last executing test programs: 3m2.05981195s ago: executing program 32 (id=288): syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m49.006993236s ago: executing program 33 (id=640): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m34.543193998s ago: executing program 5 (id=1494): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) 1m34.386251242s ago: executing program 5 (id=1495): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000100)='^', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x100}}, './file1\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xfd, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x80000001}, 0x107008, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x5, r1, 0xb) write(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200), &(0x7f00000003c0)='./file1\x00', 0x8, 0x1) 1m33.515651401s ago: executing program 5 (id=1504): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1m21.32337009s ago: executing program 1 (id=1596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000100)='^', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x100}}, './file1\x00'}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xfd, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x80000001}, 0x107008, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x5, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200), &(0x7f00000003c0)='./file1\x00', 0x8, 0x1) 1m20.463330547s ago: executing program 1 (id=1603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x9}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="4ffbc7664b063ff74a99831f72b6b052bd88810ed8bd4164b5fab6bb", 0x1c}, {&(0x7f00000003c0)="d3f128daa1f36319891cfdc085cef31004b82583fb51ab754c81e3e35fa091ab04a914c2a9d5350639c180139b3bc5ff8e5b4066454374c62efc84c5ca657660b9ca36674fac4b69ec8e12e5f2ff3dcbc2b4fb34b1988ac80b23d0912a", 0x5d}, {&(0x7f000001cf00)="0c03f385e3de446696921c731a03b7d3888c62912ca400ec888d4b5ce1aaa5c99c6393b43ed5422f818028af450c10e554afd1", 0x33}, {0x0}], 0x4, &(0x7f000001cec0)}, 0x40000) 1m18.420731011s ago: executing program 34 (id=1504): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1m5.404565915s ago: executing program 35 (id=1603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x9}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="4ffbc7664b063ff74a99831f72b6b052bd88810ed8bd4164b5fab6bb", 0x1c}, {&(0x7f00000003c0)="d3f128daa1f36319891cfdc085cef31004b82583fb51ab754c81e3e35fa091ab04a914c2a9d5350639c180139b3bc5ff8e5b4066454374c62efc84c5ca657660b9ca36674fac4b69ec8e12e5f2ff3dcbc2b4fb34b1988ac80b23d0912a", 0x5d}, {&(0x7f000001cf00)="0c03f385e3de446696921c731a03b7d3888c62912ca400ec888d4b5ce1aaa5c99c6393b43ed5422f818028af450c10e554afd1", 0x33}, {0x0}], 0x4, &(0x7f000001cec0)}, 0x40000) 58.732326236s ago: executing program 2 (id=1786): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x3a, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.840001766s ago: executing program 2 (id=1796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getrandom(&(0x7f0000000180)=""/279, 0xffffffffffffff8c, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000040)='syscall\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/30, 0x1e, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "210466d3"}}]}, 0x140}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x20004095}, 0x20008000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 56.895973191s ago: executing program 2 (id=1807): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x22, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzs3D1rU18cB/DTh/+/tdLSSdDFgy66XGxnB4u0IAYUbQQfEG7prYbEpORmSMQhs5OvQxzdBPEN9F24FaF06uQVvdInqghqAubzWfKFL4Fz+MHlcC7c7auvntU38mQj7YTx6bEweS30w95YmA/jYSKU+uHy2qPdl3fvP7i5VKks34lxZWl1YTHGOHf+/cMXby586Jy+93bu3VTYmn+8vbP4cevM1tntz6tPa3ms5bHZ6sQ0rrVanXStkcX1Wl5PYrzdyNI8i7VmnrWP9BuN1uZmL6bN9dmZzXaW5zFt9mI968VOK3bavZg+SWvNmCRJnJ0J/I7q672iCDtFURRT/VAUxbAXxICZ/2gz/9Fm/qPt0KFuOoRP/W61Wy1/y37lRmX5Svxm/uBfu91udWK/Xyj7eLT/L8x87xdP7P8Ply6W/dfu+q3Ksf5UWP/72wcAAAAAgH9SEvedeL+fJD/qy3To/cCx+/vJcG5yYNsAAAAAfiLvPa+njUbWFgRB2A/DfjIBAAB/2sGhf9grAQAAAAAAAAAAAAAAAAAAgNE1iM+JDXuPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL/iSwAAAP//lFOHUA==") 56.759612684s ago: executing program 2 (id=1808): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x984}], 0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x1, r0, &(0x7f0000000380), 0x8, 0x0) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/hibernate_compression_threads', 0x200000, 0x1) fcntl$notify(r3, 0x402, 0x80000010) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) write$P9_RGETATTR(r4, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x1408, {0x20, 0x3, 0x1}, 0x2, r5, r6, 0x1, 0x4, 0x81, 0x4, 0x0, 0x842, 0x8, 0x6, 0x3, 0x2, 0x1, 0x6, 0x6, 0x4000000, 0x7}}, 0xa0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x2000, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40002124, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d000014000000f0ffffff00faffff04000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002", @ANYRES64=r10], 0xa0}}, 0xc0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 56.640876675s ago: executing program 2 (id=1809): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fsetxattr$trusted_overlay_redirect(r0, 0x0, &(0x7f00000003c0)='./file1\x00', 0x8, 0x1) 56.497255117s ago: executing program 2 (id=1811): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_io_uring_complete(0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x17, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a300000000005"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) lstat(&(0x7f0000002ec0)='./file1\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x2) 55.818639318s ago: executing program 8 (id=1817): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) munlockall() (async, rerun: 32) r0 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1822}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="04000000040000000408080000b99ce93a0e2602004a1885e062a80b28512342bb95f932cb2fc0db6741c4e7d8657f56ae9dd03fba74a8beac3f08a95e97419a35890202258c7dd61f9b3ffd1239a4b767ac0aecf8b786e85f7bf755d2ca6ae76dfaf288257a5befbe9473042e7c70a208c7e16413bb02bb2d09aa7d53e1f9f285308ab2ce313dfbb9c7d23786b247673a3368b4c288ee4ddda500ac22cec1ee32459304eae86903e3b74dc6a251f0cc79d5a4c37e994a3fef82a00acd6b34a6b38d9f90bd3946141ce500097954c7ca", @ANYRES16=r0, @ANYBLOB="0000003c0003000000ff0700001acd72b0a49d5f7bf2e40706037d9d1da3cd70278ba5123b3c", @ANYRESDEC=0x0, @ANYRES32], 0x48) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x48480f5773ca2876) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) (async) bind$inet6(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0xadb1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x2020da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write(r6, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000340)) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r10, 0x25, 0x0, @void}, 0x10) 55.619570626s ago: executing program 8 (id=1819): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xd, 0x7f, 0x3a, 0xa, 0x0, 0x0, 0xc80, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140)}, 0x400, 0xffffffffffffc9c4, 0x4, 0x8, 0x40000000000000, 0x7, 0x3ff, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000009840), 0x60, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) fgetxattr(r3, &(0x7f0000009880)=@known='security.selinux\x00', 0x0, 0x0) socketpair(0x11, 0xa, 0x8, &(0x7f0000000080)) 55.516672436s ago: executing program 8 (id=1821): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) pidfd_getfd(r2, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_RWALK(r4, &(0x7f00000001c0)={0x9, 0x6f, 0x1}, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) 55.122524621s ago: executing program 8 (id=1824): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 54.210082943s ago: executing program 7 (id=1826): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x38000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000005000100180100002020752500000000020000007b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000020b703000000800000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0xe, 0xff0, &(0x7f0000001280)=""/4080, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r3 = accept4$x25(r2, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x800) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0xd0754000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'geneve0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x23, 0x2, 0x10) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x70, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x80000}]) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='geneve0\x00', &(0x7f0000000340)='syzkaller\x00', 0x0) 54.130841911s ago: executing program 8 (id=1829): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xff84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135013610ff"}) recvmsg(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, &(0x7f0000000100)=""/199, 0xc7}, 0x20) 52.720758208s ago: executing program 8 (id=1836): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x40000004, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_RWALK(r4, &(0x7f00000001c0)={0x9, 0x6f, 0x1}, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) 52.355634231s ago: executing program 7 (id=1837): socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x104000) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) 51.587966969s ago: executing program 7 (id=1842): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) r2 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x1, 0x10000, 0x4, 0xe13e, 0xa69}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x66ab, 0x4, 0x2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xec, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x248}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @loopback, 0x200}}}}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44800}, 0x4000001) r6 = fcntl$getown(r0, 0x9) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x400}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='net/wireless\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x80) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 51.537708774s ago: executing program 36 (id=1842): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) r2 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x1, 0x10000, 0x4, 0xe13e, 0xa69}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x66ab, 0x4, 0x2, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xec, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x248}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @loopback, 0x200}}}}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44800}, 0x4000001) r6 = fcntl$getown(r0, 0x9) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x400}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='net/wireless\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x80) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 41.469175732s ago: executing program 37 (id=1811): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_io_uring_complete(0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x17, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a300000000005"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) lstat(&(0x7f0000002ec0)='./file1\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x2) 37.659943825s ago: executing program 38 (id=1836): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x40000004, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_RWALK(r4, &(0x7f00000001c0)={0x9, 0x6f, 0x1}, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) 32.233881604s ago: executing program 9 (id=1972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x3, 0xf3, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x0, @perf_config_ext={0x3, 0x2000000000000081}, 0x4, 0x6, 0x10000, 0x2, 0x3, 0x7, 0x3, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x6a000200) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) setresgid(0xee01, r3, 0xee01) 29.258437012s ago: executing program 0 (id=2008): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = dup2(r0, r0) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000121, 0x0) timer_create(0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x25, 0x2, 0x0, 0x0, 0x0, 0x1, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffff7f, 0x5}, 0x6025, 0x4005, 0xb, 0x0, 0x800000000000005, 0x7, 0xf, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) fcntl$setsig(r3, 0xa, 0x13) socket$xdp(0x2c, 0x3, 0x0) 29.185788379s ago: executing program 0 (id=2009): r0 = socket$inet6(0xa, 0x2, 0xfffffffc) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0xffffffffffffffff, 0xda8e4930a481a1e4, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000001a0000042a9d7000fcdbdf2500000000"], 0x20}}, 0x0) sendto$inet6(r0, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe(&(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000780)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000300)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0xbb, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x80000) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x5c}}, 0x0) 29.182996219s ago: executing program 9 (id=2011): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000040)={0x9, 0x20, 0x0, 0x20, 0x1}, 0x48) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='-\\$\'\x00', 0x200040, &(0x7f0000000100)={@align=0xfffffffffffffff9, {0x8405, 0x0, 0x3, 0x5}}, 0xb, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x5}) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x60) syz_io_uring_setup(0xaa1, &(0x7f0000000240)={0x0, 0x80e9, 0x14c, 0x0, 0x164, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) r2 = mq_open(&(0x7f0000000340)='(\\@\xda+7*{/,\x82*\'.#}\xf8\x00', 0x2, 0x1c9, &(0x7f0000000380)={0x7, 0x4, 0x7ff, 0xe}) (async, rerun: 64) r3 = memfd_secret(0x80000) sendmsg$rds(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/15, 0xf}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/31, 0x1f}, {&(0x7f0000002600)=""/250, 0xfa}], 0x7, &(0x7f0000002800)=[@mask_fadd={0x58, 0x114, 0x8, {{0xd, 0x7}, &(0x7f0000002780)=0x3, &(0x7f00000027c0)=0x7, 0xc, 0x80000000, 0x2, 0x15, 0x0, 0x8}}, @zcopy_cookie={0x18}], 0x70, 0x24008081}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000028c0)={r1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002980)={'ip6_vti0\x00', &(0x7f0000002900)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0xc2, 0x7ff, 0x40, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x44}, 0x8, 0x1, 0x9f, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=@bloom_filter={0x1e, 0x80000001, 0xc2, 0x3, 0x80, r4, 0x1, '\x00', r5, r3, 0x3, 0x5, 0x4, 0x3}, 0x50) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000002b40)={0xffffffffffffffff, &(0x7f0000002a40)='(\\@\xda+7*{/,\x82*\'.#}\xf8\x00', 0x200000, &(0x7f0000002a80)={@_ha_fsid={[0xffff, 0xba]}, {0xe1, 0xc18, 0xffffffff, 0x3}}, 0x6, &(0x7f0000002ac0)={@_ha_fsid}, &(0x7f0000002b00)=0x5}) open_by_handle_at(r6, &(0x7f0000002b80)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xa, 0x1, 0x6, 0xb000000, 0x7, 0x3}}, 0x400000) (async, rerun: 64) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000002bc0)) (rerun: 64) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000002c00)={'veth1_macvtap\x00', 0xfffffff8}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x690, 0x0, 0x390, 0x120, 0x390, 0x4a8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, &(0x7f0000002c40), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xffffff00, 0xff], 'hsr0\x00', 'syzkaller0\x00', {}, {0xff}, 0x2f, 0xc, 0x5, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@local, 0x28, 0x3, 0x8}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff], [0x0, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'lo\x00', {0xff}, {}, 0x5e, 0x0, 0x2, 0x21}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x7, 0x7, 0x1, [0x8001, 0x8, 0x9, 0x7, 0x5, 0x400, 0x8, 0x5, 0x4b, 0x76e, 0x3, 0x1, 0x9, 0x6990, 0x0, 0xb8], 0x10}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x63d, 0x3, @ipv4=@rand_addr=0x64010100, 0x4e21}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff, 0xff], [0xff, 0xff000000, 0xff, 0xffffff00], 'pimreg1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x28, 0x1, 0x2, 0x60}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "9dbf", 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x13, 0x14, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0x0, 0xffffffff, 0xffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], 'veth0_virt_wifi\x00', 'nr0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x4, 0x57}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@rand_addr=0x64010101, 0x1f, 0xf, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000033c0)=0x200, 0x4) r7 = signalfd(r1, &(0x7f0000003400), 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000003640)={{r8, 0x6, 0x2, 0x6, 0xf361, 0x9, 0x320b, 0x7, 0x0, 0x6, 0x401, 0x4, 0x9e, 0xf635, 0xfffffffffffffffb}, 0x10, [0x0, 0x0]}) (async) r9 = open$dir(&(0x7f00000036c0)='./file0\x00', 0x400100, 0xd0) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000003700)={0x0, 0x3e, "585ac03fd6aab611647f702302e1181ac3a5e4dcdbeb08cd752df558363e0971fd34fee94bf075d4d6beb9cfed46d5a7af363e32701b81a1924b52207ca3"}, &(0x7f0000003780)=0x46) recvmmsg(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000037c0)=""/127, 0x7f}, {&(0x7f0000003840)=""/54, 0x36}, {&(0x7f0000003880)=""/55, 0x37}, {&(0x7f00000038c0)=""/4, 0x4}, {&(0x7f0000003900)=""/36, 0x24}, {&(0x7f0000003940)=""/82, 0x52}], 0x6, &(0x7f0000003a40)=""/203, 0xcb}, 0x1}, {{&(0x7f0000003b40)=@ax25={{0x3, @null}, [@null, @bcast, @bcast, @bcast, @default, @default, @default, @netrom]}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003bc0)=""/219, 0xdb}, {&(0x7f0000003cc0)=""/19, 