 0 PID: 31976 Comm: syz.5.8589 Not tainted syzkaller #0 PREEMPT(lazy) [ 1075.728189][T31976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1075.728242][T31976] Call Trace: [ 1075.728263][T31976] [ 1075.728293][T31976] __dump_stack+0x1d/0x30 [ 1075.728377][T31976] dump_stack_lvl+0x95/0xd0 [ 1075.728453][T31976] dump_stack+0x15/0x1b [ 1075.728599][T31976] should_fail_ex+0x262/0x280 [ 1075.728709][T31976] ? security_sk_alloc+0x52/0x120 [ 1075.728830][T31976] should_failslab+0x8c/0xb0 [ 1075.729019][T31976] __kmalloc_noprof+0xd0/0x4d0 [ 1075.729150][T31976] ? security_sk_alloc+0x52/0x120 [ 1075.729268][T31976] ? __kmalloc_noprof+0x1f1/0x4d0 [ 1075.729418][T31976] security_sk_alloc+0x52/0x120 [ 1075.729578][T31976] sk_prot_alloc+0xc2/0x180 [ 1075.729692][T31976] sk_alloc+0x34/0x3e0 [ 1075.729762][T31976] __netlink_kernel_create+0xe9/0x550 [ 1075.729878][T31976] ? ops_init+0x4b/0x2e0 [ 1075.729952][T31976] diag_net_init+0x4e/0xa0 [ 1075.730057][T31976] ? __pfx_sock_diag_rcv+0x10/0x10 [ 1075.730180][T31976] ? __pfx_sock_diag_bind+0x10/0x10 [ 1075.730318][T31976] ops_init+0x22a/0x2e0 [ 1075.730432][T31976] setup_net+0x9f/0x230 [ 1075.730553][T31976] copy_net_ns+0x333/0x490 [ 1075.730730][T31976] create_new_namespaces+0x1f6/0x420 [ 1075.730869][T31976] unshare_nsproxy_namespaces+0x115/0x150 [ 1075.730953][T31976] ksys_unshare+0x3fd/0x6f0 [ 1075.731048][T31976] __x64_sys_unshare+0x1f/0x30 [ 1075.731077][T31976] x64_sys_call+0x1e33/0x2550 [ 1075.731105][T31976] do_syscall_64+0x112/0x360 [ 1075.731155][T31976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.731324][T31976] RIP: 0033:0x7eff6d52e1d9 [ 1075.731344][T31976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.731366][T31976] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1075.731453][T31976] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1075.731470][T31976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1075.731484][T31976] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1075.731499][T31976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.731513][T31976] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1075.731572][T31976] [ 1076.117477][T28848] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.239733][T32012] macsec1: entered allmulticast mode [ 1076.239753][T32012] veth1_macvtap: entered allmulticast mode [ 1076.585076][T32003] loop5: detected capacity change from 0 to 512 [ 1076.645231][T32032] loop8: detected capacity change from 0 to 2048 [ 1076.670660][T32032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.692094][T32003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.692171][T32003] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.840726][T32041] dummy0 speed is unknown, defaulting to 1000 [ 1076.894355][T27433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.960160][T32054] FAULT_INJECTION: forcing a failure. [ 1076.960160][T32054] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.960288][T32054] CPU: 1 UID: 0 PID: 32054 Comm: syz.0.8616 Not tainted syzkaller #0 PREEMPT(lazy) [ 1076.960326][T32054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1076.960345][T32054] Call Trace: [ 1076.960355][T32054] [ 1076.960366][T32054] __dump_stack+0x1d/0x30 [ 1076.960401][T32054] dump_stack_lvl+0x95/0xd0 [ 1076.960489][T32054] dump_stack+0x15/0x1b [ 1076.960514][T32054] should_fail_ex+0x262/0x280 [ 1076.960593][T32054] ? find_get_pmu_context+0x5a/0x430 [ 1076.960692][T32054] should_failslab+0x8c/0xb0 [ 1076.960726][T32054] __kmalloc_cache_noprof+0x7a/0x400 [ 1076.960793][T32054] ? __kmalloc_cache_noprof+0x331/0x400 [ 1076.960835][T32054] ? find_get_pmu_context+0x5a/0x430 [ 1076.960960][T32054] find_get_pmu_context+0x5a/0x430 [ 1076.960987][T32054] ? find_get_context+0x41f/0x4f0 [ 1076.961017][T32054] __se_sys_perf_event_open+0x9b5/0x1290 [ 1076.961055][T32054] __x64_sys_perf_event_open+0x67/0x80 [ 1076.961078][T32054] x64_sys_call+0x1f25/0x2550 [ 1076.961125][T32054] do_syscall_64+0x112/0x360 [ 1076.961167][T32054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.961201][T32054] RIP: 0033:0x7f89be53e1d9 [ 1076.961220][T32054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.961240][T32054] RSP: 002b:00007f89bcf97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1076.961271][T32054] RAX: ffffffffffffffda RBX: 00007f89be7c5fa0 RCX: 00007f89be53e1d9 [ 1076.961293][T32054] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1076.961347][T32054] RBP: 00007f89be5d5888 R08: 0000000000000009 R09: 0000000000000000 [ 1076.961387][T32054] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1076.961407][T32054] R13: 00007f89be7c6038 R14: 00007f89be7c5fa0 R15: 00007ffd14314388 [ 1076.961505][T32054] [ 1076.963336][T32044] dummy0 speed is unknown, defaulting to 1000 [ 1077.220373][T28848] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.147449][T32088] loop0: detected capacity change from 0 to 2048 [ 1078.470720][T32108] bridge0: port 1(syz_tun) received tcn bpdu [ 1078.470818][T32108] bridge0: topology change detected, propagating [ 1078.505557][T32110] FAULT_INJECTION: forcing a failure. [ 1078.505557][T32110] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.505600][T32110] CPU: 1 UID: 0 PID: 32110 Comm: syz.6.8638 Not tainted syzkaller #0 PREEMPT(lazy) [ 1078.505653][T32110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1078.505669][T32110] Call Trace: [ 1078.505677][T32110] [ 1078.505685][T32110] __dump_stack+0x1d/0x30 [ 1078.505719][T32110] dump_stack_lvl+0x95/0xd0 [ 1078.505754][T32110] dump_stack+0x15/0x1b [ 1078.505825][T32110] should_fail_ex+0x262/0x280 [ 1078.505909][T32110] ? security_inode_alloc+0x37/0x100 [ 1078.505956][T32110] should_failslab+0x8c/0xb0 [ 1078.506006][T32110] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1078.506083][T32110] ? security_inode_alloc+0x37/0x100 [ 1078.506193][T32110] security_inode_alloc+0x37/0x100 [ 1078.506226][T32110] inode_init_always_gfp+0x495/0x4e0 [ 1078.506260][T32110] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1078.506331][T32110] alloc_inode+0x58/0x170 [ 1078.506362][T32110] __sock_create+0x121/0x580 [ 1078.506474][T32110] ? xfd_validate_state+0x45/0xf0 [ 1078.506504][T32110] __sys_socket+0xaf/0x180 [ 1078.506609][T32110] __x64_sys_socket+0x3f/0x50 [ 1078.506633][T32110] x64_sys_call+0x246e/0x2550 [ 1078.506662][T32110] do_syscall_64+0x112/0x360 [ 1078.506697][T32110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.506803][T32110] RIP: 0033:0x7faae164e1d9 [ 1078.506828][T32110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.506856][T32110] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1078.506886][T32110] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1078.507024][T32110] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1078.507039][T32110] RBP: 00007faae16e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1078.507087][T32110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.507154][T32110] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1078.507205][T32110] [ 1078.507237][T32110] net_ratelimit: 11 callbacks suppressed [ 1078.507253][T32110] socket: no more sockets [ 1078.743292][T32112] dummy0 speed is unknown, defaulting to 1000 [ 1078.861030][T32122] dummy0 speed is unknown, defaulting to 1000 [ 1079.103422][T32131] FAULT_INJECTION: forcing a failure. [ 1079.103422][T32131] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.103499][T32131] CPU: 0 UID: 0 PID: 32131 Comm: syz.0.8647 Not tainted syzkaller #0 PREEMPT(lazy) [ 1079.103535][T32131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1079.103554][T32131] Call Trace: [ 1079.103621][T32131] [ 1079.103633][T32131] __dump_stack+0x1d/0x30 [ 1079.103670][T32131] dump_stack_lvl+0x95/0xd0 [ 1079.103704][T32131] dump_stack+0x15/0x1b [ 1079.103774][T32131] should_fail_ex+0x262/0x280 [ 1079.103822][T32131] ? find_get_pmu_context+0x5a/0x430 [ 1079.103887][T32131] should_failslab+0x8c/0xb0 [ 1079.103983][T32131] __kmalloc_cache_noprof+0x7a/0x400 [ 1079.104023][T32131] ? find_get_pmu_context+0x5a/0x430 [ 1079.104055][T32131] find_get_pmu_context+0x5a/0x430 [ 1079.104086][T32131] ? find_get_context+0x41f/0x4f0 [ 1079.104139][T32131] __se_sys_perf_event_open+0x9b5/0x1290 [ 1079.104180][T32131] __x64_sys_perf_event_open+0x67/0x80 [ 1079.104212][T32131] x64_sys_call+0x1f25/0x2550 [ 1079.104251][T32131] do_syscall_64+0x112/0x360 [ 1079.104327][T32131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.104362][T32131] RIP: 0033:0x7f89be53e1d9 [ 1079.104386][T32131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.104407][T32131] RSP: 002b:00007f89bcf97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1079.104429][T32131] RAX: ffffffffffffffda RBX: 00007f89be7c5fa0 RCX: 00007f89be53e1d9 [ 1079.104444][T32131] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1079.104477][T32131] RBP: 00007f89be5d5888 R08: 0000000000000009 R09: 0000000000000000 [ 1079.104496][T32131] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1079.104517][T32131] R13: 00007f89be7c6038 R14: 00007f89be7c5fa0 R15: 00007ffd14314388 [ 1079.104546][T32131] [ 1079.585126][T32136] dummy0 speed is unknown, defaulting to 1000 [ 1079.656589][T32138] FAULT_INJECTION: forcing a failure. [ 1079.656589][T32138] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.656620][T32138] CPU: 0 UID: 0 PID: 32138 Comm: syz.6.8650 Not tainted syzkaller #0 PREEMPT(lazy) [ 1079.656707][T32138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1079.656725][T32138] Call Trace: [ 1079.656732][T32138] [ 1079.656743][T32138] __dump_stack+0x1d/0x30 [ 1079.656779][T32138] dump_stack_lvl+0x95/0xd0 [ 1079.656804][T32138] dump_stack+0x15/0x1b [ 1079.656873][T32138] should_fail_ex+0x262/0x280 [ 1079.656916][T32138] ? shrinker_alloc+0x3b/0x6e0 [ 1079.656958][T32138] should_failslab+0x8c/0xb0 [ 1079.656992][T32138] __kmalloc_cache_noprof+0x7a/0x400 [ 1079.657102][T32138] ? shrinker_alloc+0x3b/0x6e0 [ 1079.657142][T32138] shrinker_alloc+0x3b/0x6e0 [ 1079.657183][T32138] ? __percpu_init_rwsem+0x24/0x90 [ 1079.657264][T32138] ? rcu_sync_init+0x32/0x40 [ 1079.657295][T32138] sget_fc+0x875/0xfa0 [ 1079.657335][T32138] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1079.657414][T32138] ? __kmalloc_cache_noprof+0x19b/0x400 [ 1079.657477][T32138] ? mqueue_init_fs_context+0x38/0x2c0 [ 1079.657516][T32138] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1079.657550][T32138] get_tree_nodev+0x2a/0x100 [ 1079.657685][T32138] mqueue_get_tree+0x5d/0x80 [ 1079.657715][T32138] vfs_get_tree+0x57/0x1d0 [ 1079.657761][T32138] fc_mount_longterm+0x18/0xb0 [ 1079.657816][T32138] mq_init_ns+0x2db/0x370 [ 1079.657855][T32138] copy_ipcs+0x26d/0x460 [ 1079.657952][T32138] create_new_namespaces+0x121/0x420 [ 1079.657998][T32138] unshare_nsproxy_namespaces+0x115/0x150 [ 1079.658034][T32138] ksys_unshare+0x3fd/0x6f0 [ 1079.658073][T32138] __x64_sys_unshare+0x1f/0x30 [ 1079.658171][T32138] x64_sys_call+0x1e33/0x2550 [ 1079.658256][T32138] do_syscall_64+0x112/0x360 [ 1079.658297][T32138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.658331][T32138] RIP: 0033:0x7faae164e1d9 [ 1079.658352][T32138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.658447][T32138] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1079.658478][T32138] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1079.658496][T32138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1079.658510][T32138] RBP: 00007faae16e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1079.658539][T32138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.658558][T32138] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1079.658581][T32138] [ 1079.720657][T32138] dummy0 speed is unknown, defaulting to 1000 [ 1079.921266][T32048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1080.020250][T32141] FAULT_INJECTION: forcing a failure. [ 1080.020250][T32141] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.020341][T32141] CPU: 0 UID: 0 PID: 32141 Comm: syz.0.8652 Not tainted syzkaller #0 PREEMPT(lazy) [ 1080.020369][T32141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1080.020441][T32141] Call Trace: [ 1080.020452][T32141] [ 1080.020463][T32141] __dump_stack+0x1d/0x30 [ 1080.020497][T32141] dump_stack_lvl+0x95/0xd0 [ 1080.020593][T32141] dump_stack+0x15/0x1b [ 1080.020618][T32141] should_fail_ex+0x262/0x280 [ 1080.020649][T32141] ? sk_prot_alloc+0xa8/0x180 [ 1080.020684][T32141] should_failslab+0x8c/0xb0 [ 1080.020789][T32141] __kmalloc_noprof+0xd0/0x4d0 [ 1080.020825][T32141] ? sk_prot_alloc+0xa8/0x180 [ 1080.020862][T32141] sk_prot_alloc+0xa8/0x180 [ 1080.020898][T32141] sk_alloc+0x34/0x3e0 [ 1080.020978][T32141] netlink_create+0x331/0x460 [ 1080.021007][T32141] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1080.021077][T32141] __sock_create+0x2e5/0x580 [ 1080.021170][T32141] __sys_socket+0xaf/0x180 [ 1080.021205][T32141] __x64_sys_socket+0x3f/0x50 [ 1080.021225][T32141] x64_sys_call+0x246e/0x2550 [ 1080.021328][T32141] do_syscall_64+0x112/0x360 [ 1080.021369][T32141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.021395][T32141] RIP: 0033:0x7f89be53e1d9 [ 1080.021412][T32141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.021501][T32141] RSP: 002b:00007f89bcf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1080.021529][T32141] RAX: ffffffffffffffda RBX: 00007f89be7c5fa0 RCX: 00007f89be53e1d9 [ 1080.021550][T32141] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 1080.021569][T32141] RBP: 00007f89be5d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1080.021588][T32141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.021601][T32141] R13: 00007f89be7c6038 R14: 00007f89be7c5fa0 R15: 00007ffd14314388 [ 1080.021766][T32141] [ 1080.235991][T32141] dummy0 speed is unknown, defaulting to 1000 [ 1080.304997][T32155] FAULT_INJECTION: forcing a failure. [ 1080.304997][T32155] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.305034][T32155] CPU: 1 UID: 0 PID: 32155 Comm: syz.6.8658 Not tainted syzkaller #0 PREEMPT(lazy) [ 1080.305082][T32155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1080.305100][T32155] Call Trace: [ 1080.305174][T32155] [ 1080.305183][T32155] __dump_stack+0x1d/0x30 [ 1080.305279][T32155] dump_stack_lvl+0x95/0xd0 [ 1080.305340][T32155] dump_stack+0x15/0x1b [ 1080.305376][T32155] should_fail_ex+0x262/0x280 [ 1080.305416][T32155] ? find_get_pmu_context+0x5a/0x430 [ 1080.305446][T32155] should_failslab+0x8c/0xb0 [ 1080.305555][T32155] __kmalloc_cache_noprof+0x7a/0x400 [ 1080.305653][T32155] ? find_get_pmu_context+0x5a/0x430 [ 1080.305684][T32155] find_get_pmu_context+0x5a/0x430 [ 1080.305733][T32155] ? find_get_context+0x41f/0x4f0 [ 1080.305763][T32155] __se_sys_perf_event_open+0x9b5/0x1290 [ 1080.305802][T32155] __x64_sys_perf_event_open+0x67/0x80 [ 1080.305861][T32155] x64_sys_call+0x1f25/0x2550 [ 1080.305947][T32155] do_syscall_64+0x112/0x360 [ 1080.305985][T32155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.306011][T32155] RIP: 0033:0x7faae164e1d9 [ 1080.306029][T32155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.306050][T32155] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1080.306173][T32155] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1080.306201][T32155] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1080.306216][T32155] RBP: 00007faae16e5888 R08: 0000000000000009 R09: 0000000000000000 [ 1080.306231][T32155] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1080.306298][T32155] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1080.306323][T32155] [ 1080.561142][T32162] dummy0 speed is unknown, defaulting to 1000 [ 1080.646086][T32166] dummy0 speed is unknown, defaulting to 1000 [ 1080.679369][T32168] loop6: detected capacity change from 0 to 512 [ 1080.684952][T32174] FAULT_INJECTION: forcing a failure. [ 1080.684952][T32174] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.685068][T32174] CPU: 0 UID: 0 PID: 32174 Comm: syz.5.8665 Not tainted syzkaller #0 PREEMPT(lazy) [ 1080.685104][T32174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1080.685122][T32174] Call Trace: [ 1080.685132][T32174] [ 1080.685142][T32174] __dump_stack+0x1d/0x30 [ 1080.685179][T32174] dump_stack_lvl+0x95/0xd0 [ 1080.685238][T32174] dump_stack+0x15/0x1b [ 1080.685262][T32174] should_fail_ex+0x262/0x280 [ 1080.685343][T32174] ? __list_lru_init+0x72/0x2f0 [ 1080.685435][T32174] should_failslab+0x8c/0xb0 [ 1080.685534][T32174] __kmalloc_noprof+0xd0/0x4d0 [ 1080.685664][T32174] ? __list_lru_init+0x72/0x2f0 [ 1080.685697][T32174] __list_lru_init+0x72/0x2f0 [ 1080.685728][T32174] sget_fc+0x92b/0xfa0 [ 1080.685775][T32174] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1080.685828][T32174] ? __kmalloc_cache_noprof+0x19b/0x400 [ 1080.685878][T32174] ? mqueue_init_fs_context+0x38/0x2c0 [ 1080.685954][T32174] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1080.685996][T32174] get_tree_nodev+0x2a/0x100 [ 1080.686039][T32174] mqueue_get_tree+0x5d/0x80 [ 1080.686079][T32174] vfs_get_tree+0x57/0x1d0 [ 1080.686137][T32174] fc_mount_longterm+0x18/0xb0 [ 1080.686182][T32174] mq_init_ns+0x2db/0x370 [ 1080.686218][T32174] copy_ipcs+0x26d/0x460 [ 1080.686310][T32174] create_new_namespaces+0x121/0x420 [ 1080.686364][T32174] unshare_nsproxy_namespaces+0x115/0x150 [ 1080.686459][T32174] ksys_unshare+0x3fd/0x6f0 [ 1080.686534][T32174] __x64_sys_unshare+0x1f/0x30 [ 1080.686573][T32174] x64_sys_call+0x1e33/0x2550 [ 1080.686636][T32174] do_syscall_64+0x112/0x360 [ 1080.686697][T32174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.686764][T32174] RIP: 0033:0x7eff6d52e1d9 [ 1080.686788][T32174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.686826][T32174] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1080.686856][T32174] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1080.686876][T32174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1080.686957][T32174] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1080.686977][T32174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.686991][T32174] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1080.687020][T32174] [ 