0x13}, {&(0x7f0000003d00)=""/149, 0x95}, {&(0x7f0000003dc0)=""/114, 0x72}, {&(0x7f0000003e40)=""/189, 0xbd}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x6, &(0x7f0000004f80)=""/4096, 0x1000}, 0x7fffffff}], 0x2, 0x10020, &(0x7f0000006000)) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000006080)={0x8000, &(0x7f0000006040)="912f4c3d790a4bed2c50813366ebe00fc18ddf179a880f9957a944fed408a413e80472f87fd0"}) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006140)={r6, 0x58, &(0x7f00000060c0)}, 0x10) (rerun: 64) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000006280)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006240)={&(0x7f00000061c0)={0x48, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10044010) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000062c0), 0x458000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000063c0)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x14, 0x4, 0x1, 0xe84bf0f0d110c838, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048894}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000006400)={0x0, 'wg0\x00', {0x1}, 0xffff}) 29.139608043s ago: executing program 9 (id=2012): sync() (fail_nth: 3) 29.014883484s ago: executing program 0 (id=2014): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) r1 = socket$inet6(0xa, 0x6, 0xfffffffc) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) (async) setreuid(0x0, 0xee01) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x400, 0x4) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) (async) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 28.769882187s ago: executing program 0 (id=2016): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000000000000000000d0a0000000000000002000006040000000500000008000002040000000a00000000000030612e"], &(0x7f0000000f40)=""/4073, 0x47, 0xfe9, 0x9}, 0x28) sync() 27.921912553s ago: executing program 9 (id=2022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 27.895498195s ago: executing program 0 (id=2023): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xff84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 27.84297494s ago: executing program 9 (id=2024): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xff84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, 0x0, 0x0) 24.757915948s ago: executing program 3 (id=2031): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x182, 0xfffc, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = io_uring_setup(0x76fc, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x2000}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000540), 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c01000010000100fdffffbf00010000e0000001000000000000000000000000fc000000000000000000000000000000000103144e210009000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0a0000001414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffefffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000002316fad0ff50ef52d77b4f4acb8139ae659d0000"], 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r9) add_key$keyring(&(0x7f0000000400), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) 24.389904781s ago: executing program 0 (id=2033): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dcdb108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x4, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x83, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 24.357097154s ago: executing program 9 (id=2034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 23.595641523s ago: executing program 3 (id=2035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x8) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2002}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000000c0)={0xffffffd7, 0x4, 0x0, 0x20b, 0x4, "0300000000000000040000000000808000", 0x2, 0x1ff}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYRES8, @ANYRESOCT=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x50, 0x7, 0x0, 0x1ff}, {0x6, 0x60, 0x7, 0x8}]}) write$ppp(r9, &(0x7f0000000300)="5af9", 0x2) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x8, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31eaffffff0800010073797a310000fbe1f46cb72de7d700800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00042abd7000fbdbdf2502000000"], 0x14}}, 0x4) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r11, @ANYRES32=r6, @ANYRES16=r4], 0x40}, 0x1, 0x0, 0x0, 0x4040805}, 0x8000) 23.456323225s ago: executing program 3 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000020000000000000c0400000000006105"], 0x0, 0x2a, 0x0, 0x1, 0x2}, 0x28) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000900000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = syz_socket_connect_nvme_tcp() r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001700)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe78190a0015c00200142603600e120800110024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900d1001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000)=0x80, 0x95e) 23.123051275s ago: executing program 3 (id=2043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (fail_nth: 5) 22.63353293s ago: executing program 3 (id=2044): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xff84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 21.675651706s ago: executing program 3 (id=2047): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_RWALK(r3, &(0x7f00000001c0)={0x9, 0x6f, 0x1}, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) 9.132029086s ago: executing program 39 (id=2033): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dcdb108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x4, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x83, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 9.108012789s ago: executing program 40 (id=2034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 8.86657582s ago: executing program 4 (id=2075): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x5, '\x00', {0x8, 0x6, "db8603", 0x60, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00', [@srh={0x0, 0x0, 0x4, 0x0, 0xc1, 0x28, 0xfff}]}}}}}}}, 0x0) 8.775567319s ago: executing program 4 (id=2076): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r0, 0x89f3, 0x20001116) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x5, 0x2) setsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2c, 0x180) syz_emit_ethernet(0xfd5, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @empty, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000003440)="9f8458121d1e", 0x6, 0x9) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000001980)={r5, 0x1000, "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"}, &(0x7f0000000100)=0x1008) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000bc0)=[{{&(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000840)="079eb5b2c7fd4992", 0x8}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000d40)="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", 0xc39}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r5, 0xb}, 0x8) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r10, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x50) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x40801}, 0x48004) 8.448287028s ago: executing program 4 (id=2077): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x8, @private2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x6, @local, 0x362f}, @in6={0xa, 0x4e24, 0xa98d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e23, @local}], 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8008010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) 7.495299054s ago: executing program 4 (id=2078): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 7.005267018s ago: executing program 4 (id=2079): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xff84) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, 0x0, 0x0) 6.260958266s ago: executing program 41 (id=2047): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$P9_RWALK(r3, &(0x7f00000001c0)={0x9, 0x6f, 0x1}, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) 5.674826948s ago: executing program 4 (id=2081): move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000340)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/35, 0x23) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f00000007c0)={[{@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8002000001}}, {@dax}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@discard}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") getdents64(r3, 0xfffffffffffffffe, 0xff80) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) 1.888585909s ago: executing program 6 (id=2091): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0x3]}}) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x4000, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x20004000) 1.562181749s ago: executing program 6 (id=2092): syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) (fail_nth: 1) 1.203607571s ago: executing program 6 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x6a}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mq_unlink(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000000c0)='team0\x00') r2 = socket$unix(0x1, 0x1, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @private1, 0xfd}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001380)='|', 0x1}], 0x1}, 0x24004001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='\x00') 1.139978837s ago: executing program 6 (id=2094): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x2040400) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x7}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") open(&(0x7f0000000140)='./file1\x00', 0x64942, 0x86) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 916.736327ms ago: executing program 5 (id=2071): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 623.737434ms ago: executing program 6 (id=2095): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xb) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 582.366437ms ago: executing program 6 (id=2096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, 0x0, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000000c0)={r5}, &(0x7f00000001c0)=0x8) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100)={0x90000019}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) r7 = fsopen(&(0x7f0000000ec0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000000)='async\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) fallocate(r1, 0x0, 0x0, 0x8800000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) 562.015139ms ago: executing program 5 (id=2097): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 381.513615ms ago: executing program 1 (id=2072): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x1, 0x0, 0x3]}}) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x4000, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x20004000) 199.530721ms ago: executing program 1 (id=2098): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 128.599388ms ago: executing program 5 (id=2099): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xb, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001340)={0x0, 0x8}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) unshare(0x22020600) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000001c0)={'erspan0\x00', {0x2, 0x0, @dev}}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}, 0x16}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) file_setattr(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', &(0x7f0000000940)={0x100, 0x2, 0x8001, 0x80f}, 0x18, 0x1000) socket$kcm(0x29, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000580)="40e57a4222c1d3c8afba10c0e65baf89dca2be4aad933a23bc03d9167a0111a2fff8b6632f23fa0aaf1b512cfb6c75ec1da1a975935807ce13fbec1d8b6facfbab0713d30713870b25f88f58ad4fa428c220966b043b2140cdc2aabc3c56a13ff047496b", &(0x7f0000000880)=""/177, &(0x7f0000000a40)="e2ec47e20c23be6f691a234dcee9d7a30552b5c28f204e37693c2621dfeb50e292bd69ab3a259053e74ae904d875bae99265aca4651666ca91d5493de6adf55f73e56285e3df8fad8e8a2d62cf2dc266b246c987b1619b488f1ed28b977f8885ec7ceb17613c50cb3cb7de8109f0429c10df9e73dd255818768ef2dfbc44fdefd38c03b106bca8c54a", &(0x7f0000000b00)="f5938e1ba5eda0d6043e486bd5d3a5d97622d53902f240fe71ca67376dd096f00c755892e82b16a172f2559ff21ea4d523405a4d17587e5230d0498421530e94fbecde7a99625d6596af98afcbc985819c41dbfe7da255849b2767947f0e231f45ed6d1b23399fbcf38ff6e917cb114bf507dfe107d31bca9d42eba3059845c0", 0xd9, r3}, 0x38) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000400)=""/76) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 111.620429ms ago: executing program 1 (id=2100): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) getpriority(0x0, 0x0) 31.680557ms ago: executing program 1 (id=2101): creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="d93e0000000000000000010000000800020005000000ce00010043"], 0x114}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0300"]) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="d93e0000000000000000010000000800020005000000ce00010043"], 0x114}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0300"]) (async) 31.575947ms ago: executing program 7 (id=2080): unshare(0x2c020400) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) 30.655247ms ago: executing program 7 (id=2102): syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd674a9e6c00442f82fe8081000000000000000000000000aafe8000000000000000000000000000aa04206558000000030c0008000c0086dd08"], 0x0) (fail_nth: 5) 0s ago: executing program 7 (id=2103): syz_open_dev$loop(&(0x7f0000000440), 0x204000000000075f, 0x10b042) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000280)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$eJzs3E1oXNUeAPD/nUma9Ot1Xl9f32utmlrFYDFp02q7EKSi4EJBrKAuQ5KW2rSRJgVbqkxB6lIK7sWlWxdu1U0RV4LbuhSkUKSbtoI4cmfunZlMZ5ImmWSM+f1gMufcr3POPffcOfeczASwYQ2lf5Ja+GZE7IiIQusGQ7W3e3euTNy/c2UiypXKyd+S6m5303gmO0xszSLDhYjCx0ljRZPZS5fPjk9PT13I4qNz594fnb10+dkzg9mS48ePHjl87Pmx55ZeqDbppeW6u/ejmX17Xn33+usTffnyPLXmcnTLUAy1y0rVU91OrMe2N4WTvh5mhCVJr/+0uvqr7X9HFGOhyiuvYc6A1VapVCoDnVeXK62uPrAEWLdisNc5AHoj/6BPn3/zV7uOwKbV6X703O0TtQegtNz3slfE49WF+ThIf8vzbTcNRcQ75d8/T1+xSuMQAADNvj2R9wRb+n+l2szIHxdvvJi+/yubQylFxL8jYmdE/CcidkXEfyNid0T8LyL+33L8YkRUFkh/qCVeT78+CVW41aWitpX2/17I5rYa/b95GSgVs9j2iLzDPHUoOyfD0T9w6sz01OEF0vju5Z8+7bSuuf+XvtL0875glo9bfS0DdJPjc+PLLnCL21cj9va1lj/pi0jqMwFJROyJiL1LOG6pKXzmmS/31SP987dbvPxVlbbzaF2YZ6p8EfF0rf7LMa/+Gykm8+Ynz42fnjo9dX6sPj85OhjTU4dG06vgUNs0fvjx2hud0l+0/F//0rrLK8e+OZm1rJVL639L0/Uf+fxto/ylJCKpz9fOLj2Naz9/0vGZZrnX/6bkrWo4fy79YHxu7sLhiE3Jaw8uH2vsm8fT9yjXyj98oH3735ntk56JRyIivYgfjYjHovaEmOZ9f0Q8EREHFij/9y89+d7yy7+60vJPttz/ajU/r/4b8/WdAkk2N9hmVfHs/pv3O9w8Hq7+j1ZDw9mS9ve/ZN4tolNO80+7dMmfKz57AAAAsD4UImJb01jStigURkZqY0C7YkthemZ27uCpmYvnJ9N1EaXoL+QjXbXx4P4kH/8sNcXHWuJHsnHjz4qbq/GRiZnpyZ6WHNhabfNJYSTi7WJT+0/92p0hZuDvzPe1YONaqP2nnfjd19cwM8CaevjP/xsfrmpGgDXX1P47fcO/vIz/+wLWAc//QMPiP/TjngHrX0Vbhg1tSe3/oB8BhH+SvnizHi70NCfAWtP/hw1p0e/1ryhQGWi/ajAe3DgGFz5gMZaXjc1t0upJIO1Z9ST1zcvZK/81hY7bRGFpBxyI7tTpqRWejfKF2dO7u37xV7L/le92DX61Ju20XaAntyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICu+ysAAP//+sDgnA==") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff07, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x106200, 0x1000c, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20000000) recvfrom$l2tp6(r7, &(0x7f0000000480)=""/224, 0xe0, 0x40002142, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x20) link(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): ngine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.834337][ T9106] Call Trace: [ 188.834344][ T9106] [ 188.834351][ T9106] __dump_stack+0x1d/0x30 [ 188.834410][ T9106] dump_stack_lvl+0x95/0xd0 [ 188.834432][ T9106] dump_stack+0x15/0x1b [ 188.834509][ T9106] should_fail_ex+0x263/0x280 [ 188.834537][ T9106] should_failslab+0x8c/0xb0 [ 188.834576][ T9106] __kmalloc_noprof+0xb8/0x4e0 [ 188.834599][ T9106] ? sk_prot_alloc+0xa8/0x180 [ 188.834617][ T9106] ? should_failslab+0x8c/0xb0 [ 188.834710][ T9106] sk_prot_alloc+0xa8/0x180 [ 188.834802][ T9106] sk_alloc+0x35/0x3e0 [ 188.834819][ T9106] bpf_prog_test_run_skb+0x31b/0xef0 [ 188.834841][ T9106] ? __fget_files+0x184/0x1c0 [ 188.834864][ T9106] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 188.834914][ T9106] bpf_prog_test_run+0x204/0x340 [ 188.834935][ T9106] __sys_bpf+0x52e/0x7e0 [ 188.834996][ T9106] __x64_sys_bpf+0x41/0x50 [ 188.835021][ T9106] x64_sys_call+0x10cb/0x3020 [ 188.835042][ T9106] do_syscall_64+0x12c/0x370 [ 188.835097][ T9106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.835118][ T9106] RIP: 0033:0x7f854c1fc629 [ 188.835135][ T9106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.835153][ T9106] RSP: 002b:00007f854ac4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.835174][ T9106] RAX: ffffffffffffffda RBX: 00007f854c475fa0 RCX: 00007f854c1fc629 [ 188.835186][ T9106] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 188.835271][ T9106] RBP: 00007f854ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.835284][ T9106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.835294][ T9106] R13: 00007f854c476038 R14: 00007f854c475fa0 R15: 00007ffdf6ec1e08 [ 188.835358][ T9106] [ 189.127681][ T9114] FAULT_INJECTION: forcing a failure. [ 189.127681][ T9114] name failslab, interval 1, probability 0, space 0, times 0 [ 189.172676][ T9114] CPU: 1 UID: 0 PID: 9114 Comm: syz.8.1768 Not tainted syzkaller #0 PREEMPT(full) [ 189.172777][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.172789][ T9114] Call Trace: [ 189.172794][ T9114] [ 189.172867][ T9114] __dump_stack+0x1d/0x30 [ 189.172890][ T9114] dump_stack_lvl+0x95/0xd0 [ 189.172951][ T9114] dump_stack+0x15/0x1b [ 189.172971][ T9114] should_fail_ex+0x263/0x280 [ 189.173077][ T9114] should_failslab+0x8c/0xb0 [ 189.173171][ T9114] kmem_cache_alloc_noprof+0x66/0x400 [ 189.173202][ T9114] ? alloc_empty_file+0x76/0x200 [ 189.173225][ T9114] alloc_empty_file+0x76/0x200 [ 189.173285][ T9114] path_openat+0x65/0x2050 [ 189.173389][ T9114] ? refill_obj_stock+0x246/0x400 [ 189.173414][ T9114] ? obj_cgroup_charge_account+0xba/0x1a0 [ 189.173435][ T9114] ? should_fail_ex+0x30/0x280 [ 189.173498][ T9114] ? __rcu_read_unlock+0x4e/0x70 [ 189.173516][ T9114] ? avc_has_perm_noaudit+0xab/0x130 [ 189.173537][ T9114] do_file_open+0x16c/0x290 [ 189.173585][ T9114] io_openat2+0x2d8/0x470 [ 189.173671][ T9114] io_openat+0x1b/0x30 [ 189.173686][ T9114] __io_issue_sqe+0xfd/0x2d0 [ 189.173707][ T9114] io_issue_sqe+0x206/0xc00 [ 189.173802][ T9114] ? io_openat_prep+0x252/0x2a0 [ 189.173823][ T9114] io_submit_sqes+0x7fb/0x1270 [ 189.173851][ T9114] __se_sys_io_uring_enter+0x1c9/0xf50 [ 189.173875][ T9114] ? __fget_files+0x184/0x1c0 [ 189.173927][ T9114] ? mutex_unlock+0x4e/0x90 [ 189.173948][ T9114] ? fput+0x8f/0xc0 [ 189.173968][ T9114] __x64_sys_io_uring_enter+0x78/0x90 [ 189.174012][ T9114] x64_sys_call+0x1e16/0x3020 [ 189.174031][ T9114] do_syscall_64+0x12c/0x370 [ 189.174055][ T9114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.174098][ T9114] RIP: 0033:0x7ff8708ac629 [ 189.174112][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.174178][ T9114] RSP: 002b:00007ff86f2ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 189.174201][ T9114] RAX: ffffffffffffffda RBX: 00007ff870b25fa0 RCX: 00007ff8708ac629 [ 189.174213][ T9114] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 189.174224][ T9114] RBP: 00007ff86f2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 189.174235][ T9114] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 189.174246][ T9114] R13: 00007ff870b26038 R14: 00007ff870b25fa0 R15: 00007ffd59e143f8 [ 189.174262][ T9114] [ 189.441536][ T9119] loop6: detected capacity change from 0 to 512 [ 189.486998][ T9119] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1770: invalid indirect mapped block 4294967295 (level 1) [ 189.510361][ T9119] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 189.511038][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 189.526622][ C0] EXT4-fs (loop6): initial error at time 1771397809: ext4_free_branches:1023: inode 11 [ 189.536315][ C0] EXT4-fs (loop6): last error at time 1771397809: ext4_free_branches:1023: inode 11 [ 189.553549][ T9119] EXT4-fs (loop6): Remounting filesystem read-only [ 189.582517][ T9119] EXT4-fs (loop6): 2 truncates cleaned up [ 189.617025][ T9119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.706525][ T9136] FAULT_INJECTION: forcing a failure. [ 189.706525][ T9136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.763810][ T9136] CPU: 0 UID: 0 PID: 9136 Comm: syz.4.1773 Not tainted syzkaller #0 PREEMPT(full) [ 189.763839][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.763851][ T9136] Call Trace: [ 189.763857][ T9136] [ 189.763864][ T9136] __dump_stack+0x1d/0x30 [ 189.763890][ T9136] dump_stack_lvl+0x95/0xd0 [ 189.763912][ T9136] dump_stack+0x15/0x1b [ 189.763931][ T9136] should_fail_ex+0x263/0x280 [ 189.763957][ T9136] should_fail+0xb/0x20 [ 189.764036][ T9136] should_fail_usercopy+0x1a/0x20 [ 189.764053][ T9136] _copy_from_iter+0xcf/0xea0 [ 189.764073][ T9136] ? __alloc_skb+0x4f6/0x690 [ 189.764090][ T9136] ? __alloc_skb+0x200/0x690 [ 189.764123][ T9136] netlink_sendmsg+0x4ae/0x6f0 [ 189.764150][ T9136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.764173][ T9136] ____sys_sendmsg+0x5af/0x600 [ 189.764199][ T9136] ___sys_sendmsg+0x195/0x1e0 [ 189.764307][ T9136] __x64_sys_sendmsg+0xd4/0x160 [ 189.764332][ T9136] x64_sys_call+0x194c/0x3020 [ 189.764398][ T9136] do_syscall_64+0x12c/0x370 [ 189.764481][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.764503][ T9136] RIP: 0033:0x7f9a200dc629 [ 189.764526][ T9136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.764565][ T9136] RSP: 002b:00007f9a1eb2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.764586][ T9136] RAX: ffffffffffffffda RBX: 00007f9a20355fa0 RCX: 00007f9a200dc629 [ 189.764601][ T9136] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 189.764615][ T9136] RBP: 00007f9a1eb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.764628][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.764641][ T9136] R13: 00007f9a20356038 R14: 00007f9a20355fa0 R15: 00007ffdf24de338 [ 189.764714][ T9136] [ 189.974392][ T9119] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1770'. [ 190.035303][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1781'. [ 190.119526][ T9135] loop8: detected capacity change from 0 to 1024 [ 190.168409][ T9153] loop2: detected capacity change from 0 to 1024 [ 190.199728][ T9153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.216777][ T9153] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.237920][ T9135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 190.247223][ T9135] System zones: 0-1, 3-36 [ 190.250575][ T9153] EXT4-fs error (device loop2): ext4_free_blocks:6726: comm syz.2.1785: Freeing blocks not in datazone - block = 0, count = 16 [ 190.258869][ T9135] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1778: bad orphan inode 134217728 [ 190.276941][ T9135] loop8: lost filesystem error report for type 5 error -117 [ 190.277828][ T9153] EXT4-fs (loop2): Remounting filesystem read-only [ 190.287689][ T9135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.325563][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.593005][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.673677][ T28] audit: type=1400 audit(1771397810.647:1526): avc: denied { read } for pid=9169 comm="syz.8.1789" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.697822][ T5389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.812038][ T9171] IPVS: Scheduler module ip_vs_sip not found [ 190.819751][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1791'. [ 190.828974][ T9177] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1791'. [ 190.866776][ T28] audit: type=1326 audit(1771397810.837:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9180 comm="syz.6.1793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f854c1fc629 code=0x0 [ 190.924271][ T9187] loop7: detected capacity change from 0 to 512 [ 190.943232][ T9187] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.1795: corrupted inode contents [ 190.955201][ T9187] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 190.955435][ T9187] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #3: comm syz.7.1795: mark_inode_dirty error [ 190.964505][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 190.964525][ C0] EXT4-fs (loop7): initial error at time 1771397810: ext4_do_update_inode:5569: inode 3 [ 190.964567][ C0] EXT4-fs (loop7): last error at time 1771397810: ext4_do_update_inode:5569: inode 3 [ 191.001600][ T9187] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 191.002049][ T9187] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.1795: corrupted inode contents [ 191.023142][ T9187] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 191.023616][ T9187] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.1795: mark_inode_dirty error [ 191.043883][ T9187] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 191.044176][ T9187] Quota error (device loop7): write_blk: dquota write failed [ 191.061244][ T9187] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 191.071186][ T9187] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.1795: Failed to acquire dquot type 0 [ 191.082442][ T9187] loop7: lost filesystem error report for type 5 error -117 [ 191.083165][ T9187] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1795: corrupted inode contents [ 191.102437][ T9187] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.103170][ T9187] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #16: comm syz.7.1795: mark_inode_dirty error [ 191.123858][ T9187] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.124112][ T9187] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1795: corrupted inode contents [ 191.145857][ T9187] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.146027][ T9187] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.1795: mark_inode_dirty error [ 191.166463][ T9187] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.166652][ T9187] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1795: corrupted inode contents [ 191.188116][ T9187] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 191.196700][ T9187] loop7: lost filesystem error report for type 5 error -117 [ 191.196923][ T9187] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1795: corrupted inode contents [ 191.217188][ T9187] EXT4-fs error (device loop7): ext4_truncate:4587: inode #16: comm syz.7.1795: mark_inode_dirty error [ 191.228471][ T9187] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 191.237427][ T9187] loop7: lost filesystem error report for type 5 error -117 [ 191.237811][ T9187] EXT4-fs (loop7): 1 truncate cleaned up [ 191.254133][ T9187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.267533][ T9187] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.278224][ T9187] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #3: comm syz.7.1795: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 191.278224][ T9187] [ 191.312429][ T8391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.381594][ T28] audit: type=1400 audit(1771397811.357:1528): avc: denied { mounton } for pid=9190 comm="syz.2.1796" path="/proc/1122/task" dev="proc" ino=135625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 191.415892][ T28] audit: type=1400 audit(1771397811.387:1529): avc: denied { associate } for pid=9198 comm="syz.2.1796" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 191.425740][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 191.447085][ T9197] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 191.461599][ T9197] bond0: (slave gre0): Error -95 calling set_mac_address [ 191.468840][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1798'. [ 191.483433][ T9197] ip6gretap1: entered promiscuous mode [ 191.489006][ T9197] ip6gretap1: entered allmulticast mode [ 191.568382][ T9205] loop8: detected capacity change from 0 to 512 [ 191.596931][ T9205] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1800: invalid indirect mapped block 4294967295 (level 1) [ 191.645921][ T9205] EXT4-fs (loop8): Remounting filesystem read-only [ 191.652477][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 191.652494][ C0] EXT4-fs (loop8): initial error at time 1771397811: ext4_free_branches:1023: inode 11 [ 191.652527][ C0] EXT4-fs (loop8): last error at time 1771397811: ext4_free_branches:1023: inode 11 [ 191.678908][ T9205] EXT4-fs (loop8): 2 truncates cleaned up [ 191.685348][ T9205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.780162][ T9208] tmpfs: Unknown parameter '' [ 191.838515][ T9211] loop4: detected capacity change from 0 to 512 [ 191.848566][ T9211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.864626][ T9211] EXT4-fs (loop4): 1 truncate cleaned up [ 191.870684][ T9211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.925350][ T9205] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1800'. [ 191.936948][ T9202] loop7: detected capacity change from 0 to 1024 [ 191.967654][ T9202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.980411][ T9202] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.016271][ T9202] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1799: bg 0: block 112: padding at end of block bitmap is not set [ 192.045338][ T9202] EXT4-fs (loop7): Remounting filesystem read-only [ 192.242491][ T9230] loop2: detected capacity change from 0 to 128 [ 192.250916][ T28] audit: type=1400 audit(1771397812.217:1530): avc: denied { remount } for pid=9229 comm="syz.2.1807" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.551094][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.733763][ T8391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.744839][ T9238] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 192.755442][ T9238] bond0: (slave gre0): Error -95 calling set_mac_address [ 192.768706][ T9238] ip6gretap1: entered promiscuous mode [ 192.774415][ T9238] ip6gretap1: entered allmulticast mode [ 192.799555][ T9240] loop7: detected capacity change from 0 to 256 [ 192.909294][ T8779] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.196087][ T28] audit: type=1400 audit(1771397813.117:1531): avc: denied { listen } for pid=9239 comm="syz.7.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.396505][ T28] audit: type=1400 audit(1771397813.117:1532): avc: denied { accept } for pid=9239 comm="syz.7.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.503760][ T28] audit: type=1400 audit(1771397813.477:1533): avc: denied { write } for pid=9263 comm="syz.6.1820" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.537731][ T28] audit: type=1400 audit(1771397813.477:1534): avc: denied { ioctl } for pid=9263 comm="syz.6.1820" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.554325][ T9266] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 193.579615][ T9266] vhci_hcd vhci_hcd.0: invalid port number 0 [ 193.599764][ T9264] loop6: detected capacity change from 0 to 512 [ 193.626477][ T9264] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 193.634545][ T9264] EXT4-fs (loop6): orphan cleanup on readonly fs [ 193.718130][ T9273] loop4: detected capacity change from 0 to 512 [ 193.758527][ T9264] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.1820: corrupted inode contents [ 193.774538][ T9273] ext4: Unknown parameter 'euid<00000000000000000000' [ 193.810040][ T9264] fserror_report: 4 callbacks suppressed [ 193.810055][ T9264] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 193.842825][ T9264] EXT4-fs (loop6): Remounting filesystem read-only [ 193.852589][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 193.852614][ C0] EXT4-fs (loop6): initial error at time 1771397813: ext4_do_update_inode:5569: inode 16 [ 193.852664][ C0] EXT4-fs (loop6): last error at time 1771397813: ext4_do_update_inode:5569: inode 16 [ 193.896301][ T9264] EXT4-fs (loop6): 1 truncate cleaned up [ 193.907070][ T30] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 193.917657][ T30] Quota error (device loop6): write_blk: dquota write failed [ 193.931060][ T30] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 193.950038][ T30] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 193.969011][ T30] Quota error (device loop6): write_blk: dquota write failed [ 194.000509][ T30] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 194.017653][ T30] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 194.041257][ T30] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 194.065873][ T9264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.095193][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.102626][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.233952][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.244415][ T9275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.318344][ T30] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.340663][ T30] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.503124][ T30] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.535933][ T30] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.589268][ T9266] netlink: 'syz.6.1820': attribute type 1 has an invalid length. [ 194.885601][ T9290] loop7: detected capacity change from 0 to 1024 [ 194.940918][ T9290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.001117][ T9290] loop7: detected capacity change from 1024 to 64 [ 195.051402][ T9290] netlink: 'syz.7.1826': attribute type 1 has an invalid length. [ 195.100875][ T9305] loop6: detected capacity change from 0 to 512 [ 195.114274][ T9290] ip6erspan0: entered promiscuous mode [ 195.142721][ T9290] syz.7.1826: attempt to access beyond end of device [ 195.142721][ T9290] loop7: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 195.206307][ T9290] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 113) [ 195.252357][ T9290] syz.7.1826: attempt to access beyond end of device [ 195.252357][ T9290] loop7: rw=2049, sector=226, nr_sectors = 6 limit=64 [ 195.370833][ T9314] ÿ: renamed from bond_slave_0 (while UP) [ 195.395568][ T9290] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 113) [ 195.750370][ T9319] FAULT_INJECTION: forcing a failure. [ 195.750370][ T9319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.763728][ T9319] CPU: 1 UID: 0 PID: 9319 Comm: syz.6.1833 Not tainted syzkaller #0 PREEMPT(full) [ 195.763752][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.763809][ T9319] Call Trace: [ 195.763817][ T9319] [ 195.763826][ T9319] __dump_stack+0x1d/0x30 [ 195.763852][ T9319] dump_stack_lvl+0x95/0xd0 [ 195.763875][ T9319] dump_stack+0x15/0x1b [ 195.763903][ T9319] should_fail_ex+0x263/0x280 [ 195.763928][ T9319] should_fail_alloc_page+0xf2/0x100 [ 195.763963][ T9319] __alloc_frozen_pages_noprof+0x108/0x360 [ 195.763999][ T9319] alloc_pages_mpol+0xb3/0x260 [ 195.764021][ T9319] alloc_pages_noprof+0x8f/0x130 [ 195.764041][ T9319] pte_alloc_one+0x1e/0xd0 [ 195.764100][ T9319] __do_fault+0x7b/0x200 [ 195.764126][ T9319] handle_mm_fault+0xfa1/0x3020 [ 195.764201][ T9319] ? __rcu_read_unlock+0x4e/0x70 [ 195.764221][ T9319] ? check_vma_flags+0x26d/0x330 [ 195.764244][ T9319] __get_user_pages+0x1023/0x1ea0 [ 195.764278][ T9319] __gup_longterm_locked+0xbad/0xe30 [ 195.764379][ T9319] ? preempt_schedule_thunk+0x16/0x30 [ 195.764408][ T9319] pin_user_pages_remote+0x7e/0xb0 [ 195.764499][ T9319] process_vm_rw+0x49b/0x9c0 [ 195.764530][ T9319] ? __schedule+0x85a/0xd40 [ 195.764566][ T9319] __x64_sys_process_vm_writev+0x78/0x90 [ 195.764638][ T9319] x64_sys_call+0x1592/0x3020 [ 195.764658][ T9319] do_syscall_64+0x12c/0x370 [ 195.764681][ T9319] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 195.764780][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.764797][ T9319] RIP: 0033:0x7f854c1fc629 [ 