1080.791588][T32168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.800542][T32168] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.969171][T32176] FAULT_INJECTION: forcing a failure. [ 1080.969171][T32176] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.969205][T32176] CPU: 1 UID: 0 PID: 32176 Comm: syz.0.8666 Not tainted syzkaller #0 PREEMPT(lazy) [ 1080.969235][T32176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1080.969297][T32176] Call Trace: [ 1080.969307][T32176] [ 1080.969317][T32176] __dump_stack+0x1d/0x30 [ 1080.969344][T32176] dump_stack_lvl+0x95/0xd0 [ 1080.969370][T32176] dump_stack+0x15/0x1b [ 1080.969460][T32176] should_fail_ex+0x262/0x280 [ 1080.969497][T32176] ? __register_sysctl_table+0x52/0xbe0 [ 1080.969608][T32176] should_failslab+0x8c/0xb0 [ 1080.969696][T32176] __kmalloc_noprof+0xd0/0x4d0 [ 1080.969740][T32176] ? __register_sysctl_table+0x52/0xbe0 [ 1080.969768][T32176] __register_sysctl_table+0x52/0xbe0 [ 1080.969795][T32176] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 1080.969876][T32176] ? vrf_netns_init+0x97/0x110 [ 1080.969985][T32176] ? vrf_netns_init+0x97/0x110 [ 1080.970025][T32176] register_net_sysctl_sz+0x118/0x190 [ 1080.970085][T32176] vrf_netns_init+0xc6/0x110 [ 1080.970198][T32176] ops_init+0x22a/0x2e0 [ 1080.970255][T32176] setup_net+0x9f/0x230 [ 1080.970323][T32176] copy_net_ns+0x333/0x490 [ 1080.970360][T32176] create_new_namespaces+0x1f6/0x420 [ 1080.970400][T32176] unshare_nsproxy_namespaces+0x115/0x150 [ 1080.970479][T32176] ksys_unshare+0x3fd/0x6f0 [ 1080.970512][T32176] __x64_sys_unshare+0x1f/0x30 [ 1080.970549][T32176] x64_sys_call+0x1e33/0x2550 [ 1080.970579][T32176] do_syscall_64+0x112/0x360 [ 1080.970679][T32176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.970790][T32176] RIP: 0033:0x7f89be53e1d9 [ 1080.970824][T32176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.970847][T32176] RSP: 002b:00007f89bcf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1080.970873][T32176] RAX: ffffffffffffffda RBX: 00007f89be7c5fa0 RCX: 00007f89be53e1d9 [ 1080.970891][T32176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1080.970919][T32176] RBP: 00007f89be5d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1080.970935][T32176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.970950][T32176] R13: 00007f89be7c6038 R14: 00007f89be7c5fa0 R15: 00007ffd14314388 [ 1080.970984][T32176] [ 1081.172161][T28061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.239254][T32183] dummy0 speed is unknown, defaulting to 1000 [ 1081.382213][T32183] FAULT_INJECTION: forcing a failure. [ 1081.382213][T32183] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1081.382260][T32183] CPU: 1 UID: 0 PID: 32183 Comm: syz.5.8668 Not tainted syzkaller #0 PREEMPT(lazy) [ 1081.382291][T32183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1081.382306][T32183] Call Trace: [ 1081.382314][T32183] [ 1081.382326][T32183] __dump_stack+0x1d/0x30 [ 1081.382425][T32183] dump_stack_lvl+0x95/0xd0 [ 1081.382451][T32183] dump_stack+0x15/0x1b [ 1081.382477][T32183] should_fail_ex+0x262/0x280 [ 1081.382520][T32183] should_fail+0xb/0x20 [ 1081.382622][T32183] get_futex_key+0x12d/0xb10 [ 1081.382671][T32183] futex_wake+0x89/0x400 [ 1081.382706][T32183] do_futex+0x3f8/0x460 [ 1081.382774][T32183] __se_sys_futex+0x2f6/0x370 [ 1081.382824][T32183] __x64_sys_futex+0x78/0x90 [ 1081.382880][T32183] x64_sys_call+0x22e2/0x2550 [ 1081.382921][T32183] do_syscall_64+0x112/0x360 [ 1081.382976][T32183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.383012][T32183] RIP: 0033:0x7eff6d52e1d9 [ 1081.383038][T32183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.383068][T32183] RSP: 002b:00007eff6bf870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1081.383100][T32183] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa8 RCX: 00007eff6d52e1d9 [ 1081.383165][T32183] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007eff6d7b5fac [ 1081.383187][T32183] RBP: 00007eff6d7b5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1081.383204][T32183] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1081.383237][T32183] R13: 00007eff6d7b6038 R14: 00007ffdf0d1ffc0 R15: 00007ffdf0d200a8 [ 1081.383263][T32183] [ 1081.687624][T32194] tipc: Enabling of bearer rejected, already enabled [ 1081.776827][T32198] FAULT_INJECTION: forcing a failure. [ 1081.776827][T32198] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.776860][T32198] CPU: 1 UID: 0 PID: 32198 Comm: syz.8.8674 Not tainted syzkaller #0 PREEMPT(lazy) [ 1081.776899][T32198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1081.776934][T32198] Call Trace: [ 1081.776944][T32198] [ 1081.776957][T32198] __dump_stack+0x1d/0x30 [ 1081.776995][T32198] dump_stack_lvl+0x95/0xd0 [ 1081.777038][T32198] dump_stack+0x15/0x1b [ 1081.777064][T32198] should_fail_ex+0x262/0x280 [ 1081.777134][T32198] ? shrinker_alloc+0x3b/0x6e0 [ 1081.777168][T32198] should_failslab+0x8c/0xb0 [ 1081.777247][T32198] __kmalloc_cache_noprof+0x7a/0x400 [ 1081.777287][T32198] ? shrinker_alloc+0x3b/0x6e0 [ 1081.777381][T32198] shrinker_alloc+0x3b/0x6e0 [ 1081.777416][T32198] ? __percpu_init_rwsem+0x24/0x90 [ 1081.777440][T32198] ? sget_fc+0x6dc/0xfa0 [ 1081.777509][T32198] sget_fc+0x875/0xfa0 [ 1081.777540][T32198] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1081.777586][T32198] ? __kmalloc_cache_noprof+0x19b/0x400 [ 1081.777736][T32198] ? mqueue_init_fs_context+0x38/0x2c0 [ 1081.777863][T32198] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1081.777904][T32198] get_tree_nodev+0x2a/0x100 [ 1081.777987][T32198] mqueue_get_tree+0x5d/0x80 [ 1081.778035][T32198] vfs_get_tree+0x57/0x1d0 [ 1081.778081][T32198] fc_mount_longterm+0x18/0xb0 [ 1081.778184][T32198] mq_init_ns+0x2db/0x370 [ 1081.778218][T32198] copy_ipcs+0x26d/0x460 [ 1081.778287][T32198] create_new_namespaces+0x121/0x420 [ 1081.778341][T32198] unshare_nsproxy_namespaces+0x115/0x150 [ 1081.778413][T32198] ksys_unshare+0x3fd/0x6f0 [ 1081.778447][T32198] __x64_sys_unshare+0x1f/0x30 [ 1081.778520][T32198] x64_sys_call+0x1e33/0x2550 [ 1081.778560][T32198] do_syscall_64+0x112/0x360 [ 1081.778628][T32198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.778724][T32198] RIP: 0033:0x7fa62644e1d9 [ 1081.778749][T32198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.778803][T32198] RSP: 002b:00007fa624ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1081.778835][T32198] RAX: ffffffffffffffda RBX: 00007fa6266d5fa0 RCX: 00007fa62644e1d9 [ 1081.778912][T32198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1081.778928][T32198] RBP: 00007fa6264e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1081.778973][T32198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.778993][T32198] R13: 00007fa6266d6038 R14: 00007fa6266d5fa0 R15: 00007ffd38c842c8 [ 1081.779025][T32198] [ 1082.081168][T32202] dummy0 speed is unknown, defaulting to 1000 [ 1082.371929][T22852] tipc: Resetting bearer [ 1082.377456][T22852] tipc: Disabling bearer [ 1082.401267][T32209] dummy0 speed is unknown, defaulting to 1000 [ 1082.436718][T32195] dummy0 speed is unknown, defaulting to 1000 [ 1082.727554][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.784093][ T30] kauditd_printk_skb: 608 callbacks suppressed [ 1082.784114][ T30] audit: type=1400 audit(1791692630.466:21435): avc: denied { accept } for pid=32221 comm="syz.0.8681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1082.819182][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.866360][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8682'. [ 1082.896086][T32217] loop8: detected capacity change from 0 to 512 [ 1082.943723][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.988645][T32195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.988692][T32195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.990148][T32195] bridge_slave_0: entered allmulticast mode [ 1082.991606][T32195] bridge_slave_0: entered promiscuous mode [ 1082.997313][T32195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.997552][T32195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.997812][T32195] bridge_slave_1: entered allmulticast mode [ 1083.001488][T32195] bridge_slave_1: entered promiscuous mode [ 1083.061083][T32195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.063485][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.070177][T32195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.244326][T32195] team0: Port device team_slave_0 added [ 1083.245374][T32195] team0: Port device team_slave_1 added [ 1083.253040][T32217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.253272][T32217] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.311632][T32195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.311654][T32195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.311692][T32195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.320059][T32195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.320104][T32195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.320202][T32195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.372041][T32195] hsr_slave_0: entered promiscuous mode [ 1083.373291][T32195] hsr_slave_1: entered promiscuous mode [ 1083.373834][T32195] debugfs: 'hsr0' already exists in 'hsr' [ 1083.373878][T32195] Cannot create hsr debugfs directory [ 1083.421408][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 1083.421432][ C1] bridge0: topology change detected, propagating [ 1083.506495][T28848] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.772810][ T12] bond0 (unregistering): Released all slaves [ 1083.782282][ T12] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1083.796949][ T12] bond1 (unregistering): Released all slaves [ 1083.805561][ T12] bond2 (unregistering): Released all slaves [ 1083.819405][ T12] bond3 (unregistering): (slave veth7): Releasing active interface [ 1083.820227][ T12] bond3 (unregistering): Released all slaves [ 1083.823668][ T12] bond4 (unregistering): (slave veth9): Releasing active interface [ 1083.824985][ T12] bond4 (unregistering): Released all slaves [ 1083.858017][ T12] bond5 (unregistering): (slave veth11): Releasing active interface [ 1083.859779][ T12] bond5 (unregistering): Released all slaves [ 1083.875872][ T12] bond6 (unregistering): (slave veth13): Releasing active interface [ 1083.877348][ T12] bond6 (unregistering): Released all slaves [ 1083.917711][ T12] bond7 (unregistering): (slave veth15): Releasing active interface [ 1083.931814][ T12] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1083.933830][ T12] bond7 (unregistering): Released all slaves [ 1083.987791][T32246] FAULT_INJECTION: forcing a failure. [ 1083.987791][T32246] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.987844][T32246] CPU: 0 UID: 0 PID: 32246 Comm: syz.5.8687 Not tainted syzkaller #0 PREEMPT(lazy) [ 1083.987875][T32246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1083.987888][T32246] Call Trace: [ 1083.987897][T32246] [ 1083.987909][T32246] __dump_stack+0x1d/0x30 [ 1083.987940][T32246] dump_stack_lvl+0x95/0xd0 [ 1083.987967][T32246] dump_stack+0x15/0x1b [ 1083.987997][T32246] should_fail_ex+0x262/0x280 [ 1083.988040][T32246] ? cache_create_net+0x72/0x150 [ 1083.988105][T32246] should_failslab+0x8c/0xb0 [ 1083.988177][T32246] __kmalloc_noprof+0xd0/0x4d0 [ 1083.988223][T32246] ? cache_create_net+0x72/0x150 [ 1083.988256][T32246] cache_create_net+0x72/0x150 [ 1083.988334][T32246] ip_map_cache_create+0x5e/0xd0 [ 1083.988467][T32246] sunrpc_init_net+0x75/0x150 [ 1083.988499][T32246] ops_init+0x22a/0x2e0 [ 1083.988529][T32246] setup_net+0x9f/0x230 [ 1083.988643][T32246] copy_net_ns+0x333/0x490 [ 1083.988688][T32246] create_new_namespaces+0x1f6/0x420 [ 1083.988736][T32246] unshare_nsproxy_namespaces+0x115/0x150 [ 1083.988838][T32246] ksys_unshare+0x3fd/0x6f0 [ 1083.988873][T32246] __x64_sys_unshare+0x1f/0x30 [ 1083.988905][T32246] x64_sys_call+0x1e33/0x2550 [ 1083.988977][T32246] do_syscall_64+0x112/0x360 [ 1083.989094][T32246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.989118][T32246] RIP: 0033:0x7eff6d52e1d9 [ 1083.989135][T32246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.989161][T32246] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1083.989188][T32246] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1083.989282][T32246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1083.989296][T32246] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1083.989311][T32246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.989324][T32246] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1083.989380][T32246] [ 1084.181227][ T12] tipc: Disabling bearer [ 1084.181329][ T12] tipc: Left network mode [ 1084.245477][ T12] hsr_slave_0: left promiscuous mode [ 1084.245826][ T12] hsr_slave_1: left promiscuous mode [ 1084.265068][ T12] veth1_macvtap: left promiscuous mode [ 1084.265103][ T12] veth0_macvtap: left promiscuous mode [ 1084.265168][ T12] veth1_vlan: left promiscuous mode [ 1084.265291][ T12] veth0_vlan: left promiscuous mode [ 1084.694614][T32262] FAULT_INJECTION: forcing a failure. [ 1084.694614][T32262] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.694656][T32262] CPU: 1 UID: 0 PID: 32262 Comm: syz.8.8692 Not tainted syzkaller #0 PREEMPT(lazy) [ 1084.694697][T32262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1084.694716][T32262] Call Trace: [ 1084.694791][T32262] [ 1084.694799][T32262] __dump_stack+0x1d/0x30 [ 1084.694835][T32262] dump_stack_lvl+0x95/0xd0 [ 1084.694864][T32262] dump_stack+0x15/0x1b [ 1084.694887][T32262] should_fail_ex+0x262/0x280 [ 1084.694949][T32262] ? __proc_create+0x3f1/0x6b0 [ 1084.694980][T32262] should_failslab+0x8c/0xb0 [ 1084.695027][T32262] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1084.695069][T32262] ? __proc_create+0x3f1/0x6b0 [ 1084.695141][T32262] __proc_create+0x3f1/0x6b0 [ 1084.695179][T32262] ? __pfx_psched_show+0x10/0x10 [ 1084.695238][T32262] proc_create_single_data+0xa3/0x140 [ 1084.695278][T32262] psched_net_init+0x3a/0x50 [ 1084.695426][T32262] ops_init+0x22a/0x2e0 [ 1084.695452][T32262] setup_net+0x9f/0x230 [ 1084.695486][T32262] copy_net_ns+0x333/0x490 [ 1084.695567][T32262] create_new_namespaces+0x1f6/0x420 [ 1084.695679][T32262] unshare_nsproxy_namespaces+0x115/0x150 [ 1084.695725][T32262] ksys_unshare+0x3fd/0x6f0 [ 1084.695764][T32262] __x64_sys_unshare+0x1f/0x30 [ 1084.695874][T32262] x64_sys_call+0x1e33/0x2550 [ 1084.695929][T32262] do_syscall_64+0x112/0x360 [ 1084.696026][T32262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.696059][T32262] RIP: 0033:0x7fa62644e1d9 [ 1084.696082][T32262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.696191][T32262] RSP: 002b:00007fa624ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1084.696215][T32262] RAX: ffffffffffffffda RBX: 00007fa6266d5fa0 RCX: 00007fa62644e1d9 [ 1084.696233][T32262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1084.696264][T32262] RBP: 00007fa6264e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1084.696280][T32262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.696293][T32262] R13: 00007fa6266d6038 R14: 00007fa6266d5fa0 R15: 00007ffd38c842c8 [ 1084.696314][T32262] [ 1084.890714][T32267] dummy0 speed is unknown, defaulting to 1000 [ 1085.083563][ T12] IPVS: stop unused estimator thread 0... [ 1085.230723][T32195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.240353][T32195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.241100][T32195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.262094][T32195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.265283][T32281] dummy0 speed is unknown, defaulting to 1000 [ 1085.278599][T32275] loop0: detected capacity change from 0 to 512 [ 1085.299088][T32195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.320798][T32195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.344039][T32195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.363072][T32195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1085.375866][T32275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.377885][T32275] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.547981][T32195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.577080][T32195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.589507][T23479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.589551][T23479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.596082][T23479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.596122][T23479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.598634][T24548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.738557][T32294] dummy0 speed is unknown, defaulting to 1000 [ 1085.913494][T32309] FAULT_INJECTION: forcing a failure. [ 1085.913494][T32309] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.913537][T32309] CPU: 1 UID: 0 PID: 32309 Comm: syz.0.8704 Not tainted syzkaller #0 PREEMPT(lazy) [ 1085.913635][T32309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1085.913649][T32309] Call Trace: [ 1085.913659][T32309] [ 1085.913669][T32309] __dump_stack+0x1d/0x30 [ 1085.913710][T32309] dump_stack_lvl+0x95/0xd0 [ 1085.913820][T32309] dump_stack+0x15/0x1b [ 1085.913887][T32309] should_fail_ex+0x262/0x280 [ 1085.913917][T32309] should_failslab+0x8c/0xb0 [ 1085.913966][T32309] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 1085.914000][T32309] ? __rcu_read_unlock+0x4e/0x70 [ 1085.914082][T32309] ? __d_alloc+0x34/0x320 [ 1085.914110][T32309] ? __d_alloc+0x34/0x320 [ 1085.914146][T32309] __d_alloc+0x34/0x320 [ 1085.914189][T32309] ? d_alloc_pseudo+0x13/0x80 [ 1085.914223][T32309] d_alloc_pseudo+0x1e/0x80 [ 1085.914258][T32309] alloc_path_pseudo+0xa4/0x140 [ 1085.914357][T32309] alloc_file_pseudo+0x55/0x120 [ 1085.914390][T32309] anon_inode_getfile+0xa0/0x120 [ 1085.914423][T32309] __se_sys_perf_event_open+0xc03/0x1290 [ 1085.914457][T32309] __x64_sys_perf_event_open+0x67/0x80 [ 1085.914546][T32309] x64_sys_call+0x1f25/0x2550 [ 1085.914582][T32309] do_syscall_64+0x112/0x360 [ 1085.914621][T32309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.914681][T32309] RIP: 0033:0x7f89be53e1d9 [ 1085.914699][T32309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.914722][T32309] RSP: 002b:00007f89bcf97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1085.914750][T32309] RAX: ffffffffffffffda RBX: 00007f89be7c5fa0 RCX: 00007f89be53e1d9 [ 1085.914770][T32309] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1085.914849][T32309] RBP: 00007f89be5d5888 R08: 0000000000000009 R09: 0000000000000000 [ 1085.914864][T32309] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1085.914933][T32309] R13: 00007f89be7c6038 R14: 00007f89be7c5fa0 R15: 00007ffd14314388 [ 1085.914961][T32309] [ 1086.175259][T32195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.397360][T32322] dummy0 speed is unknown, defaulting to 1000 [ 1086.411172][T32195] veth0_vlan: entered promiscuous mode [ 1086.415111][T32195] veth1_vlan: entered promiscuous mode [ 1086.510516][T32195] veth0_macvtap: entered promiscuous mode [ 1086.513583][T32195] veth1_macvtap: entered promiscuous mode [ 1086.536800][T32331] dummy0 speed is unknown, defaulting to 1000 [ 1086.549729][T32195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.579621][T32195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.738854][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.738906][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.739028][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.739072][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.777438][ T30] audit: type=1400 audit(1791692634.456:21436): avc: denied { mounton } for pid=32195 comm="syz-executor" path="/root/syzkaller.QT9l7y/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=110739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1086.864392][T32334] loop0: detected capacity change from 0 to 512 [ 1086.971039][T32347] FAULT_INJECTION: forcing a failure. [ 1086.971039][T32347] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.971116][T32347] CPU: 0 UID: 0 PID: 32347 Comm: syz.6.8716 Not tainted syzkaller #0 PREEMPT(lazy) [ 1086.971153][T32347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1086.971174][T32347] Call Trace: [ 1086.971184][T32347] [ 1086.971195][T32347] __dump_stack+0x1d/0x30 [ 1086.971233][T32347] dump_stack_lvl+0x95/0xd0 [ 1086.971331][T32347] dump_stack+0x15/0x1b [ 1086.971356][T32347] should_fail_ex+0x262/0x280 [ 1086.971452][T32347] ? find_get_pmu_context+0x5a/0x430 [ 1086.971486][T32347] should_failslab+0x8c/0xb0 [ 1086.971549][T32347] __kmalloc_cache_noprof+0x7a/0x400 [ 1086.971589][T32347] ? find_get_pmu_context+0x5a/0x430 [ 1086.971623][T32347] find_get_pmu_context+0x5a/0x430 [ 1086.971709][T32347] ? find_get_context+0x41f/0x4f0 [ 1086.971766][T32347] __se_sys_perf_event_open+0x9b5/0x1290 [ 1086.971803][T32347] __x64_sys_perf_event_open+0x67/0x80 [ 1086.971836][T32347] x64_sys_call+0x1f25/0x2550 [ 1086.971875][T32347] do_syscall_64+0x112/0x360 [ 1086.971982][T32347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.972015][T32347] RIP: 0033:0x7faae164e1d9 [ 1086.972038][T32347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.972059][T32347] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1086.972081][T32347] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1086.972108][T32347] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1086.972158][T32347] RBP: 00007faae16e5888 R08: 0000000000000009 R09: 0000000000000000 [ 1086.972179][T32347] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1086.972265][T32347] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1086.972291][T32347] [ 1087.045921][T32345] dummy0 speed is unknown, defaulting to 1000 [ 1087.087004][T32334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.087168][T32334] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.356563][T24548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.387370][T32365] FAULT_INJECTION: forcing a failure. [ 1087.387370][T32365] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.387410][T32365] CPU: 0 UID: 0 PID: 32365 Comm: syz.1.8722 Not tainted syzkaller #0 PREEMPT(lazy) [ 1087.387500][T32365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1087.387519][T32365] Call Trace: [ 1087.387530][T32365] [ 1087.387543][T32365] __dump_stack+0x1d/0x30 [ 1087.387588][T32365] dump_stack_lvl+0x95/0xd0 [ 1087.387625][T32365] dump_stack+0x15/0x1b [ 1087.387684][T32365] should_fail_ex+0x262/0x280 [ 1087.387731][T32365] should_failslab+0x8c/0xb0 [ 1087.387771][T32365] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 1087.387855][T32365] ? sock_alloc_inode+0x36/0xf0 [ 1087.387888][T32365] ? sock_alloc_inode+0x36/0xf0 [ 1087.387941][T32365] ? selinux_socket_create+0xfd/0x180 [ 1087.387977][T32365] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1087.388061][T32365] sock_alloc_inode+0x36/0xf0 [ 1087.388109][T32365] alloc_inode+0x40/0x170 [ 1087.388142][T32365] __sock_create+0x121/0x580 [ 1087.388211][T32365] ? __se_sys_futex+0x2f6/0x370 [ 1087.388291][T32365] ? xfd_validate_state+0x45/0xf0 [ 1087.388379][T32365] __sys_socket+0xaf/0x180 [ 1087.388407][T32365] __x64_sys_socket+0x3f/0x50 [ 1087.388436][T32365] x64_sys_call+0x246e/0x2550 [ 1087.388496][T32365] do_syscall_64+0x112/0x360 [ 1087.388684][T32365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.388717][T32365] RIP: 0033:0x7f3baacfe1d9 [ 1087.388797][T32365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.388821][T32365] RSP: 002b:00007f3ba9757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1087.388902][T32365] RAX: ffffffffffffffda RBX: 00007f3baaf85fa0 RCX: 00007f3baacfe1d9 [ 1087.388923][T32365] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1087.388963][T32365] RBP: 00007f3baad95888 R08: 0000000000000000 R09: 0000000000000000 [ 1087.388978][T32365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.388995][T32365] R13: 00007f3baaf86038 R14: 00007f3baaf85fa0 R15: 00007ffd9c32aae8 [ 1087.389022][T32365] [ 1087.456667][T32369] tipc: Enabling of bearer rejected, already enabled [ 1087.939364][T32365] socket: no more sockets [ 1088.052291][T32375] loop8: detected capacity change from 0 to 2048 [ 1088.069401][T32375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.201824][T32382] FAULT_INJECTION: forcing a failure. [ 1088.201824][T32382] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.201857][T32382] CPU: 0 UID: 0 PID: 32382 Comm: syz.6.8725 Not tainted syzkaller #0 PREEMPT(lazy) [ 1088.201885][T32382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1088.201912][T32382] Call Trace: [ 1088.201921][T32382] [ 1088.201931][T32382] __dump_stack+0x1d/0x30 [ 1088.201958][T32382] dump_stack_lvl+0x95/0xd0 [ 1088.201981][T32382] dump_stack+0x15/0x1b [ 1088.202002][T32382] should_fail_ex+0x262/0x280 [ 1088.202072][T32382] ? ops_init+0x4b/0x2e0 [ 1088.202095][T32382] should_failslab+0x8c/0xb0 [ 1088.202133][T32382] __kmalloc_noprof+0xd0/0x4d0 [ 1088.202187][T32382] ? ops_init+0x4b/0x2e0 [ 1088.202256][T32382] ops_init+0x4b/0x2e0 [ 1088.202280][T32382] setup_net+0x9f/0x230 [ 1088.202342][T32382] copy_net_ns+0x333/0x490 [ 1088.202380][T32382] create_new_namespaces+0x1f6/0x420 [ 1088.202494][T32382] unshare_nsproxy_namespaces+0x115/0x150 [ 1088.202555][T32382] ksys_unshare+0x3fd/0x6f0 [ 1088.202715][T32382] __x64_sys_unshare+0x1f/0x30 [ 1088.202764][T32382] x64_sys_call+0x1e33/0x2550 [ 1088.202817][T32382] do_syscall_64+0x112/0x360 [ 1088.202859][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.202913][T32382] RIP: 0033:0x7faae164e1d9 [ 1088.202938][T32382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.202966][T32382] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1088.202997][T32382] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1088.203019][T32382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1088.203048][T32382] RBP: 00007faae16e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1088.203069][T32382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.203087][T32382] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1088.203109][T32382] [ 1088.459772][T32392] FAULT_INJECTION: forcing a failure. [ 1088.459772][T32392] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.459814][T32392] CPU: 0 UID: 0 PID: 32392 Comm: syz.6.8729 Not tainted syzkaller #0 PREEMPT(lazy) [ 1088.459843][T32392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1088.459857][T32392] Call Trace: [ 1088.459864][T32392] [ 1088.459919][T32392] __dump_stack+0x1d/0x30 [ 1088.459955][T32392] dump_stack_lvl+0x95/0xd0 [ 1088.459987][T32392] dump_stack+0x15/0x1b [ 1088.460013][T32392] should_fail_ex+0x262/0x280 [ 1088.460054][T32392] ? find_get_pmu_context+0x5a/0x430 [ 1088.460076][T32392] should_failslab+0x8c/0xb0 [ 1088.460119][T32392] __kmalloc_cache_noprof+0x7a/0x400 [ 1088.460176][T32392] ? find_get_pmu_context+0x5a/0x430 [ 1088.460206][T32392] find_get_pmu_context+0x5a/0x430 [ 1088.460230][T32392] ? find_get_context+0x41f/0x4f0 [ 1088.460252][T32392] __se_sys_perf_event_open+0x9b5/0x1290 [ 1088.460358][T32392] __x64_sys_perf_event_open+0x67/0x80 [ 1088.460388][T32392] x64_sys_call+0x1f25/0x2550 [ 1088.460436][T32392] do_syscall_64+0x112/0x360 [ 1088.460471][T32392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.460531][T32392] RIP: 0033:0x7faae164e1d9 [ 1088.460599][T32392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.460627][T32392] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1088.460656][T32392] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1088.460707][T32392] RDX: fffffdffffffffff RSI: 0000000000000000 RDI: 0000200000000400 [ 1088.460728][T32392] RBP: 00007faae16e5888 R08: 0000000000000009 R09: 0000000000000000 [ 1088.460775][T32392] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1088.460794][T32392] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1088.460873][T32392] [ 1088.515342][T28848] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.543941][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 1088.543991][ C1] bridge0: topology change detected, propagating [ 1088.693961][T32400] dummy0 speed is unknown, defaulting to 1000 [ 1088.878460][T32403] FAULT_INJECTION: forcing a failure. [ 1088.878460][T32403] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.878501][T32403] CPU: 1 UID: 0 PID: 32403 Comm: syz.6.8734 Not tainted syzkaller #0 PREEMPT(lazy) [ 1088.878567][T32403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1088.878587][T32403] Call Trace: [ 1088.878597][T32403] [ 1088.878610][T32403] __dump_stack+0x1d/0x30 [ 1088.878714][T32403] dump_stack_lvl+0x95/0xd0 [ 1088.878745][T32403] dump_stack+0x15/0x1b [ 1088.878770][T32403] should_fail_ex+0x262/0x280 [ 1088.878809][T32403] ? shrinker_alloc+0x3b/0x6e0 [ 1088.878904][T32403] should_failslab+0x8c/0xb0 [ 1088.878939][T32403] __kmalloc_cache_noprof+0x7a/0x400 [ 1088.879014][T32403] ? shrinker_alloc+0x3b/0x6e0 [ 1088.879091][T32403] shrinker_alloc+0x3b/0x6e0 [ 1088.879140][T32403] ? __percpu_init_rwsem+0x24/0x90 [ 1088.879172][T32403] ? rcu_sync_init+0x32/0x40 [ 1088.879201][T32403] sget_fc+0x875/0xfa0 [ 1088.879263][T32403] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1088.879309][T32403] ? __kmalloc_cache_noprof+0x19b/0x400 [ 1088.879360][T32403] ? mqueue_init_fs_context+0x38/0x2c0 [ 1088.879429][T32403] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1088.879465][T32403] get_tree_nodev+0x2a/0x100 [ 1088.879579][T32403] mqueue_get_tree+0x5d/0x80 [ 1088.879652][T32403] vfs_get_tree+0x57/0x1d0 [ 1088.879829][T32403] fc_mount_longterm+0x18/0xb0 [ 1088.879939][T32403] mq_init_ns+0x2db/0x370 [ 1088.879978][T32403] copy_ipcs+0x26d/0x460 [ 1088.880020][T32403] create_new_namespaces+0x121/0x420 [ 1088.880074][T32403] unshare_nsproxy_namespaces+0x115/0x150 [ 1088.880122][T32403] ksys_unshare+0x3fd/0x6f0 [ 1088.880163][T32403] __x64_sys_unshare+0x1f/0x30 [ 1088.880196][T32403] x64_sys_call+0x1e33/0x2550 [ 1088.880231][T32403] do_syscall_64+0x112/0x360 [ 1088.880343][T32403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.880377][T32403] RIP: 0033:0x7faae164e1d9 [ 1088.880401][T32403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.880466][T32403] RSP: 002b:00007faae00a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1088.880489][T32403] RAX: ffffffffffffffda RBX: 00007faae18d5fa0 RCX: 00007faae164e1d9 [ 1088.880504][T32403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1088.880517][T32403] RBP: 00007faae16e5888 R08: 0000000000000000 R09: 0000000000000000 [ 1088.880532][T32403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.880579][T32403] R13: 00007faae18d6038 R14: 00007faae18d5fa0 R15: 00007ffdc70c4598 [ 1088.880609][T32403] [ 1089.068737][T32398] loop8: detected capacity change from 0 to 512 [ 1089.127052][T32398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.127254][T32398] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.225734][T32403] dummy0 speed is unknown, defaulting to 1000 [ 1089.238544][T32408] FAULT_INJECTION: forcing a failure. [ 1089.238544][T32408] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.238578][T32408] CPU: 0 UID: 0 PID: 32408 Comm: syz.0.8735 Not tainted syzkaller #0 PREEMPT(lazy) [ 1089.238613][T32408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1089.238663][T32408] Call Trace: [ 1089.238673][T32408] [ 1089.238683][T32408] __dump_stack+0x1d/0x30 [ 1089.238721][T32408] dump_stack_lvl+0x95/0xd0 [ 1089.238767][T32408] dump_stack+0x15/0x1b [ 1089.238872][T32408] should_fail_ex+0x262/0x280 [ 1089.238913][T32408] should_failslab+0x8c/0xb0 [ 1089.238977][T32408] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 1089.239084][T32408] ? sock_alloc_inode+0x36/0xf0 [ 1089.239181][T32408] ? sock_alloc_inode+0x36/0xf0 [ 1089.239229][T32408] ? selinux_socket_create+0xfd/0x180 [ 1089.239274][T32408] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1089.239308][T32408] sock_alloc_inode+0x36/0xf0 [ 1089.239353][T32408] alloc_inode+0x40/0x170 [ 1089.239434][T32408] __sock_create+0x121/0x580 [ 1089.239477][T32408] ? __se_sys_futex+0x2f6/0x370 [ 1089.239585][T32408] ? xfd_validate_state+0x45/0xf0 [ 1089.239625][T32408] __sys_socket+0xaf/0x180 [ 1089.239712][T32408] __x64_sys_socket+0x3f/0x50 [ 1089.239731][T32408] x64_sys_call+0x246e/0x2550 [ 1089.239778][T32408] do_syscall_64+0x112/0x360 [ 1089.239817][T32408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.239921][T32408] RIP: 0033:0x7f89be53e1d9 [ 1089.239938][T32408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.239958][T32408] RSP: 002b:00007f89bcf97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1089.239986][T32408] RAX: ffffffffffffffda RBX: 00007f89be7c5fa0 RCX: 00007f89be53e1d9 [ 1089.240009][T32408] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1089.240027][T32408] RBP: 00007f89be5d5888 R08: 0000000000000000 R09: 0000000000000000 [ 1089.240121][T32408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.240140][T32408] R13: 00007f89be7c6038 R14: 00007f89be7c5fa0 R15: 00007ffd14314388 [ 1089.240223][T32408] [ 1089.248306][T32408] socket: no more sockets [ 1089.491025][T28848] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.576696][T32413] loop0: detected capacity change from 0 to 2048 [ 1089.716158][T32413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.732334][ T30] audit: type=1400 audit(1791692637.406:21437): avc: denied { write } for pid=32409 comm="syz.0.8736" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1089.868445][T32415] tipc: Enabling of bearer rejected, already enabled [ 1089.964858][T32424] FAULT_INJECTION: forcing a failure. [ 1089.964858][T32424] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.964897][T32424] CPU: 1 UID: 0 PID: 32424 Comm: syz.1.8740 Not tainted syzkaller #0 PREEMPT(lazy) [ 1089.964933][T32424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1089.964947][T32424] Call Trace: [ 1089.964956][T32424] [ 1089.965039][T32424] __dump_stack+0x1d/0x30 [ 1089.965066][T32424] dump_stack_lvl+0x95/0xd0 [ 1089.965095][T32424] dump_stack+0x15/0x1b [ 1089.965181][T32424] should_fail_ex+0x262/0x280 [ 1089.965223][T32424] ? __proc_create+0x3f1/0x6b0 [ 1089.965267][T32424] should_failslab+0x8c/0xb0 [ 1089.965302][T32424] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1089.965349][T32424] ? __proc_create+0x3f1/0x6b0 [ 1089.965469][T32424] __proc_create+0x3f1/0x6b0 [ 1089.965514][T32424] proc_create_data+0xa3/0x130 [ 1089.965560][T32424] cache_register_net+0xb5/0x1e0 [ 1089.965600][T32424] ip_map_cache_create+0x7e/0xd0 [ 1089.965698][T32424] sunrpc_init_net+0x75/0x150 [ 1089.965736][T32424] ops_init+0x22a/0x2e0 [ 1089.965766][T32424] setup_net+0x9f/0x230 [ 1089.965824][T32424] copy_net_ns+0x333/0x490 [ 1089.965860][T32424] create_new_namespaces+0x1f6/0x420 [ 1089.965955][T32424] unshare_nsproxy_namespaces+0x115/0x150 [ 1089.965995][T32424] ksys_unshare+0x3fd/0x6f0 [ 1089.966047][T32424] __x64_sys_unshare+0x1f/0x30 [ 1089.966088][T32424] x64_sys_call+0x1e33/0x2550 [ 1089.966126][T32424] do_syscall_64+0x112/0x360 [ 1089.966219][T32424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.966243][T32424] RIP: 0033:0x7f3baacfe1d9 [ 1089.966260][T32424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.966321][T32424] RSP: 002b:00007f3ba9757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1089.966351][T32424] RAX: ffffffffffffffda RBX: 00007f3baaf85fa0 RCX: 00007f3baacfe1d9 [ 1089.966366][T32424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1089.966386][T32424] RBP: 00007f3baad95888 R08: 0000000000000000 R09: 0000000000000000 [ 1089.966407][T32424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.966428][T32424] R13: 00007f3baaf86038 R14: 00007f3baaf85fa0 R15: 00007ffd9c32aae8 [ 1089.966459][T32424] [ 1090.204354][T32433] loop8: detected capacity change from 0 to 2048 [ 1090.225378][T32433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.352003][T24548] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.524003][T32452] FAULT_INJECTION: forcing a failure. [ 1090.524003][T32452] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.524045][T32452] CPU: 