195.764811][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.764827][ T9319] RSP: 002b:00007f854ac0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 195.764848][ T9319] RAX: ffffffffffffffda RBX: 00007f854c476180 RCX: 00007f854c1fc629 [ 195.764862][ T9319] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000273 [ 195.764881][ T9319] RBP: 00007f854ac0d090 R08: 0000000000000001 R09: 0000000000000000 [ 195.764892][ T9319] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 195.764903][ T9319] R13: 00007f854c476218 R14: 00007f854c476180 R15: 00007ffdf6ec1e08 [ 195.764923][ T9319] [ 196.125717][ T9290] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 196.190145][ T9290] Buffer I/O error on device loop7, logical block 113 [ 196.196942][ T9290] Buffer I/O error on device loop7, logical block 114 [ 196.203702][ T9290] Buffer I/O error on device loop7, logical block 115 [ 196.212869][ T9290] Buffer I/O error on device loop7, logical block 113 [ 196.231252][ T9290] syz.7.1826: attempt to access beyond end of device [ 196.231252][ T9290] loop7: rw=2049, sector=232, nr_sectors = 24 limit=64 [ 196.251127][ T9290] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 116) [ 196.271436][ T9290] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 196.301186][ T9290] Buffer I/O error on device loop7, logical block 116 [ 196.308051][ T9290] Buffer I/O error on device loop7, logical block 117 [ 196.314827][ T9290] Buffer I/O error on device loop7, logical block 118 [ 196.321637][ T9290] Buffer I/O error on device loop7, logical block 119 [ 196.382012][ T9290] Buffer I/O error on device loop7, logical block 120 [ 196.388807][ T9290] Buffer I/O error on device loop7, logical block 121 [ 196.396045][ T9290] syz.7.1826: attempt to access beyond end of device [ 196.396045][ T9290] loop7: rw=2049, sector=290, nr_sectors = 2 limit=64 [ 196.409404][ T9290] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 145) [ 196.420960][ T9290] syz.7.1826: attempt to access beyond end of device [ 196.420960][ T9290] loop7: rw=2049, sector=290, nr_sectors = 6 limit=64 [ 196.434587][ T9290] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 145) [ 196.461228][ T9290] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 196.488173][ T9290] syz.7.1826: attempt to access beyond end of device [ 196.488173][ T9290] loop7: rw=2049, sector=296, nr_sectors = 24 limit=64 [ 196.512163][ T9290] EXT4-fs warning (device loop7): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 148) [ 196.531739][ T9290] EXT4-fs (loop7): failed to convert unwritten extents to written extents -- potential data loss! (inode 18, error -5) [ 196.638521][ T9325] loop6: detected capacity change from 0 to 8192 [ 196.724053][ T8391] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /49/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 196.984094][ T8391] EXT4-fs unmount: 1 callbacks suppressed [ 196.984109][ T8391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.162969][ T9291] kmmpd-loop7: attempt to access beyond end of device [ 197.162969][ T9291] loop7: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 197.198304][ T9291] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 198.074394][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 198.223149][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.247318][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.274955][ T9342] bridge_slave_0: entered allmulticast mode [ 198.295435][ T9342] bridge_slave_0: entered promiscuous mode [ 198.319599][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.341833][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.367129][ T9342] bridge_slave_1: entered allmulticast mode [ 198.387193][ T9342] bridge_slave_1: entered promiscuous mode [ 198.426272][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.449107][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.495372][ T9342] team0: Port device team_slave_0 added [ 198.508891][ T9342] team0: Port device team_slave_1 added [ 198.542720][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.557965][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.612128][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.635443][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.650772][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.703184][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.764064][ T9342] hsr_slave_0: entered promiscuous mode [ 198.776651][ T9342] hsr_slave_1: entered promiscuous mode [ 198.789916][ T9342] debugfs: 'hsr0' already exists in 'hsr' [ 198.808199][ T9342] Cannot create hsr debugfs directory [ 198.868776][ T9365] netlink: 'syz.6.1847': attribute type 1 has an invalid length. [ 198.887238][ T9365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.942841][ T9365] bond0: (slave veth3): Enslaving as an active interface with a down link [ 198.982193][ T9365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.003519][ T9365] bond0: (slave batadv0): making interface the new active one [ 199.019950][ T9365] batadv0: entered promiscuous mode [ 199.034156][ T9365] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 199.211966][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.245962][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.269973][ T2325] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.277187][ T2325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.307826][ T2325] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.315048][ T2325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.324208][ T9378] loop6: detected capacity change from 0 to 8192 [ 199.423308][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.445959][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 199.482974][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.496695][ T9388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9388 comm=syz.4.1850 [ 199.526912][ T9384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.816261][ T9342] veth0_vlan: entered promiscuous mode [ 199.853409][ T9342] veth1_vlan: entered promiscuous mode [ 199.901985][ T9342] veth0_macvtap: entered promiscuous mode [ 199.931950][ T9342] veth1_macvtap: entered promiscuous mode [ 199.953051][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.973409][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.034194][ T9471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9471 comm=syz.4.1857 [ 201.161561][ T9486] FAULT_INJECTION: forcing a failure. [ 201.161561][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.207562][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.6.1860 Not tainted syzkaller #0 PREEMPT(full) [ 201.207592][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.207668][ T9486] Call Trace: [ 201.207674][ T9486] [ 201.207682][ T9486] __dump_stack+0x1d/0x30 [ 201.207754][ T9486] dump_stack_lvl+0x95/0xd0 [ 201.207777][ T9486] dump_stack+0x15/0x1b [ 201.207798][ T9486] should_fail_ex+0x263/0x280 [ 201.207962][ T9486] should_fail+0xb/0x20 [ 201.207976][ T9486] should_fail_usercopy+0x1a/0x20 [ 201.207997][ T9486] _copy_from_user+0x1c/0xb0 [ 201.208020][ T9486] do_sock_getsockopt+0xf1/0x210 [ 201.208124][ T9486] __x64_sys_getsockopt+0x11d/0x1a0 [ 201.208172][ T9486] x64_sys_call+0x2dcf/0x3020 [ 201.208197][ T9486] do_syscall_64+0x12c/0x370 [ 201.208263][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.208287][ T9486] RIP: 0033:0x7f854c1fc629 [ 201.208304][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.208321][ T9486] RSP: 002b:00007f854ac4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 201.208343][ T9486] RAX: ffffffffffffffda RBX: 00007f854c475fa0 RCX: 00007f854c1fc629 [ 201.208358][ T9486] RDX: 000000000000000f RSI: 0000000000000107 RDI: 0000000000000003 [ 201.208371][ T9486] RBP: 00007f854ac4f090 R08: 00002000000000c0 R09: 0000000000000000 [ 201.208386][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.208479][ T9486] R13: 00007f854c476038 R14: 00007f854c475fa0 R15: 00007ffdf6ec1e08 [ 201.208500][ T9486] [ 201.458624][ T9490] loop6: detected capacity change from 0 to 512 [ 201.533426][ T9490] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 201.798410][ T9490] EXT4-fs (loop6): 1 truncate cleaned up [ 201.904797][ T9490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.255691][ T5389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.482970][ T9505] netlink: 'syz.6.1865': attribute type 3 has an invalid length. [ 202.501873][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 202.501884][ T28] audit: type=1400 audit(1771397822.477:1542): avc: denied { read } for pid=9504 comm="syz.6.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.902712][ T9508] FAULT_INJECTION: forcing a failure. [ 202.902712][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 202.931592][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.4.1866 Not tainted syzkaller #0 PREEMPT(full) [ 202.931662][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.931672][ T9508] Call Trace: [ 202.931677][ T9508] [ 202.931684][ T9508] __dump_stack+0x1d/0x30 [ 202.931706][ T9508] dump_stack_lvl+0x95/0xd0 [ 202.931723][ T9508] dump_stack+0x15/0x1b [ 202.931788][ T9508] should_fail_ex+0x263/0x280 [ 202.931818][ T9508] should_failslab+0x8c/0xb0 [ 202.931848][ T9508] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 202.932005][ T9508] ? __alloc_skb+0x2d6/0x690 [ 202.932068][ T9508] __alloc_skb+0x2d6/0x690 [ 202.932159][ T9508] ? __alloc_skb+0x200/0x690 [ 202.932176][ T9508] netlink_alloc_large_skb+0xbf/0xf0 [ 202.932197][ T9508] netlink_sendmsg+0x40c/0x6f0 [ 202.932284][ T9508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.932307][ T9508] ____sys_sendmsg+0x5af/0x600 [ 202.932334][ T9508] ___sys_sendmsg+0x195/0x1e0 [ 202.932363][ T9508] __x64_sys_sendmsg+0xd4/0x160 [ 202.932426][ T9508] x64_sys_call+0x194c/0x3020 [ 202.932451][ T9508] do_syscall_64+0x12c/0x370 [ 202.932535][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.932617][ T9508] RIP: 0033:0x7f9a200dc629 [ 202.932634][ T9508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.932667][ T9508] RSP: 002b:00007f9a1eb2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.932684][ T9508] RAX: ffffffffffffffda RBX: 00007f9a20355fa0 RCX: 00007f9a200dc629 [ 202.932696][ T9508] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 202.932756][ T9508] RBP: 00007f9a1eb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.932767][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.932778][ T9508] R13: 00007f9a20356038 R14: 00007f9a20355fa0 R15: 00007ffdf24de338 [ 202.932821][ T9508] [ 203.224565][ T9510] FAULT_INJECTION: forcing a failure. [ 203.224565][ T9510] name failslab, interval 1, probability 0, space 0, times 0 [ 203.245512][ T9510] CPU: 1 UID: 0 PID: 9510 Comm: syz.4.1867 Not tainted syzkaller #0 PREEMPT(full) [ 203.245541][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.245601][ T9510] Call Trace: [ 203.245607][ T9510] [ 203.245614][ T9510] __dump_stack+0x1d/0x30 [ 203.245641][ T9510] dump_stack_lvl+0x95/0xd0 [ 203.245663][ T9510] dump_stack+0x15/0x1b [ 203.245763][ T9510] should_fail_ex+0x263/0x280 [ 203.245791][ T9510] ? alloc_fs_context+0x46/0x580 [ 203.245859][ T9510] should_failslab+0x8c/0xb0 [ 203.245888][ T9510] __kmalloc_cache_noprof+0x5f/0x410 [ 203.245912][ T9510] alloc_fs_context+0x46/0x580 [ 203.245929][ T9510] ? kfree+0x101/0x380 [ 203.245955][ T9510] fs_context_for_mount+0x22/0x30 [ 203.246121][ T9510] __se_sys_fsopen+0xa0/0x1e0 [ 203.246144][ T9510] __x64_sys_fsopen+0x31/0x40 [ 203.246166][ T9510] x64_sys_call+0x29af/0x3020 [ 203.246222][ T9510] do_syscall_64+0x12c/0x370 [ 203.246247][ T9510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.246268][ T9510] RIP: 0033:0x7f9a200dc629 [ 203.246285][ T9510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.246361][ T9510] RSP: 002b:00007f9a1eb2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 203.246383][ T9510] RAX: ffffffffffffffda RBX: 00007f9a20355fa0 RCX: 00007f9a200dc629 [ 203.246396][ T9510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 203.246407][ T9510] RBP: 00007f9a1eb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.246419][ T9510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.246432][ T9510] R13: 00007f9a20356038 R14: 00007f9a20355fa0 R15: 00007ffdf24de338 [ 203.246531][ T9510] [ 204.462669][ T9519] loop4: detected capacity change from 0 to 512 [ 204.533327][ T9519] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1871: invalid indirect mapped block 4294967295 (level 1) [ 204.577733][ T9519] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.581093][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 204.596665][ C0] EXT4-fs (loop4): initial error at time 1771397824: ext4_free_branches:1023: inode 11 [ 204.606335][ C0] EXT4-fs (loop4): last error at time 1771397824: ext4_free_branches:1023: inode 11 [ 204.618232][ T9519] EXT4-fs (loop4): Remounting filesystem read-only [ 204.633159][ T9519] EXT4-fs (loop4): 2 truncates cleaned up [ 204.639279][ T9519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.921471][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 204.930355][ T9519] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1871'. [ 204.990659][ T9526] loop9: detected capacity change from 0 to 8192 [ 205.074096][ T9529] loop6: detected capacity change from 0 to 128 [ 205.090248][ T9529] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.141235][ T9529] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.215477][ T9529] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.269812][ T9533] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 205.295486][ T9535] loop9: detected capacity change from 0 to 256 [ 205.300699][ T9533] bond0: (slave gre0): Error -95 calling set_mac_address [ 205.315298][ T9535] FAT-fs (loop9): Directory bread(block 64) failed [ 205.321967][ T9535] FAT-fs (loop9): Directory bread(block 65) failed [ 205.336711][ T9535] FAT-fs (loop9): Directory bread(block 66) failed [ 205.354771][ T9535] FAT-fs (loop9): Directory bread(block 67) failed [ 205.371135][ T9535] FAT-fs (loop9): Directory bread(block 68) failed [ 205.391101][ T9535] FAT-fs (loop9): Directory bread(block 69) failed [ 205.397664][ T9535] FAT-fs (loop9): Directory bread(block 70) failed [ 205.416449][ T9535] FAT-fs (loop9): Directory bread(block 71) failed [ 205.431191][ T9535] FAT-fs (loop9): Directory bread(block 72) failed [ 205.451130][ T9535] FAT-fs (loop9): Directory bread(block 73) failed [ 205.481273][ T28] audit: type=1400 audit(1771397825.447:1543): avc: denied { write } for pid=9534 comm="syz.9.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.515437][ T9535] syz.9.1875: attempt to access beyond end of device [ 205.515437][ T9535] loop9: rw=2049, sector=1264, nr_sectors = 24 limit=256 [ 205.541084][ T28] audit: type=1400 audit(1771397825.447:1544): avc: denied { read } for pid=9534 comm="syz.9.1875" lport=20616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.571102][ T9535] syz.9.1875: attempt to access beyond end of device [ 205.571102][ T9535] loop9: rw=2049, sector=1320, nr_sectors = 32 limit=256 [ 205.585860][ T9535] syz.9.1875: attempt to access beyond end of device [ 205.585860][ T9535] loop9: rw=2049, sector=1384, nr_sectors = 36 limit=256 [ 205.772484][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.010501][ T30] kworker/u8:1: attempt to access beyond end of device [ 206.010501][ T30] loop9: rw=1, sector=1224, nr_sectors = 40 limit=256 [ 206.227951][ T3380] IPVS: starting estimator thread 0... [ 206.351303][ T9550] IPVS: using max 2352 ests per chain, 117600 per kthread [ 207.030715][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1886'. [ 207.060783][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1886'. [ 207.152686][ T9567] loop9: detected capacity change from 0 to 128 [ 207.657756][ T28] audit: type=1400 audit(1771397827.627:1545): avc: denied { ioctl } for pid=9570 comm="syz.4.1889" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=140213 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.748279][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1891'. [ 207.760874][ T28] audit: type=1326 audit(1771397827.727:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 207.786132][ T28] audit: type=1326 audit(1771397827.727:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 207.810052][ T28] audit: type=1326 audit(1771397827.727:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 207.848007][ T28] audit: type=1326 audit(1771397827.727:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 207.879566][ T28] audit: type=1326 audit(1771397827.727:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 207.904484][ T28] audit: type=1326 audit(1771397827.727:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 207.932031][ T28] audit: type=1326 audit(1771397827.727:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 207.970603][ T28] audit: type=1326 audit(1771397827.727:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 208.059134][ T9587] loop4: detected capacity change from 0 to 8192 [ 208.065731][ T28] audit: type=1326 audit(1771397827.727:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a200dc629 code=0x7ffc0000 [ 208.111953][ T2325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.138950][ T2325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.224546][ T2325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.261084][ T2325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.345957][ T2325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.381293][ T2325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.426758][ T9572] chnl_net:caif_netlink_parms(): no params data found [ 208.459283][ T2325] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.501299][ T2325] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.631953][ T9597] loop6: detected capacity change from 0 to 128 [ 208.785471][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.806935][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.831077][ T9572] bridge_slave_0: entered allmulticast mode [ 208.850026][ T9572] bridge_slave_0: entered promiscuous mode [ 208.872393][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.904739][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.930999][ T9572] bridge_slave_1: entered allmulticast mode [ 208.944370][ T9572] bridge_slave_1: entered promiscuous mode [ 208.976241][ T9617] loop9: detected capacity change from 0 to 128 [ 209.113857][ T2325] bond0 (unregistering): Released all slaves [ 209.130301][ T2325] bond1 (unregistering): Released all slaves [ 209.155182][ T2325] bond2 (unregistering): Released all slaves [ 209.205820][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.234577][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.272957][ T9572] team0: Port device team_slave_0 added [ 209.279406][ T9572] team0: Port device team_slave_1 added [ 209.311613][ T2325] hsr_slave_0: left promiscuous mode [ 209.326862][ T2325] hsr_slave_1: left promiscuous mode [ 209.347841][ T2325] veth1_macvtap: left promiscuous mode [ 209.354217][ T2325] veth0_macvtap: left promiscuous mode [ 209.360021][ T2325] veth1_vlan: left promiscuous mode [ 209.367509][ T2325] veth0_vlan: left promiscuous mode [ 209.462748][ T9638] loop6: detected capacity change from 0 to 128 [ 209.517850][ T9638] FAULT_INJECTION: forcing a failure. [ 209.517850][ T9638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.532514][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: syz.6.1906 Not tainted syzkaller #0 PREEMPT(full) [ 209.532541][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.532552][ T9638] Call Trace: [ 209.532557][ T9638] [ 209.532640][ T9638] __dump_stack+0x1d/0x30 [ 209.532666][ T9638] dump_stack_lvl+0x95/0xd0 [ 209.532685][ T9638] dump_stack+0x15/0x1b [ 209.532706][ T9638] should_fail_ex+0x263/0x280 [ 209.532762][ T9638] should_fail+0xb/0x20 [ 209.532775][ T9638] should_fail_usercopy+0x1a/0x20 [ 209.532793][ T9638] copy_fpstate_to_sigframe+0x650/0x7f0 [ 209.532857][ T9638] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 209.532883][ T9638] ? get_sigframe+0x90/0x470 [ 209.532940][ T9638] ? x86_task_fpu+0x36/0x60 [ 209.532958][ T9638] get_sigframe+0x34c/0x470 [ 209.533029][ T9638] ? get_signal+0xdc3/0xf60 [ 209.533057][ T9638] x64_setup_rt_frame+0xa7/0x4e0 [ 209.533144][ T9638] arch_do_signal_or_restart+0x24b/0x450 [ 209.533218][ T9638] exit_to_user_mode_loop+0x6a/0x6f0 [ 209.533264][ T9638] ? __x64_sys_recvmmsg+0xe5/0x170 [ 209.533291][ T9638] do_syscall_64+0x249/0x370 [ 209.533374][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.533395][ T9638] RIP: 0033:0x7f854c1fc627 [ 209.533412][ T9638] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 209.533429][ T9638] RSP: 002b:00007f854ac4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 209.533519][ T9638] RAX: 000000000000012b RBX: 00007f854c475fa0 RCX: 00007f854c1fc629 [ 209.533533][ T9638] RDX: 0000000000000001 RSI: 0000200000001380 RDI: 000000000000000b [ 209.533545][ T9638] RBP: 00007f854ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.533556][ T9638] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 209.533567][ T9638] R13: 00007f854c476038 R14: 00007f854c475fa0 R15: 00007ffdf6ec1e08 [ 209.533583][ T9638] [ 209.830768][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.838596][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.868330][ T9572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.352707][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.359664][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.392613][ T9572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.458193][ T9572] hsr_slave_0: entered promiscuous mode [ 210.466969][ T9572] hsr_slave_1: entered promiscuous mode [ 210.492313][ T2325] IPVS: stop unused estimator thread 0... [ 210.540597][ T9661] geneve2: entered promiscuous mode [ 210.566173][ T9661] netlink: 'syz.6.1909': attribute type 13 has an invalid length. [ 210.576362][ T4900] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.596310][ T4900] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.708083][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.715351][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.874191][ T4900] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.903143][ T4900] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.953334][ T4900] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.991063][ T4900] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 211.009348][ T9674] FAULT_INJECTION: forcing a failure. [ 211.009348][ T9674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.031844][ T4900] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.040752][ T4900] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 211.042555][ T9674] CPU: 1 UID: 0 PID: 9674 Comm: syz.9.1911 Not tainted syzkaller #0 PREEMPT(full) [ 211.042587][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.042599][ T9674] Call Trace: [ 211.042606][ T9674] [ 211.042624][ T9674] __dump_stack+0x1d/0x30 [ 211.042648][ T9674] dump_stack_lvl+0x95/0xd0 [ 211.042693][ T9674] dump_stack+0x15/0x1b [ 211.042713][ T9674] should_fail_ex+0x263/0x280 [ 211.042764][ T9674] should_fail+0xb/0x20 [ 211.042833][ T9674] should_fail_usercopy+0x1a/0x20 [ 211.042852][ T9674] _copy_to_user+0x20/0xa0 [ 211.042874][ T9674] simple_read_from_buffer+0xb5/0x130 [ 211.042903][ T9674] proc_fail_nth_read+0x10e/0x150 [ 211.042962][ T9674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.043014][ T9674] vfs_read+0x1ab/0x7f0 [ 211.043039][ T9674] ? __rcu_read_unlock+0x4e/0x70 [ 211.043119][ T9674] ? __fget_files+0x184/0x1c0 [ 211.043138][ T9674] ? mutex_lock+0x57/0x90 [ 211.043161][ T9674] ksys_read+0xdc/0x1a0 [ 211.043187][ T9674] __x64_sys_read+0x40/0x50 [ 211.043238][ T9674] x64_sys_call+0x2886/0x3020 [ 211.043261][ T9674] do_syscall_64+0x12c/0x370 [ 211.043289][ T9674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.043318][ T9674] RIP: 0033:0x7f74b1d5cece [ 211.043333][ T9674] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.043350][ T9674] RSP: 002b:00007f74b07f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.043373][ T9674] RAX: ffffffffffffffda RBX: 00007f74b07f76c0 RCX: 00007f74b1d5cece [ 211.043425][ T9674] RDX: 000000000000000f RSI: 00007f74b07f70a0 RDI: 0000000000000004 [ 211.043437][ T9674] RBP: 00007f74b07f7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.043450][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.043467][ T9674] R13: 00007f74b2016038 R14: 00007f74b2015fa0 R15: 00007ffdcbd1ee48 [ 211.043485][ T9674] [ 211.488091][ T9694] loop6: detected capacity change from 0 to 512 [ 211.535912][ T9694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.561741][ T9694] ext4 filesystem being mounted at /279/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.574468][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.574642][ T9705] FAULT_INJECTION: forcing a failure. [ 211.574642][ T9705] name failslab, interval 1, probability 0, space 0, times 0 [ 211.593963][ T9705] CPU: 0 UID: 0 PID: 9705 Comm: syz.9.1919 Not tainted syzkaller #0 PREEMPT(full) [ 211.593989][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.594001][ T9705] Call Trace: [ 211.594008][ T9705] [ 211.594016][ T9705] __dump_stack+0x1d/0x30 [ 211.594041][ T9705] dump_stack_lvl+0x95/0xd0 [ 211.594057][ T9705] dump_stack+0x15/0x1b [ 211.594073][ T9705] should_fail_ex+0x263/0x280 [ 211.594101][ T9705] ? hugetlb_vm_op_open+0x218/0x390 [ 211.594124][ T9705] should_failslab+0x8c/0xb0 [ 211.594151][ T9705] __kmalloc_cache_noprof+0x5f/0x410 [ 211.594169][ T9705] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 211.594191][ T9705] hugetlb_vm_op_open+0x218/0x390 [ 211.594214][ T9705] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 211.594235][ T9705] __split_vma+0x357/0x640 [ 211.594257][ T9705] ? xas_load+0x413/0x430 [ 211.594316][ T9705] ? xas_load+0x413/0x430 [ 211.594341][ T9705] vms_gather_munmap_vmas+0x184/0x850 [ 211.594363][ T9705] ? mas_find+0x608/0x700 [ 211.594385][ T9705] mmap_region+0x723/0x1d10 [ 211.594410][ T9705] ? avc_has_perm+0x101/0x190 [ 211.594450][ T9705] do_mmap+0x9b2/0xbd0 [ 211.594474][ T9705] __se_sys_remap_file_pages+0x54d/0x5e0 [ 211.594499][ T9705] ? mutex_lock+0x57/0x90 [ 211.594518][ T9705] ? mutex_unlock+0x4e/0x90 [ 211.594537][ T9705] ? fput+0x8f/0xc0 [ 211.594558][ T9705] __x64_sys_remap_file_pages+0x67/0x80 [ 211.594580][ T9705] x64_sys_call+0x2e53/0x3020 [ 211.594600][ T9705] do_syscall_64+0x12c/0x370 [ 211.594627][ T9705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.594648][ T9705] RIP: 0033:0x7f74b1d9c629 [ 211.594663][ T9705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.594678][ T9705] RSP: 002b:00007f74b07f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 211.594695][ T9705] RAX: ffffffffffffffda RBX: 00007f74b2015fa0 RCX: 00007f74b1d9c629 [ 211.594705][ T9705] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 211.594715][ T9705] RBP: 00007f74b07f7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.594725][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.594735][ T9705] R13: 00007f74b2016038 R14: 00007f74b2015fa0 R15: 00007ffdcbd1ee48 [ 211.594750][ T9705] [ 211.594756][ T9705] HugeTLB: unable to allocate vma specific lock [ 211.610230][ T9572] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.866734][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.873897][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.883675][ T5389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.901218][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.908295][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.944754][ T310] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.012532][ T310] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.074260][ T310] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.163116][ T310] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.169766][ T9740] loop6: detected capacity change from 0 to 8192 [ 212.336923][ T9750] loop9: detected capacity change from 0 to 8192 [ 212.356496][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.393285][ T9709] chnl_net:caif_netlink_parms(): no params data found [ 212.484712][ T310] bridge_slave_1: left allmulticast mode [ 212.500849][ T310] bridge_slave_1: left promiscuous mode [ 212.531233][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.551966][ T310] bridge_slave_0: left allmulticast mode [ 212.557636][ T310] bridge_slave_0: left promiscuous mode [ 212.571819][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.641612][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1931'. [ 212.723484][ T310] bond0 (unregistering): (slave 56ÿ): Releasing backup interface [ 212.724853][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.725898][ T310] bond0 (unregistering): Released all slaves [ 212.802432][ T9709] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.809782][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.817431][ T9709] bridge_slave_0: entered allmulticast mode [ 212.824233][ T9709] bridge_slave_0: entered promiscuous mode [ 212.830979][ T9709] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.845842][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.861192][ T9709] bridge_slave_1: entered allmulticast mode [ 212.868582][ T9709] bridge_slave_1: entered promiscuous mode [ 212.877648][ T310] hsr_slave_0: left promiscuous mode [ 212.893020][ T310] hsr_slave_1: left promiscuous mode [ 212.915856][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.942262][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.963398][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.973839][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.986916][ T310] veth1_macvtap: left promiscuous mode [ 212.991678][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 212.991721][ T28] audit: type=1400 audit(1771397832.957:1560): avc: denied { override_creds } for pid=9811 comm="syz.6.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 212.993064][ T310] veth0_macvtap: left promiscuous mode [ 213.024465][ T310] veth1_vlan: left promiscuous mode [ 213.029712][ T310] veth0_vlan: left promiscuous mode [ 213.029946][ T9809] loop9: detected capacity change from 0 to 128 [ 213.067677][ T9809] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.107285][ T9809] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.140447][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1936'. [ 213.172424][ T310] team0 (unregistering): Port device team_slave_1 removed [ 213.194007][ T310] team0 (unregistering): Port device team_slave_0 removed [ 213.205009][ T9809] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.275538][ T9709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.293945][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.311281][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.343300][ T9709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.392122][ T9709] team0: Port device team_slave_0 added [ 213.408960][ T9709] team0: Port device team_slave_1 added [ 213.470140][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.489610][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.662453][ T9709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.884910][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.927073][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.044842][ T9709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.192158][ T9848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1940'. [ 214.211260][ T9848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1940'. [ 214.220376][ T9848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1940'. [ 214.259384][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1940'. [ 214.286494][ T9709] hsr_slave_0: entered promiscuous mode [ 214.301622][ T9709] hsr_slave_1: entered promiscuous mode [ 214.307923][ T9709] debugfs: 'hsr0' already exists in 'hsr' [ 214.314121][ T9709] Cannot create hsr debugfs directory [ 214.329179][ T9860] program syz.6.1941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.354547][ T9572] veth0_vlan: entered promiscuous mode [ 214.355238][ T310] IPVS: stop unused estimator thread 0... [ 214.424246][ T9572] veth1_vlan: entered promiscuous mode [ 214.475541][ T9572] veth0_macvtap: entered promiscuous mode [ 214.503560][ T9572] veth1_macvtap: entered promiscuous mode [ 214.509953][ T9877] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1943'. [ 214.542036][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.561854][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.637290][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.675003][ T9709] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.691919][ T9893] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 214.702819][ T9893] bond0: (slave gre0): Error -95 calling set_mac_address [ 214.713266][ T2325] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.720345][ T2325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.751184][ T9893] ip6gretap1: entered promiscuous mode [ 214.768524][ T9893] ip6gretap1: entered allmulticast mode [ 214.808081][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.815343][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.855054][ T9709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.876303][ T9709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.995852][ T9917] FAULT_INJECTION: forcing a failure. [ 214.995852][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 215.016725][ T9917] CPU: 0 UID: 0 PID: 9917 Comm: syz.6.1950 Not tainted syzkaller #0 PREEMPT(full) [ 215.016754][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.016839][ T9917] Call Trace: [ 215.016846][ T9917] [ 215.016852][ T9917] __dump_stack+0x1d/0x30 [ 215.016900][ T9917] dump_stack_lvl+0x95/0xd0 [ 215.016990][ T9917] dump_stack+0x15/0x1b [ 215.017007][ T9917] should_fail_ex+0x263/0x280 [ 215.017033][ T9917] should_failslab+0x8c/0xb0 [ 215.017076][ T9917] __kmalloc_node_noprof+0xc8/0x560 [ 215.017097][ T9917] ? __nla_validate_parse+0x1650/0x1cf0 [ 215.017119][ T9917] ? qdisc_alloc+0x65/0x410 [ 215.017147][ T9917] qdisc_alloc+0x65/0x410 [ 215.017195][ T9917] ? nla_strcmp+0xc3/0xe0 [ 215.017214][ T9917] qdisc_create+0xf5/0x9d0 [ 215.017239][ T9917] tc_modify_qdisc+0xffc/0x14f0 [ 215.017347][ T9917] ? __mutex_lock_slowpath+0xa/0x10 [ 215.017368][ T9917] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 215.017401][ T9917] rtnetlink_rcv_msg+0x6a7/0x720 [ 215.017426][ T9917] ? avc_has_perm_noaudit+0xab/0x130 [ 215.017450][ T9917] netlink_rcv_skb+0x123/0x220 [ 215.017496][ T9917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 215.017565][ T9917] rtnetlink_rcv+0x1c/0x30 [ 215.017587][ T9917] netlink_unicast+0x5c0/0x690 [ 215.017610][ T9917] netlink_sendmsg+0x5c8/0x6f0 [ 215.017682][ T9917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.017704][ T9917] ____sys_sendmsg+0x5af/0x600 [ 215.017748][ T9917] ___sys_sendmsg+0x195/0x1e0 [ 215.017783][ T9917] __x64_sys_sendmsg+0xd4/0x160 [ 215.017810][ T9917] x64_sys_call+0x194c/0x3020 [ 215.017911][ T9917] do_syscall_64+0x12c/0x370 [ 215.017936][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.017954][ T9917] RIP: 0033:0x7f854c1fc629 [ 215.017971][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.018042][ T9917] RSP: 002b:00007f854ac4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.018060][ T9917] RAX: ffffffffffffffda RBX: 00007f854c475fa0 RCX: 00007f854c1fc629 [ 215.018073][ T9917] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 215.018131][ T9917] RBP: 00007f854ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.018143][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.018154][ T9917] R13: 00007f854c476038 R14: 00007f854c475fa0 R15: 00007ffdf6ec1e08 [ 215.018174][ T9917] [ 215.330701][ T9709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.381521][ T9933] loop3: detected capacity change from 0 to 1024 [ 215.411188][ T9933] EXT4-fs: inline encryption not supported [ 215.417117][ T9933] ext4: Unknown parameter 'obj_type' [ 215.452990][ T9930] loop6: detected capacity change from 0 to 8192 [ 215.612721][ T9709] veth0_vlan: entered promiscuous mode [ 215.630244][ T9709] veth1_vlan: entered promiscuous mode [ 215.660026][ T9709] veth0_macvtap: entered promiscuous mode [ 215.669331][ T9709] veth1_macvtap: entered promiscuous mode [ 215.680648][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.695356][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.187488][ T9968] syzkaller0: entered promiscuous mode [ 216.197097][ T9968] syzkaller0: entered allmulticast mode [ 216.220421][ T9968] PF_CAN: dropped non conform CAN FD skbuff: dev type 803, len 65487 [ 216.465427][ T9981] FAULT_INJECTION: forcing a failure. [ 216.465427][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.499787][ T9986] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 216.502665][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.6.1964 Not tainted syzkaller #0 PREEMPT(full) [ 216.502694][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.502713][ T9981] Call Trace: [ 216.502718][ T9981] [ 216.502725][ T9981] __dump_stack+0x1d/0x30 [ 216.502814][ T9981] dump_stack_lvl+0x95/0xd0 [ 216.502835][ T9981] dump_stack+0x15/0x1b [ 216.502855][ T9981] should_fail_ex+0x263/0x280 [ 216.502885][ T9981] should_fail+0xb/0x20 [ 216.502930][ T9981] should_fail_usercopy+0x1a/0x20 [ 216.502950][ T9981] _copy_from_user+0x1c/0xb0 [ 216.502971][ T9981] do_sock_getsockopt+0xf1/0x210 [ 216.503039][ T9981] __x64_sys_getsockopt+0x11d/0x1a0 [ 216.503064][ T9981] x64_sys_call+0x2dcf/0x3020 [ 216.503087][ T9981] do_syscall_64+0x12c/0x370 [ 216.503125][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.503145][ T9981] RIP: 0033:0x7f854c1fc629 [ 216.503161][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.503178][ T9981] RSP: 002b:00007f854ac4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 216.503213][ T9981] RAX: ffffffffffffffda RBX: 00007f854c475fa0 RCX: 00007f854c1fc629 [ 216.503227][ T9981] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 216.503239][ T9981] RBP: 00007f854ac4f090 R08: 0000200000000040 R09: 0000000000000000 [ 216.503252][ T9981] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.503264][ T9981] R13: 00007f854c476038 R14: 00007f854c475fa0 R15: 00007ffdf6ec1e08 [ 216.503283][ T9981] [ 216.599740][ T9989] syzkaller0: entered promiscuous mode [ 216.618014][ T9991] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1967'. [ 216.628751][ T9989] syzkaller0: entered allmulticast mode [ 216.647280][ T9991] netlink: 'syz.3.1967': attribute type 5 has an invalid length. [ 216.719331][ T9992] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=9992 comm=syz.4.1966 [ 216.745259][ T9986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.757908][ T28] audit: type=1326 audit(1771397836.727:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147a17c629 code=0x7ffc0000 [ 216.758437][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 216.797463][ T28] audit: type=1326 audit(1771397836.757:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f147a17c629 code=0x7ffc0000 [ 216.821167][ T28] audit: type=1400 audit(1771397836.757:1563): avc: denied { wake_alarm } for pid=9998 comm="syz.3.1970" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.842341][ T28] audit: type=1326 audit(1771397836.757:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147a17c629 code=0x7ffc0000 [ 216.867644][ T28] audit: type=1326 audit(1771397836.757:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f147a17c629 code=0x7ffc0000 [ 216.891241][ T28] audit: type=1326 audit(1771397836.757:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147a17c629 code=0x7ffc0000 [ 216.914814][ T28] audit: type=1326 audit(1771397836.767:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f147a17c629 code=0x7ffc0000 [ 216.944426][ T9986] bond1: (slave geneve2): making interface the new active one [ 216.953556][ T9986] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 216.979727][ T28] audit: type=1326 audit(1771397836.767:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.3.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147a17c629 code=0x7ffc0000 [ 217.200665][T10007] loop6: detected capacity change from 0 to 512 [ 217.445106][T10007] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 217.536137][T10026] FAULT_INJECTION: forcing a failure. [ 217.536137][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 217.548824][T10026] CPU: 0 UID: 0 PID: 10026 Comm: syz.0.1978 Not tainted syzkaller #0 PREEMPT(full) [ 217.548848][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.548857][T10026] Call Trace: [ 217.548865][T10026] [ 217.548873][T10026] __dump_stack+0x1d/0x30 [ 217.548902][T10026] dump_stack_lvl+0x95/0xd0 [ 217.548919][T10026] dump_stack+0x15/0x1b [ 217.548937][T10026] should_fail_ex+0x263/0x280 [ 217.548966][T10026] should_failslab+0x8c/0xb0 [ 217.548992][T10026] kmem_cache_alloc_noprof+0x66/0x400 [ 217.549017][T10026] ? security_inode_alloc+0x37/0x100 [ 217.549036][T10026] security_inode_alloc+0x37/0x100 [ 217.549054][T10026] inode_init_always_gfp+0x4b7/0x500 [ 217.549074][T10026] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 217.549097][T10026] alloc_inode+0x58/0x170 [ 217.549114][T10026] new_inode+0x1d/0xe0 [ 217.549130][T10026] shmem_get_inode+0x246/0x750 [ 217.549153][T10026] __shmem_file_setup+0x112/0x210 [ 217.549173][T10026] shmem_zero_setup+0x66/0xe0 [ 217.549193][T10026] mmap_region+0x15a0/0x1d10 [ 217.549244][T10026] do_mmap+0x9b2/0xbd0 [ 217.549266][T10026] vm_mmap_pgoff+0x183/0x2d0 [ 217.549292][T10026] ksys_mmap_pgoff+0xc1/0x310 [ 217.549310][T10026] ? __x64_sys_mmap+0x49/0x70 [ 217.549334][T10026] x64_sys_call+0x14df/0x3020 [ 217.549355][T10026] do_syscall_64+0x12c/0x370 [ 217.549384][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.549401][T10026] RIP: 0033:0x7fc2c921c629 [ 217.549414][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.549428][T10026] RSP: 002b:00007fc2c7c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.549447][T10026] RAX: ffffffffffffffda RBX: 00007fc2c9495fa0 RCX: 00007fc2c921c629 [ 217.549460][T10026] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 217.549473][T10026] RBP: 00007fc2c7c77090 R08: ffffffffffffffff R09: 00000000ec776000 [ 217.549487][T10026] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 217.549499][T10026] R13: 00007fc2c9496038 R14: 00007fc2c9495fa0 R15: 00007fff30a8ab68 [ 217.549517][T10026] [ 217.671099][T10007] System zones: [ 217.736828][T10015] syzkaller0: entered promiscuous mode [ 217.770539][T10007] 0-2, 18-18, 34-34 [ 217.803317][T10007] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1973: bg 0: block 248: padding at end of block bitmap is not set [ 217.818124][T10015] syzkaller0: entered allmulticast mode [ 217.827512][T10015] FAULT_INJECTION: forcing a failure. [ 217.827512][T10015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.838231][T10007] loop6: lost filesystem error report for type 5 error -117 [ 217.841028][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 217.854089][T10015] CPU: 1 UID: 0 PID: 10015 Comm: syz.4.1976 Not tainted syzkaller #0 PREEMPT(full) [ 217.854118][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.854129][T10015] Call Trace: [ 217.854136][T10015] [ 217.854143][T10015] __dump_stack+0x1d/0x30 [ 217.854169][T10015] dump_stack_lvl+0x95/0xd0 [ 217.854264][T10015] dump_stack+0x15/0x1b [ 217.854346][T10015] should_fail_ex+0x263/0x280 [ 217.854376][T10015] should_fail+0xb/0x20 [ 217.854392][T10015] should_fail_usercopy+0x1a/0x20 [ 217.854447][T10015] _copy_from_iter+0xcf/0xea0 [ 217.854467][T10015] ? __rcu_read_unlock+0x4e/0x70 [ 217.854487][T10015] ? terminate_walk+0x1e6/0x210 [ 217.854508][T10015] ? path_openat+0x1ab2/0x2050 [ 217.854566][T10015] tun_get_user+0x390/0x27c0 [ 217.854599][T10015] ? ref_tracker_alloc+0x1f2/0x2f0 [ 217.854712][T10015] tun_chr_write_iter+0x15e/0x210 [ 217.854739][T10015] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 217.854765][T10015] vfs_write+0x5a6/0x9f0 [ 217.854830][T10015] ksys_write+0xdc/0x1a0 [ 217.854854][T10015] __x64_sys_write+0x40/0x50 [ 217.854880][T10015] x64_sys_call+0x27e1/0x3020 [ 217.854979][T10015] do_syscall_64+0x12c/0x370 [ 217.855008][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.855029][T10015] RIP: 0033:0x7f9a200dc629 [ 217.855120][T10015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.855137][T10015] RSP: 002b:00007f9a1eb2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.855182][T10015] RAX: ffffffffffffffda RBX: 00007f9a20355fa0 RCX: 00007f9a200dc629 [ 217.855196][T10015] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000005 [ 217.855209][T10015] RBP: 00007f9a1eb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.855222][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.855234][T10015] R13: 00007f9a20356038 R14: 00007f9a20355fa0 R15: 00007ffdf24de338 [ 217.855253][T10015] [ 218.050039][ C0] EXT4-fs (loop6): last error at time 1771397837: ext4_validate_block_bitmap:441 [ 218.073004][T10007] Quota error (device loop6): write_blk: dquota write failed [ 218.092222][T10007] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 218.117255][T10007] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.1973: Failed to acquire dquot type 1 [ 218.128713][T10007] loop6: lost filesystem error report for type 5 error -117 [ 218.141135][T10007] EXT4-fs (loop6): 1 truncate cleaned up [ 218.147369][T10007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.157506][T10040] FAULT_INJECTION: forcing a failure. [ 218.157506][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 218.176539][T10007] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.192277][T10007] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1973'. [ 218.211816][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.0.1983 Not tainted syzkaller #0 PREEMPT(full) [ 218.211844][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.211855][T10040] Call Trace: [ 218.211862][T10040] [ 218.211870][T10040] __dump_stack+0x1d/0x30 [ 218.211941][T10040] dump_stack_lvl+0x95/0xd0 [ 218.211967][T10040] dump_stack+0x15/0x1b [ 218.211984][T10040] should_fail_ex+0x263/0x280 [ 218.212147][T10040] ? __inet_diag_dump_start+0x53/0x850 [ 218.212175][T10040] should_failslab+0x8c/0xb0 [ 218.212226][T10040] __kmalloc_cache_noprof+0x5f/0x410 [ 218.212249][T10040] __inet_diag_dump_start+0x53/0x850 [ 218.212277][T10040] ? mutex_lock+0x57/0x90 [ 218.212327][T10040] ? mutex_lock+0x60/0x90 [ 218.212348][T10040] inet_diag_dump_start_compat+0x1a/0x30 [ 218.212410][T10040] __netlink_dump_start+0x334/0x520 [ 218.212432][T10040] inet_diag_rcv_msg_compat+0x10b/0x200 [ 218.212460][T10040] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 218.212518][T10040] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 218.212642][T10040] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 218.212678][T10040] sock_diag_rcv_msg+0x189/0x2c0 [ 218.212711][T10040] netlink_rcv_skb+0x123/0x220 [ 218.212791][T10040] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 218.212818][T10040] sock_diag_rcv+0x1c/0x30 [ 218.212838][T10040] netlink_unicast+0x5c0/0x690 [ 218.212863][T10040] netlink_sendmsg+0x5c8/0x6f0 [ 218.212887][T10040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.212906][T10040] ____sys_sendmsg+0x5af/0x600 [ 218.212929][T10040] ___sys_sendmsg+0x195/0x1e0 [ 218.212979][T10040] __x64_sys_sendmsg+0xd4/0x160 [ 218.213048][T10040] x64_sys_call+0x194c/0x3020 [ 218.213070][T10040] do_syscall_64+0x12c/0x370 [ 218.213097][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.213177][T10040] RIP: 0033:0x7fc2c921c629 [ 218.213194][T10040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.213210][T10040] RSP: 002b:00007fc2c7c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.213227][T10040] RAX: ffffffffffffffda RBX: 00007fc2c9495fa0 RCX: 00007fc2c921c629 [ 218.213240][T10040] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000005 [ 218.213326][T10040] RBP: 00007fc2c7c77090 R08: 0000000000000000 R09: 0000000000000000 [ 218.213338][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.213350][T10040] R13: 00007fc2c9496038 R14: 00007fc2c9495fa0 R15: 00007fff30a8ab68 [ 218.213367][T10040] [ 218.486532][T10046] loop3: detected capacity change from 0 to 1024 [ 218.511919][T10046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 218.531297][T10046] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.618955][T10046] EXT4-fs error (device loop3): ext4_free_blocks:6726: comm syz.3.1986: Freeing blocks not in datazone - block = 0, count = 16 [ 218.679145][ T28] audit: type=1400 audit(1771397838.647:1569): avc: denied { getopt } for pid=10045 comm="syz.3.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.737269][ T9572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 218.755821][T10060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1991'. [ 218.865862][T10065] loop3: detected capacity change from 0 to 128 [ 218.895055][T10065] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 218.903025][T10065] FAT-fs (loop3): Filesystem has been set read-only [ 219.020058][ T5389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.052903][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 219.065400][ T41] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 219.080718][ T41] EXT4-fs error (device loop6): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 1 [ 219.094820][T10070] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1996'. [ 219.103870][ T41] loop6: lost filesystem error report for type 5 error -117 [ 219.131280][T10073] FAULT_INJECTION: forcing a failure. [ 219.131280][T10073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.162649][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1995'. [ 219.163036][T10073] CPU: 1 UID: 0 PID: 10073 Comm: syz.0.1997 Not tainted syzkaller #0 PREEMPT(full) [ 219.163087][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.163099][T10073] Call Trace: [ 219.163105][T10073] [ 219.163112][T10073] __dump_stack+0x1d/0x30 [ 219.163137][T10073] dump_stack_lvl+0x95/0xd0 [ 219.163199][T10073] dump_stack+0x15/0x1b [ 219.163218][T10073] should_fail_ex+0x263/0x280 [ 219.163248][T10073] should_fail+0xb/0x20 [ 219.163264][T10073] should_fail_usercopy+0x1a/0x20 [ 219.163290][T10073] _copy_to_user+0x20/0xa0 [ 219.163316][T10073] simple_read_from_buffer+0xb5/0x130 [ 219.163346][T10073] proc_fail_nth_read+0x10e/0x150 [ 219.163374][T10073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.163397][T10073] vfs_read+0x1ab/0x7f0 [ 219.163536][T10073] ? __rcu_read_unlock+0x4e/0x70 [ 219.163555][T10073] ? __fget_files+0x184/0x1c0 [ 219.163620][T10073] ? mutex_lock+0x57/0x90 [ 219.163644][T10073] ksys_read+0xdc/0x1a0 [ 219.163669][T10073] __x64_sys_read+0x40/0x50 [ 219.163777][T10073] x64_sys_call+0x2886/0x3020 [ 219.163801][T10073] do_syscall_64+0x12c/0x370 [ 219.163829][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.163848][T10073] RIP: 0033:0x7fc2c91dcece [ 219.163922][T10073] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.163938][T10073] RSP: 002b:00007fc2c7c76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.163982][T10073] RAX: ffffffffffffffda RBX: 00007fc2c7c776c0 RCX: 00007fc2c91dcece [ 219.163996][T10073] RDX: 000000000000000f RSI: 00007fc2c7c770a0 RDI: 0000000000000006 [ 219.164008][T10073] RBP: 00007fc2c7c77090 R08: 0000000000000000 R09: 0000000000000000 [ 219.164021][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.164032][T10073] R13: 00007fc2c9496038 R14: 00007fc2c9495fa0 R15: 00007fff30a8ab68 [ 219.164105][T10073] [ 219.396639][T10082] FAULT_INJECTION: forcing a failure. [ 219.396639][T10082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.410092][T10082] CPU: 1 UID: 0 PID: 10082 Comm: syz.6.1999 Not tainted syzkaller #0 PREEMPT(full) [ 219.410197][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 219.410210][T10082] Call Trace: [ 219.410217][T10082] [ 219.410224][T10082] __dump_stack+0x1d/0x30 [ 219.410249][T10082] dump_stack_lvl+0x95/0xd0 [ 219.410270][T10082] dump_stack+0x15/0x1b [ 219.410302][T10082] should_fail_ex+0x263/0x280 [ 219.410402][T10082] should_fail+0xb/0x20 [ 219.410418][T10082] should_fail_usercopy+0x1a/0x20 [ 219.410438][T10082] _copy_from_iter+0xcf/0xea0 [ 219.410531][T10082] ? __alloc_skb+0x4f6/0x690 [ 219.410551][T10082] ? __alloc_skb+0x200/0x690 [ 219.410576][T10082] netlink_sendmsg+0x4ae/0x6f0 [ 219.410605][T10082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.410629][T10082] ____sys_sendmsg+0x5af/0x600 [ 219.410676][T10082] ___sys_sendmsg+0x195/0x1e0 [ 219.410717][T10082] __x64_sys_sendmsg+0xd4/0x160 [ 219.410747][T10082] x64_sys_call+0x194c/0x3020 [ 219.410836][T10082] do_syscall_64+0x12c/0x370 [ 219.410865][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.410966][T10082] RIP: 0033:0x7f854c1fc629 [ 219.410984][T10082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.411000][T10082] RSP: 002b:00007f854ac4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.411023][T10082] RAX: ffffffffffffffda RBX: 00007f854c475fa0 RCX: 00007f854c1fc629 [ 219.411034][T10082] RDX: 0000000004040000 RSI: 0000200000000880 RDI: 0000000000000003 [ 219.411045][T10082] RBP: 00007f854ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.411135][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.411174][T10082] R13: 00007f854c476038 R14: 00007f854c475fa0 R15: 00007ffdf6ec1e08 [ 219.411192][T10082] [ 219.664977][T10084] loop0: detected capacity change from 0 to 4096 [ 219.678483][T10088] loop6: detected capacity change from 0 to 512 [ 219.706021][T10093] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2004'. [ 219.710171][T10084] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 219.725142][T10088] EXT4-fs (loop6): orphan cleanup on readonly fs [ 219.738938][T10088] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2003: corrupted inode contents [ 