0 UID: 0 PID: 32452 Comm: syz.1.8746 Not tainted syzkaller #0 PREEMPT(lazy) [ 1090.524088][T32452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1090.524102][T32452] Call Trace: [ 1090.524110][T32452] [ 1090.524120][T32452] __dump_stack+0x1d/0x30 [ 1090.524146][T32452] dump_stack_lvl+0x95/0xd0 [ 1090.524210][T32452] dump_stack+0x15/0x1b [ 1090.524233][T32452] should_fail_ex+0x262/0x280 [ 1090.524275][T32452] should_failslab+0x8c/0xb0 [ 1090.524338][T32452] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 1090.524391][T32452] ? sock_alloc_inode+0x36/0xf0 [ 1090.524461][T32452] ? sock_alloc_inode+0x36/0xf0 [ 1090.524578][T32452] ? selinux_socket_create+0xfd/0x180 [ 1090.524678][T32452] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1090.524725][T32452] sock_alloc_inode+0x36/0xf0 [ 1090.524836][T32452] alloc_inode+0x40/0x170 [ 1090.524860][T32452] __sock_create+0x121/0x580 [ 1090.524908][T32452] ? __se_sys_futex+0x2f6/0x370 [ 1090.524951][T32452] ? xfd_validate_state+0x45/0xf0 [ 1090.525066][T32452] __sys_socket+0xaf/0x180 [ 1090.525086][T32452] __x64_sys_socket+0x3f/0x50 [ 1090.525106][T32452] x64_sys_call+0x246e/0x2550 [ 1090.525138][T32452] do_syscall_64+0x112/0x360 [ 1090.525259][T32452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.525288][T32452] RIP: 0033:0x7f3baacfe1d9 [ 1090.525307][T32452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.525393][T32452] RSP: 002b:00007f3ba9757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1090.525488][T32452] RAX: ffffffffffffffda RBX: 00007f3baaf85fa0 RCX: 00007f3baacfe1d9 [ 1090.525509][T32452] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1090.525528][T32452] RBP: 00007f3baad95888 R08: 0000000000000000 R09: 0000000000000000 [ 1090.525570][T32452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.525589][T32452] R13: 00007f3baaf86038 R14: 00007f3baaf85fa0 R15: 00007ffd9c32aae8 [ 1090.525611][T32452] [ 1090.527401][T32452] socket: no more sockets [ 1090.572625][T32454] loop5: detected capacity change from 0 to 512 [ 1090.643280][T32454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.643701][T32454] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.813776][T28848] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.854756][T32465] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1091.066949][T32468] tipc: Enabling of bearer rejected, already enabled [ 1091.175160][T32470] tipc: Enabling of bearer rejected, already enabled [ 1091.364665][T27433] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.404182][T32463] md: could not open device unknown-block(1,0). [ 1091.428688][T32465] md: could not open device unknown-block(1,1). [ 1091.487249][T32483] FAULT_INJECTION: forcing a failure. [ 1091.487249][T32483] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.487352][T32483] CPU: 0 UID: 0 PID: 32483 Comm: syz.1.8754 Not tainted syzkaller #0 PREEMPT(lazy) [ 1091.487405][T32483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1091.487425][T32483] Call Trace: [ 1091.487434][T32483] [ 1091.487449][T32483] __dump_stack+0x1d/0x30 [ 1091.487487][T32483] dump_stack_lvl+0x95/0xd0 [ 1091.487521][T32483] dump_stack+0x15/0x1b [ 1091.487690][T32483] should_fail_ex+0x262/0x280 [ 1091.487720][T32483] ? cache_create_net+0x72/0x150 [ 1091.487754][T32483] should_failslab+0x8c/0xb0 [ 1091.487855][T32483] __kmalloc_noprof+0xd0/0x4d0 [ 1091.487904][T32483] ? cache_create_net+0x72/0x150 [ 1091.487936][T32483] cache_create_net+0x72/0x150 [ 1091.488002][T32483] ip_map_cache_create+0x5e/0xd0 [ 1091.488066][T32483] sunrpc_init_net+0x75/0x150 [ 1091.488093][T32483] ops_init+0x22a/0x2e0 [ 1091.488116][T32483] setup_net+0x9f/0x230 [ 1091.488161][T32483] copy_net_ns+0x333/0x490 [ 1091.488218][T32483] create_new_namespaces+0x1f6/0x420 [ 1091.488270][T32483] unshare_nsproxy_namespaces+0x115/0x150 [ 1091.488364][T32483] ksys_unshare+0x3fd/0x6f0 [ 1091.488409][T32483] __x64_sys_unshare+0x1f/0x30 [ 1091.488455][T32483] x64_sys_call+0x1e33/0x2550 [ 1091.488490][T32483] do_syscall_64+0x112/0x360 [ 1091.488590][T32483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.488624][T32483] RIP: 0033:0x7f3baacfe1d9 [ 1091.488648][T32483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.488672][T32483] RSP: 002b:00007f3ba9757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1091.488747][T32483] RAX: ffffffffffffffda RBX: 00007f3baaf85fa0 RCX: 00007f3baacfe1d9 [ 1091.488767][T32483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1091.488841][T32483] RBP: 00007f3baad95888 R08: 0000000000000000 R09: 0000000000000000 [ 1091.488872][T32483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.488890][T32483] R13: 00007f3baaf86038 R14: 00007f3baaf85fa0 R15: 00007ffd9c32aae8 [ 1091.488918][T32483] [ 1091.777145][T32488] FAULT_INJECTION: forcing a failure. [ 1091.777145][T32488] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.777189][T32488] CPU: 0 UID: 0 PID: 32488 Comm: syz.5.8757 Not tainted syzkaller #0 PREEMPT(lazy) [ 1091.777226][T32488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1091.777246][T32488] Call Trace: [ 1091.777255][T32488] [ 1091.777267][T32488] __dump_stack+0x1d/0x30 [ 1091.777344][T32488] dump_stack_lvl+0x95/0xd0 [ 1091.777378][T32488] dump_stack+0x15/0x1b [ 1091.777407][T32488] should_fail_ex+0x262/0x280 [ 1091.777450][T32488] ? __proc_create+0x3f1/0x6b0 [ 1091.777570][T32488] should_failslab+0x8c/0xb0 [ 1091.777656][T32488] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 1091.777723][T32488] ? __proc_create+0x3f1/0x6b0 [ 1091.777755][T32488] __proc_create+0x3f1/0x6b0 [ 1091.777797][T32488] ? _raw_write_unlock+0xd/0x30 [ 1091.777892][T32488] proc_create_data+0xa3/0x130 [ 1091.777965][T32488] cache_register_net+0x124/0x1e0 [ 1091.778006][T32488] ip_map_cache_create+0x7e/0xd0 [ 1091.778111][T32488] sunrpc_init_net+0x75/0x150 [ 1091.778150][T32488] ops_init+0x22a/0x2e0 [ 1091.778178][T32488] setup_net+0x9f/0x230 [ 1091.778264][T32488] copy_net_ns+0x333/0x490 [ 1091.778319][T32488] create_new_namespaces+0x1f6/0x420 [ 1091.778394][T32488] unshare_nsproxy_namespaces+0x115/0x150 [ 1091.778444][T32488] ksys_unshare+0x3fd/0x6f0 [ 1091.778488][T32488] __x64_sys_unshare+0x1f/0x30 [ 1091.778608][T32488] x64_sys_call+0x1e33/0x2550 [ 1091.778641][T32488] do_syscall_64+0x112/0x360 [ 1091.778746][T32488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.778777][T32488] RIP: 0033:0x7eff6d52e1d9 [ 1091.778799][T32488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.778902][T32488] RSP: 002b:00007eff6bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1091.778967][T32488] RAX: ffffffffffffffda RBX: 00007eff6d7b5fa0 RCX: 00007eff6d52e1d9 [ 1091.779026][T32488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1091.779045][T32488] RBP: 00007eff6d5c5888 R08: 0000000000000000 R09: 0000000000000000 [ 1091.779063][T32488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.779077][T32488] R13: 00007eff6d7b6038 R14: 00007eff6d7b5fa0 R15: 00007ffdf0d200a8 [ 1091.779102][T32488] [ 1091.797459][T32492] 9pnet_fd: p9_fd_create_unix (32492): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 1092.052439][T32496] FAULT_INJECTION: forcing a failure. [ 1092.052439][T32496] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.052504][T32496] CPU: 0 UID: 0 PID: 32496 Comm: syz.1.8761 Not tainted syzkaller #0 PREEMPT(lazy) [ 1092.052536][T32496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1092.052556][T32496] Call Trace: [ 1092.052567][T32496] [ 1092.052577][T32496] __dump_stack+0x1d/0x30 [ 1092.052609][T32496] dump_stack_lvl+0x95/0xd0 [ 1092.052660][T32496] dump_stack+0x15/0x1b [ 1092.052685][T32496] should_fail_ex+0x262/0x280 [ 1092.052718][T32496] should_failslab+0x8c/0xb0 [ 1092.052748][T32502] dummy0 speed is unknown, defaulting to 1000 [ 1092.052764][T32496] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 1092.052868][T32496] ? cache_create_net+0x2c/0x150 [ 1092.052897][T32496] ? cache_create_net+0x2c/0x150 [ 1092.052941][T32496] ? proc_register+0x41d/0x4b0 [ 1092.053115][T32496] kmemdup_noprof+0x2b/0x70 [ 1092.053212][T32496] cache_create_net+0x2c/0x150 [ 1092.053286][T32496] unix_gid_cache_create+0x5e/0xd0 [ 1092.053315][T32496] sunrpc_init_net+0x93/0x150 [ 1092.053361][T32496] ops_init+0x22a/0x2e0 [ 1092.053388][T32496] setup_net+0x9f/0x230 [ 1092.053433][T32496] copy_net_ns+0x333/0x490 [ 1092.053477][T32496] create_new_namespaces+0x1f6/0x420 [ 1092.053530][T32496] unshare_nsproxy_namespaces+0x115/0x150 [ 1092.053601][T32496] ksys_unshare+0x3fd/0x6f0 [ 1092.053632][T32496] __x64_sys_unshare+0x1f/0x30 [ 1092.053659][T32496] x64_sys_call+0x1e33/0x2550 [ 1092.053786][T32496] do_syscall_64+0x112/0x360 [ 1092.053816][T32496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.053848][T32496] RIP: 0033:0x7f3baacfe1d9 [ 1092.053871][T32496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.053902][T32496] RSP: 002b:00007f3ba9757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1092.053976][T32496] RAX: ffffffffffffffda RBX: 00007f3baaf85fa0 RCX: 00007f3baacfe1d9 [ 1092.053994][T32496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1092.054009][T32496] RBP: 00007f3baad95888 R08: 0000000000000000 R09: 0000000000000000 [ 1092.054027][T32496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.054045][T32496] R13: 00007f3baaf86038 R14: 00007f3baaf85fa0 R15: 00007ffd9c32aae8 [ 1092.054074][T32496] [ 1092.194025][ T2986] ================================================================== [ 1092.194158][ T2986] BUG: KCSAN: data-race in ktime_get_ts64 / timekeeping_update_from_shadow [ 1092.194301][ T2986] [ 1092.194314][ T2986] write to 0xffffffff895fa508 of 320 bytes by interrupt on cpu 1: [ 1092.194378][ T2986] timekeeping_update_from_shadow+0x448/0x480 [ 1092.194491][ T2986] __timekeeping_advance+0xb36/0xcf0 [ 1092.194610][ T2986] update_wall_time+0x21/0x50 [ 1092.194701][ T2986] tick_do_update_jiffies64+0x169/0x1c0 [ 1092.194841][ T2986] tick_nohz_handler+0x88/0x380 [ 1092.194940][ T2986] __hrtimer_run_queues+0x1f8/0x510 [ 1092.195018][ T2986] hrtimer_interrupt+0x27b/0x860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1092.195092][ T2986] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1092.195185][ T2986] sysvec_apic_timer_interrupt+0x6f/0x80 [ 1092.195310][ T2986] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1092.195398][ T2986] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 1092.195499][ T2986] univ8250_console_device_unlock+0x36/0x40 [ 1092.195627][ T2986] nbcon_kthread_func+0x595/0x690 [ 1092.195714][ T2986] kthread+0x223/0x270 [ 1092.195779][ T2986] ret_from_fork+0x146/0x330 [ 1092.195876][ T2986] ret_from_fork_asm+0x1a/0x30 [ 1092.195964][ T2986] [ 1092.195986][ T2986] read to 0xffffffff895fa528 of 8 bytes by task 2986 on cpu 0: [ 1092.196041][ T2986] ktime_get_ts64+0x155/0x350 [ 1092.196134][ T2986] __x64_sys_epoll_wait+0xd9/0x190 [ 1092.196202][ T2986] x64_sys_call+0x1ce9/0x2550 [ 1092.196314][ T2986] do_syscall_64+0x112/0x360 [ 1092.196391][ T2986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.196467][ T2986] [ 1092.196480][ T2986] value changed: 0x0033a4a98bec1998 -> 0x0034d5d68c4ae124 [ 1092.196524][ T2986] [ 1092.196537][ T2986] Reported by Kernel Concurrency Sanitizer on: [ 1092.196587][ T2986] CPU: 0 UID: 0 PID: 2986 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 1092.196675][ T2986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1092.196729][ T2986] ================================================================== [ 1092.501396][T32509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1092.531312][T32504] dummy0 speed is unknown, defaulting to 1000 [ 1092.669369][T32500] tipc: Resetting bearer [ 1092.685384][T32500] tipc: Disabling bearer [ 1092.744121][T32502] tipc: Resetting bearer [ 1092.751414][T32502] tipc: Disabling bearer [ 1092.762874][T32504] tipc: Resetting bearer [ 1092.764801][T32504] bridge0: port 1(syz_tun) entered disabled state [ 1092.767585][T32504] syz_tun (unregistering): left allmulticast mode [ 1092.767606][T32504] syz_tun (unregistering): left promiscuous mode [ 1092.767636][T32504] bridge0: port 1(syz_tun) entered disabled state [ 1092.775146][T32504] tipc: Disabling bearer [ 1092.801413][ T3857] infiniband syz1: ib_query_port failed (-19) [ 1092.871452][T32495] tipc: Resetting bearer [ 1092.873359][T32495] bridge0: port 1(syz_tun) entered disabled state [ 1092.875019][T32495] syz_tun (unregistering): left allmulticast mode [ 1092.875075][T32495] syz_tun (unregistering): left promiscuous mode [ 1092.875108][T32495] bridge0: port 1(syz_tun) entered disabled state [ 1092.875974][T32495] tipc: Disabling bearer [ 1092.950860][T24848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.001166][T24848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.067259][T24848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.135288][T24848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.180933][T24848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.202930][T24848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.243251][T24848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.282471][T24848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.339479][T24848] bridge_slave_1: left allmulticast mode [ 1093.339513][T24848] bridge_slave_1: left promiscuous mode [ 1093.339643][T24848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.340577][T24848] bridge_slave_0: left allmulticast mode [ 1093.340597][T24848] bridge_slave_0: left promiscuous mode [ 1093.340704][T24848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.365826][T24848] bridge_slave_1: left allmulticast mode [ 1093.365889][T24848] bridge_slave_1: left promiscuous mode [ 1093.366231][T24848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.379070][T24848] bridge_slave_0: left allmulticast mode [ 1093.379182][T24848] bridge_slave_0: left promiscuous mode [ 1093.379373][T24848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.486022][T24848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.487544][T24848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.488665][T24848] bond0 (unregistering): Released all slaves [ 1093.530535][T24848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.532087][T24848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.533027][T24848] bond0 (unregistering): Released all slaves [ 1093.534852][T24848] bond1 (unregistering): Released all slaves [ 1093.537986][T24848] bond2 (unregistering): (slave veth5): Releasing active interface [ 1093.540994][T24848] bond2 (unregistering): Released all slaves [ 1093.557471][T24848] bond3 (unregistering): (slave veth7): Releasing active interface [ 1093.571057][T24848] bond3 (unregistering): Released all slaves [ 1093.597967][T24848] bond4 (unregistering): (slave veth9): Releasing active interface [ 1093.607204][T24848] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1093.608253][T24848] bond4 (unregistering): Released all slaves [ 1093.675063][T24848] tipc: Disabling bearer [ 1093.675110][T24848] tipc: Left network mode [ 1093.691769][T24848] hsr_slave_0: left promiscuous mode [ 1093.692003][T24848] hsr_slave_1: left promiscuous mode [ 1093.692442][T24848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.692461][T24848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.692785][T24848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.692846][T24848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.695039][T24848] hsr_slave_0: left promiscuous mode [ 1093.695438][T24848] hsr_slave_1: left promiscuous mode [ 1093.695954][T24848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.695972][T24848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.696334][T24848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.696352][T24848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.711781][T24848] veth1_macvtap: left promiscuous mode [ 1093.711810][T24848] veth0_macvtap: left promiscuous mode [ 1093.711911][T24848] veth1_vlan: left promiscuous mode [ 1093.712019][T24848] veth0_vlan: left promiscuous mode [ 1093.803950][T24848] veth1_macvtap: left promiscuous mode [ 1093.803986][T24848] veth0_macvtap: left promiscuous mode [ 1093.804039][T24848] veth1_vlan: left promiscuous mode [ 1093.804094][T24848] veth0_vlan: left promiscuous mode [ 1093.921132][T24848] team0 (unregistering): Port device team_slave_1 removed [ 1093.924137][T24848] team0 (unregistering): Port device team_slave_0 removed [ 1094.006557][T24848] team0 (unregistering): Port device team_slave_1 removed [ 1094.016497][T24848] team0 (unregistering): Port device team_slave_0 removed [ 1094.462350][T24848] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.502493][T24848] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.563547][T24848] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.622834][T24848] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.721862][T24848] bond0 (unregistering): Released all slaves [ 1094.723558][T24848] bond1 (unregistering): Released all slaves [ 1094.726622][T24848] bond2 (unregistering): (slave veth3): Releasing active interface [ 1094.728010][T24848] bond2 (unregistering): Released all slaves [ 1094.738363][T24848] bond3 (unregistering): (slave veth5): Releasing active interface [ 1094.751935][T24848] bond3 (unregistering): Released all slaves [ 1094.771072][T24848] bond4 (unregistering): (slave veth7): Releasing active interface [ 1094.780576][T24848] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1094.781565][T24848] bond4 (unregistering): Released all slaves [ 1094.821960][T24848] tipc: Left network mode [ 1094.824236][T24848] hsr_slave_0: left promiscuous mode [ 1094.824614][T24848] hsr_slave_1: left promiscuous mode [ 1094.825158][T24848] batman_adv: batadv0: Interface deactivated: dummy0 [ 1094.825256][T24848] batman_adv: batadv0: Removing interface: dummy0 [ 1094.827290][T24848] veth1_vlan: left promiscuous mode [ 1094.827386][T24848] veth0_vlan: left promiscuous mode [ 1095.132075][T24848] IPVS: stop unused estimator thread 0...