219.755676][T10088] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 219.771070][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 219.786722][ C1] EXT4-fs (loop6): initial error at time 1771397839: ext4_do_update_inode:5569: inode 16 [ 219.796565][ C1] EXT4-fs (loop6): last error at time 1771397839: ext4_do_update_inode:5569: inode 16 [ 219.808532][T10088] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.2003: mark_inode_dirty error [ 219.865781][T10104] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 219.876441][T10104] bond0: (slave gre0): Error -95 calling set_mac_address [ 219.887347][T10104] ip6gretap1: entered promiscuous mode [ 219.896703][T10088] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 219.898893][T10104] ip6gretap1: entered allmulticast mode [ 219.922214][T10088] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2003: corrupted inode contents [ 219.946178][T10088] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 219.962516][T10088] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.2003: mark_inode_dirty error [ 219.989366][T10088] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 220.011553][T10088] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2003: corrupted inode contents [ 220.032612][T10088] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 220.032836][T10088] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 220.051832][T10088] loop6: lost filesystem error report for type 5 error -117 [ 220.052024][T10088] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.2003: corrupted inode contents [ 220.074357][T10088] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 220.074597][T10088] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.2003: mark_inode_dirty error [ 220.108257][T10088] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 220.108484][T10088] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 220.126755][T10088] loop6: lost filesystem error report for type 5 error -117 [ 220.127307][T10088] EXT4-fs (loop6): 1 truncate cleaned up [ 220.194783][T10117] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2013'. [ 220.476864][T10132] loop3: detected capacity change from 0 to 512 [ 220.513505][T10132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.526678][T10132] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.559423][ T28] audit: type=1400 audit(1771397840.517:1570): avc: denied { recv } for pid=2961 comm="jbd2/sda1-8" saddr=10.128.0.163 src=30036 daddr=10.128.0.190 dest=52628 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 220.605608][ T28] audit: type=1400 audit(1771397840.577:1571): avc: denied { create } for pid=10136 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.648663][ T28] audit: type=1400 audit(1771397840.597:1572): avc: denied { setopt } for pid=10136 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.044811][ T70] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 221.055227][ T70] EXT4-fs error (device loop6): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 1 [ 221.090806][ T70] loop6: lost filesystem error report for type 5 error -117 [ 221.092121][ T9572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.109238][T10088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.682052][ T5389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.736501][T10177] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 223.741051][ T28] audit: type=1400 audit(1771397843.707:1573): avc: denied { create } for pid=10175 comm="syz.6.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.759801][T10177] audit: out of memory in audit_log_start [ 223.780872][T10179] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 223.792296][T10179] bond0: (slave gre0): Error -95 calling set_mac_address [ 223.839022][T10183] loop4: detected capacity change from 0 to 128 [ 223.863482][T10183] syz.4.2028: attempt to access beyond end of device [ 223.863482][T10183] loop4: rw=2049, sector=145, nr_sectors = 57 limit=128 [ 223.891255][T10183] syz.4.2028: attempt to access beyond end of device [ 223.891255][T10183] loop4: rw=2049, sector=209, nr_sectors = 1 limit=128 [ 223.923244][T10183] syz.4.2028: attempt to access beyond end of device [ 223.923244][T10183] loop4: rw=8390657, sector=209, nr_sectors = 1 limit=128 [ 223.951469][T10185] loop6: detected capacity change from 0 to 4096 [ 223.955399][T10183] Buffer I/O error on dev loop4, logical block 209, lost async page write [ 223.958262][T10185] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.972868][T10185] EXT4-fs: test_dummy_encryption option not supported [ 223.992752][T10183] syz.4.2028: attempt to access beyond end of device [ 223.992752][T10183] loop4: rw=8390657, sector=209, nr_sectors = 1 limit=128 [ 224.034618][T10183] Buffer I/O error on dev loop4, logical block 209, lost async page write [ 224.305649][ T4900] kworker/u8:8: attempt to access beyond end of device [ 224.305649][ T4900] loop4: rw=8388609, sector=209, nr_sectors = 1 limit=128 [ 224.493157][ T4900] Buffer I/O error on dev loop4, logical block 209, lost async page write [ 224.765003][ T28] audit: type=1400 audit(1771397844.737:1574): avc: denied { write } for pid=10193 comm="syz.6.2032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 224.944045][ T28] audit: type=1400 audit(1771397844.907:1575): avc: denied { egress } for pid=10189 comm="syz.6.2029" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 225.106753][ T28] audit: type=1400 audit(1771397844.907:1576): avc: denied { sendto } for pid=10189 comm="syz.6.2029" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 225.150358][T10204] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2031'. [ 225.619939][T10226] FAULT_INJECTION: forcing a failure. [ 225.619939][T10226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.664267][T10226] CPU: 0 UID: 0 PID: 10226 Comm: syz.4.2039 Not tainted syzkaller #0 PREEMPT(full) [ 225.664295][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.664306][T10226] Call Trace: [ 225.664312][T10226] [ 225.664354][T10226] __dump_stack+0x1d/0x30 [ 225.664378][T10226] dump_stack_lvl+0x95/0xd0 [ 225.664396][T10226] dump_stack+0x15/0x1b [ 225.664413][T10226] should_fail_ex+0x263/0x280 [ 225.664504][T10226] should_fail+0xb/0x20 [ 225.664520][T10226] should_fail_usercopy+0x1a/0x20 [ 225.664599][T10226] _copy_from_user+0x1c/0xb0 [ 225.664648][T10226] __copy_msghdr+0x244/0x300 [ 225.664671][T10226] ___sys_sendmsg+0x10c/0x1e0 [ 225.664772][T10226] __x64_sys_sendmsg+0xd4/0x160 [ 225.664799][T10226] x64_sys_call+0x194c/0x3020 [ 225.664823][T10226] do_syscall_64+0x12c/0x370 [ 225.664858][T10226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.664885][T10226] RIP: 0033:0x7f9a200dc629 [ 225.664940][T10226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.665007][T10226] RSP: 002b:00007f9a1eb2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.665026][T10226] RAX: ffffffffffffffda RBX: 00007f9a20355fa0 RCX: 00007f9a200dc629 [ 225.665040][T10226] RDX: 0000000004000800 RSI: 0000200000000180 RDI: 0000000000000004 [ 225.665052][T10226] RBP: 00007f9a1eb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.665063][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.665074][T10226] R13: 00007f9a20356038 R14: 00007f9a20355fa0 R15: 00007ffdf24de338 [ 225.665092][T10226] [ 225.989578][T10237] FAULT_INJECTION: forcing a failure. [ 225.989578][T10237] name failslab, interval 1, probability 0, space 0, times 0 [ 226.132221][T10237] CPU: 1 UID: 0 PID: 10237 Comm: syz.3.2043 Not tainted syzkaller #0 PREEMPT(full) [ 226.132273][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.132315][T10237] Call Trace: [ 226.132323][T10237] [ 226.132331][T10237] __dump_stack+0x1d/0x30 [ 226.132357][T10237] dump_stack_lvl+0x95/0xd0 [ 226.132378][T10237] dump_stack+0x15/0x1b [ 226.132448][T10237] should_fail_ex+0x263/0x280 [ 226.132478][T10237] should_failslab+0x8c/0xb0 [ 226.132579][T10237] kmem_cache_alloc_noprof+0x66/0x400 [ 226.132625][T10237] ? skb_clone+0x151/0x1f0 [ 226.132669][T10237] skb_clone+0x151/0x1f0 [ 226.132695][T10237] __netlink_deliver_tap+0x2c9/0x500 [ 226.132767][T10237] netlink_unicast+0x66b/0x690 [ 226.132785][T10237] netlink_sendmsg+0x5c8/0x6f0 [ 226.132806][T10237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.132825][T10237] ____sys_sendmsg+0x5af/0x600 [ 226.132924][T10237] ___sys_sendmsg+0x195/0x1e0 [ 226.132964][T10237] __x64_sys_sendmsg+0xd4/0x160 [ 226.133031][T10237] x64_sys_call+0x194c/0x3020 [ 226.133055][T10237] do_syscall_64+0x12c/0x370 [ 226.133083][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.133101][T10237] RIP: 0033:0x7f147a17c629 [ 226.133165][T10237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.133183][T10237] RSP: 002b:00007f1478bcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.133204][T10237] RAX: ffffffffffffffda RBX: 00007f147a3f5fa0 RCX: 00007f147a17c629 [ 226.133218][T10237] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 226.133266][T10237] RBP: 00007f1478bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 226.133306][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.133367][T10237] R13: 00007f147a3f6038 R14: 00007f147a3f5fa0 R15: 00007ffc33ed1018 [ 226.133387][T10237] [ 226.585461][ T28] audit: type=1400 audit(1771397846.547:1577): avc: denied { ioctl } for pid=10252 comm="syz.4.2045" path="socket:[147943]" dev="sockfs" ino=147943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.637037][ T28] audit: type=1400 audit(1771397846.607:1578): avc: denied { bind } for pid=10252 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.673575][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2045'. [ 226.761268][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2045'. [ 227.126676][T10262] loop4: detected capacity change from 0 to 512 [ 227.171873][T10262] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2046: invalid indirect mapped block 4294967295 (level 1) [ 227.218667][T10262] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 227.218854][T10262] EXT4-fs (loop4): Remounting filesystem read-only [ 227.228024][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 227.228047][ C1] EXT4-fs (loop4): initial error at time 1771397847: ext4_free_branches:1023: inode 11 [ 227.228076][ C1] EXT4-fs (loop4): last error at time 1771397847: ext4_free_branches:1023: inode 11 [ 227.281187][T10262] EXT4-fs (loop4): 2 truncates cleaned up [ 227.287536][T10262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.544202][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 227.613230][ T28] audit: type=1400 audit(1771397847.587:1579): avc: denied { sys_module } for pid=10261 comm="syz.4.2046" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 228.225512][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.254196][ T28] audit: type=1400 audit(1771397849.227:1580): avc: denied { ioctl } for pid=10349 comm="syz.6.2052" path="ipc:[4026532390]" dev="nsfs" ino=4026532390 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.283792][T10353] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 229.291528][T10353] team0: Port device batadv1 added [ 234.496602][T10378] 9p: Bad value for 'rfdno' [ 234.519088][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2060'. [ 234.574424][T10378] vlan3: entered allmulticast mode [ 234.579621][T10378] macsec0: entered allmulticast mode [ 234.624114][T10378] veth1_macvtap: entered allmulticast mode [ 235.106234][T10392] loop4: detected capacity change from 0 to 1024 [ 235.401658][T10392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.441172][T10392] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.525131][T10392] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.2065: lblock 3 mapped to illegal pblock 3 (length 3) [ 235.572849][T10392] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 235.611408][T10392] EXT4-fs (loop4): This should not happen!! Data will be lost [ 235.611408][T10392] [ 235.641068][ T28] audit: type=1400 audit(1771397855.597:1581): avc: denied { append } for pid=10391 comm="syz.4.2065" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.801118][T10392] netlink: 'syz.4.2065': attribute type 1 has an invalid length. [ 235.813776][T10392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10392 comm=syz.4.2065 [ 235.827422][T10392] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2065: bg 0: block 112: padding at end of block bitmap is not set [ 235.851228][T10392] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 44 with error 117 [ 235.891386][T10392] EXT4-fs (loop4): This should not happen!! Data will be lost [ 235.891386][T10392] [ 235.971937][T10112] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 235.986905][T10112] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 236.031086][T10112] EXT4-fs (loop4): This should not happen!! Data will be lost [ 236.031086][T10112] [ 236.061805][ T30] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 236.081038][ T30] EXT4-fs (loop4): This should not happen!! Data will be lost [ 236.081038][ T30] [ 236.131325][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.191712][T10398] FAULT_INJECTION: forcing a failure. [ 236.191712][T10398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.221149][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.4.2066 Not tainted syzkaller #0 PREEMPT(full) [ 236.221177][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.221198][T10398] Call Trace: [ 236.221204][T10398] [ 236.221212][T10398] __dump_stack+0x1d/0x30 [ 236.221237][T10398] dump_stack_lvl+0x95/0xd0 [ 236.221257][T10398] dump_stack+0x15/0x1b [ 236.221294][T10398] should_fail_ex+0x263/0x280 [ 236.221331][T10398] should_fail+0xb/0x20 [ 236.221349][T10398] should_fail_usercopy+0x1a/0x20 [ 236.221366][T10398] _copy_to_user+0x20/0xa0 [ 236.221399][T10398] simple_read_from_buffer+0xb5/0x130 [ 236.221447][T10398] proc_fail_nth_read+0x10e/0x150 [ 236.221470][T10398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.221490][T10398] vfs_read+0x1ab/0x7f0 [ 236.221572][T10398] ? __rcu_read_unlock+0x4e/0x70 [ 236.221592][T10398] ? __fget_files+0x184/0x1c0 [ 236.221655][T10398] ? mutex_lock+0x57/0x90 [ 236.221680][T10398] ksys_read+0xdc/0x1a0 [ 236.221772][T10398] __x64_sys_read+0x40/0x50 [ 236.221822][T10398] x64_sys_call+0x2886/0x3020 [ 236.221847][T10398] do_syscall_64+0x12c/0x370 [ 236.221920][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.221938][T10398] RIP: 0033:0x7f9a2009cece [ 236.221959][T10398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.221977][T10398] RSP: 002b:00007f9a1eb2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.221996][T10398] RAX: ffffffffffffffda RBX: 00007f9a1eb2f6c0 RCX: 00007f9a2009cece [ 236.222074][T10398] RDX: 000000000000000f RSI: 00007f9a1eb2f0a0 RDI: 0000000000000004 [ 236.222105][T10398] RBP: 00007f9a1eb2f090 R08: 0000000000000000 R09: 0000000000000000 [ 236.222117][T10398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.222127][T10398] R13: 00007f9a20356038 R14: 00007f9a20355fa0 R15: 00007ffdf24de338 [ 236.222144][T10398] [ 240.168560][T10418] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2074'. [ 240.183676][ T30] bridge_slave_1: left allmulticast mode [ 240.189426][ T30] bridge_slave_1: left promiscuous mode [ 240.205460][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.230892][ T30] bridge_slave_0: left allmulticast mode [ 240.236627][ T30] bridge_slave_0: left promiscuous mode [ 240.251173][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.513897][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.524107][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.534190][ T30] bond0 (unregistering): Released all slaves [ 240.792506][ T30] hsr_slave_0: left promiscuous mode [ 240.802808][ T30] hsr_slave_1: left promiscuous mode [ 240.808576][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.834703][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.900276][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.946243][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.996408][ T30] veth1_macvtap: left promiscuous mode [ 241.035031][ T30] veth0_macvtap: left promiscuous mode [ 241.068135][ T30] veth1_vlan: left promiscuous mode [ 241.100752][ T30] veth0_vlan: left promiscuous mode [ 241.411923][ T30] team0 (unregistering): Port device team_slave_1 removed [ 241.444469][ T30] team0 (unregistering): Port device team_slave_0 removed [ 241.690646][T10415] chnl_net:caif_netlink_parms(): no params data found [ 241.830850][T10477] syzkaller0: entered promiscuous mode [ 241.841844][T10477] syzkaller0: entered allmulticast mode [ 241.853386][T10419] chnl_net:caif_netlink_parms(): no params data found [ 242.095420][T10415] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.121183][T10415] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.141259][T10415] bridge_slave_0: entered allmulticast mode [ 242.147695][T10415] bridge_slave_0: entered promiscuous mode [ 242.188876][T10415] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.206311][T10415] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.226564][T10415] bridge_slave_1: entered allmulticast mode [ 242.247674][T10415] bridge_slave_1: entered promiscuous mode [ 242.297589][T10415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.308193][T10415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.318541][ T30] bridge_slave_1: left allmulticast mode [ 242.332041][ T30] bridge_slave_1: left promiscuous mode [ 242.337679][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.840121][ T30] bridge_slave_0: left allmulticast mode [ 242.855750][ T30] bridge_slave_0: left promiscuous mode [ 242.871923][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.024582][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.042578][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.062521][ T30] bond0 (unregistering): Released all slaves [ 243.091749][T10419] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.101102][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.118483][T10419] bridge_slave_0: entered allmulticast mode [ 243.129041][T10419] bridge_slave_0: entered promiscuous mode [ 243.206472][ T30] hsr_slave_0: left promiscuous mode [ 243.222730][ T30] hsr_slave_1: left promiscuous mode [ 243.228584][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.246160][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.262031][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.279611][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.293171][ T30] veth1_macvtap: left promiscuous mode [ 243.298753][ T30] veth0_macvtap: left promiscuous mode [ 243.314467][ T30] veth1_vlan: left promiscuous mode [ 243.319751][ T30] veth0_vlan: left promiscuous mode [ 243.641403][ T30] team0 (unregistering): Port device team_slave_1 removed [ 243.682913][ T30] team0 (unregistering): Port device team_slave_0 removed [ 243.980120][T10419] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.987305][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.994539][T10419] bridge_slave_1: entered allmulticast mode [ 244.014621][T10419] bridge_slave_1: entered promiscuous mode [ 244.048253][T10415] team0: Port device team_slave_0 added [ 244.055410][T10415] team0: Port device team_slave_1 added [ 244.078183][T10419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.121428][T10419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.130889][T10415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.151248][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.211064][T10415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.231699][T10415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.238717][T10415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.301136][T10415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.553311][T10419] team0: Port device team_slave_0 added [ 244.571223][T10415] hsr_slave_0: entered promiscuous mode [ 244.577540][T10415] hsr_slave_1: entered promiscuous mode [ 244.583550][T10415] debugfs: 'hsr0' already exists in 'hsr' [ 244.589264][T10415] Cannot create hsr debugfs directory [ 244.614090][ T30] IPVS: stop unused estimator thread 0... [ 244.620953][T10419] team0: Port device team_slave_1 added [ 244.741477][T10419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.748623][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.801095][T10419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.874159][T10419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.891076][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.941043][T10419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.024411][ T30] bridge_slave_1: left allmulticast mode [ 245.030139][ T30] bridge_slave_1: left promiscuous mode [ 245.036170][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.044382][ T30] bridge_slave_0: left allmulticast mode [ 245.050171][ T30] bridge_slave_0: left promiscuous mode [ 245.058414][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.242395][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.277374][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.292149][ T30] bond0 (unregistering): Released all slaves [ 245.346786][T10419] hsr_slave_0: entered promiscuous mode [ 245.361773][T10419] hsr_slave_1: entered promiscuous mode [ 245.371691][T10419] debugfs: 'hsr0' already exists in 'hsr' [ 245.377445][T10419] Cannot create hsr debugfs directory [ 245.427955][ T30] hsr_slave_0: left promiscuous mode [ 245.433716][ T30] hsr_slave_1: left promiscuous mode [ 245.439439][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.448892][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.456660][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.464232][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.474733][ T30] veth1_macvtap: left promiscuous mode [ 245.480451][ T30] veth0_macvtap: left promiscuous mode [ 245.486216][ T30] veth1_vlan: left promiscuous mode [ 245.491542][ T30] veth0_vlan: left promiscuous mode [ 245.528356][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2082'. [ 245.582303][ T30] team0 (unregistering): Port device team_slave_1 removed [ 245.593970][ T30] team0 (unregistering): Port device team_slave_0 removed [ 245.702294][T10518] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2083'. [ 245.764188][T10494] chnl_net:caif_netlink_parms(): no params data found [ 245.802477][T10529] ipip0: entered promiscuous mode [ 246.017627][T10415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.044594][T10415] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.510493][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.521972][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.529292][T10494] bridge_slave_0: entered allmulticast mode [ 246.536245][T10494] bridge_slave_0: entered promiscuous mode [ 246.543418][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.550515][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.557916][T10494] bridge_slave_1: entered allmulticast mode [ 246.565443][T10494] bridge_slave_1: entered promiscuous mode [ 246.591620][T10494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.604411][T10494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.615127][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.622346][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.648087][T10494] team0: Port device team_slave_0 added [ 246.655131][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.662205][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.674740][T10494] team0: Port device team_slave_1 added [ 246.704330][T10494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.740625][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.766774][T10494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.782865][T10494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.790406][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.817112][T10494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.922900][T10494] hsr_slave_0: entered promiscuous mode [ 246.930028][T10494] hsr_slave_1: entered promiscuous mode [ 246.995890][T10419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.222288][T10415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.245215][T10419] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.311090][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.318266][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.352711][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.359848][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.375049][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2091'. [ 247.412744][T10419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.547574][T10572] FAULT_INJECTION: forcing a failure. [ 247.547574][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.641221][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.6.2092 Not tainted syzkaller #0 PREEMPT(full) [ 247.641245][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.641335][T10572] Call Trace: [ 247.641340][T10572] [ 247.641348][T10572] __dump_stack+0x1d/0x30 [ 247.641433][T10572] dump_stack_lvl+0x95/0xd0 [ 247.641477][T10572] dump_stack+0x15/0x1b [ 247.641496][T10572] should_fail_ex+0x263/0x280 [ 247.641532][T10572] should_fail+0xb/0x20 [ 247.641588][T10572] should_fail_usercopy+0x1a/0x20 [ 247.641606][T10572] _copy_to_user+0x20/0xa0 [ 247.641632][T10572] simple_read_from_buffer+0xb5/0x130 [ 247.641664][T10572] proc_fail_nth_read+0x10e/0x150 [ 247.641689][T10572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.641731][T10572] vfs_read+0x1ab/0x7f0 [ 247.641757][T10572] ? __rcu_read_unlock+0x4e/0x70 [ 247.641824][T10572] ? __fget_files+0x184/0x1c0 [ 247.641905][T10572] ? mutex_lock+0x57/0x90 [ 247.641987][T10572] ksys_read+0xdc/0x1a0 [ 247.642009][T10572] __x64_sys_read+0x40/0x50 [ 247.642033][T10572] x64_sys_call+0x2886/0x3020 [ 247.642099][T10572] do_syscall_64+0x12c/0x370 [ 247.642123][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.642142][T10572] RIP: 0033:0x7f854c1bcece [ 247.642159][T10572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.642177][T10572] RSP: 002b:00007f854ac4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.642235][T10572] RAX: ffffffffffffffda RBX: 00007f854ac4f6c0 RCX: 00007f854c1bcece [ 247.642247][T10572] RDX: 000000000000000f RSI: 00007f854ac4f0a0 RDI: 0000000000000003 [ 247.642258][T10572] RBP: 00007f854ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.642268][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.642280][T10572] R13: 00007f854c476038 R14: 00007f854c475fa0 R15: 00007ffdf6ec1e08 [ 247.642299][T10572] [ 247.886127][T10577] tipc: Started in network mode [ 247.894908][T10577] tipc: Node identity , cluster identity 4711 [ 247.901141][T10577] tipc: Failed to obtain node identity [ 247.906879][T10577] tipc: Enabling of bearer rejected, failed to enable media [ 247.917716][T10419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.963867][T10415] veth0_vlan: entered promiscuous mode [ 247.972313][T10415] veth1_vlan: entered promiscuous mode [ 247.999792][T10415] veth0_macvtap: entered promiscuous mode [ 248.020132][T10415] veth1_macvtap: entered promiscuous mode [ 248.030236][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.042108][T10415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.044275][T10593] loop6: detected capacity change from 0 to 4096 [ 248.055297][T10415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.087208][T10494] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.110450][T10593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.127687][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.134773][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.161984][ T2325] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.169127][ T2325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.185991][ T28] audit: type=1400 audit(1771397868.157:1582): avc: denied { read } for pid=10591 comm="syz.6.2094" path="socket:[150686]" dev="sockfs" ino=150686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.231654][T10494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.253573][T10494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.297174][T10419] veth0_vlan: entered promiscuous mode [ 248.321233][T10419] veth1_vlan: entered promiscuous mode [ 248.342058][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2071'. [ 248.358729][T10419] veth0_macvtap: entered promiscuous mode [ 248.364772][T10611] netlink: 'syz.5.2071': attribute type 18 has an invalid length. [ 248.383328][T10419] veth1_macvtap: entered promiscuous mode [ 248.389945][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2071'. [ 248.407945][T10494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.429871][ T5389] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.450775][T10419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.483220][T10419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.560617][T10628] loop5: detected capacity change from 0 to 1024 [ 248.623336][T10628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.651300][T10628] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.657997][T10494] veth0_vlan: entered promiscuous mode [ 248.669488][T10494] veth1_vlan: entered promiscuous mode [ 248.708958][T10494] veth0_macvtap: entered promiscuous mode [ 248.740370][T10628] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.2097: lblock 3 mapped to illegal pblock 3 (length 3) [ 248.756532][T10494] veth1_macvtap: entered promiscuous mode [ 248.782012][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2072'. [ 248.801700][T10628] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 248.818434][T10494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.827204][T10628] EXT4-fs (loop5): This should not happen!! Data will be lost [ 248.827204][T10628] [ 248.830541][T10494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.861088][T10628] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2097: bg 0: block 112: padding at end of block bitmap is not set [ 248.883217][T10628] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 44 with error 117 [ 248.920572][T10628] EXT4-fs (loop5): This should not happen!! Data will be lost [ 248.920572][T10628] [ 248.969840][ T30] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 249.001749][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 249.014628][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 249.014628][ T30] [ 249.042083][ T2325] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 249.055938][ T2325] EXT4-fs (loop5): This should not happen!! Data will be lost [ 249.055938][ T2325] [ 249.069293][T10648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2101'. [ 249.089843][T10648] 9p: Bad value for 'wfdno' [ 249.096999][T10415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.105604][T10652] loop7: detected capacity change from 0 to 512 [ 249.113383][T10653] ================================================================== [ 249.121476][T10653] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 249.128756][T10653] [ 249.131070][T10653] write to 0xffff8881050d2600 of 8 bytes by task 10647 on cpu 1: [ 249.138773][T10653] mas_wmb_replace+0x20d/0x1610 [ 249.143612][T10653] mas_wr_store_entry+0x16b6/0x2ed0 [ 249.148803][T10653] mas_store_prealloc+0x72e/0xa70 [ 249.153819][T10653] vma_complete+0x3c7/0x850 [ 249.158315][T10653] __split_vma+0x5db/0x640 [ 249.162726][T10653] vma_modify+0xbc9/0xd00 [ 249.167049][T10653] vma_modify_flags+0x182/0x210 [ 249.171888][T10653] mprotect_fixup+0x312/0x5d0 [ 249.176570][T10653] do_mprotect_pkey+0x67b/0x920 [ 249.181416][T10653] __x64_sys_mprotect+0x48/0x60 [ 249.186259][T10653] x64_sys_call+0x2768/0x3020 [ 249.190926][T10653] do_syscall_64+0x12c/0x370 [ 249.195512][T10653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.201394][T10653] [ 249.203706][T10653] read to 0xffff8881050d2600 of 8 bytes by task 10653 on cpu 0: [ 249.211319][T10653] mas_state_walk+0x119/0x650 [ 249.215994][T10653] mas_walk+0x60/0x150 [ 249.220053][T10653] lock_vma_under_rcu+0xc9/0x210 [ 249.224979][T10653] do_user_addr_fault+0x232/0x1050 [ 249.230097][T10653] exc_page_fault+0x62/0xa0 [ 249.234604][T10653] asm_exc_page_fault+0x26/0x30 [ 249.239442][T10653] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.241749][T10653] value changed: 0xffff8881037a5801 -> 0xffff8881050d2600 [ 249.248837][T10653] [ 249.251146][T10653] Reported by Kernel Concurrency Sanitizer on: [ 249.257279][T10653] CPU: 0 UID: 0 PID: 10653 Comm: syz.1.2101 Not tainted syzkaller #0 PREEMPT(full) [ 249.266634][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.276677][T10653] ================================================================== [ 249.381074][ T28] audit: type=1400 audit(1771397869.307:1583): avc: denied { recv } for pid=2325 comm="kworker/u8:7" saddr=10.128.0.163 src=44654 daddr=10.128.0.190 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 249.451683][T10652] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2103: invalid indirect mapped block 4294967295 (level 1) [ 249.471278][T10652] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 249.481044][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 249.496600][ C0] EXT4-fs (loop7): initial error at time 1771397869: ext4_free_branches:1023: inode 11 [ 249.506270][ C0] EXT4-fs (loop7): last error at time 1771397869: ext4_free_branches:1023: inode 11 [ 249.515840][T10652] EXT4-fs (loop7): Remounting filesystem read-only [ 249.523380][T10652] EXT4-fs (loop7): 2 truncates cleaned up [ 249.529533][T10652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.569956][T10652] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.599044][ T70] bridge_slave_1: left allmulticast mode [ 249.605063][ T70] bridge_slave_1: left promiscuous mode [ 249.615366][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.632250][ T70] bridge_slave_0: left allmulticast mode [ 249.637906][ T70] bridge_slave_0: left promiscuous mode [ 249.643989][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.742922][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.752558][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.763516][ T70] bond0 (unregistering): Released all slaves [ 249.795695][ T70] hsr_slave_0: left promiscuous mode [ 249.801420][ T70] hsr_slave_1: left promiscuous mode [ 249.806940][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.814648][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.822467][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.829856][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.843687][ T70] veth1_macvtap: left promiscuous mode [ 249.849214][ T70] veth0_macvtap: left promiscuous mode [ 249.854903][ T70] veth1_vlan: left promiscuous mode [ 249.860132][ T70] veth0_vlan: left promiscuous mode [ 249.928652][ T70] team0 (unregistering): Port device team_slave_1 removed [ 249.937873][ T70] team0 (unregistering): Port device team_slave_0 removed [ 250.535656][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.593815][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.634177][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.685059][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.754019][ T70] bridge_slave_1: left allmulticast mode [ 250.759679][ T70] bridge_slave_1: left promiscuous mode [ 250.765444][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.773363][ T70] bridge_slave_0: left allmulticast mode [ 250.779063][ T70] bridge_slave_0: left promiscuous mode [ 250.785104][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.793226][ T70] bridge_slave_1: left allmulticast mode [ 250.798903][ T70] bridge_slave_1: left promiscuous mode [ 250.804635][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.812213][ T70] bridge_slave_0: left allmulticast mode [ 250.817830][ T70] bridge_slave_0: left promiscuous mode [ 250.823806][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.832067][ T70] bridge_slave_1: left allmulticast mode [ 250.837691][ T70] bridge_slave_1: left promiscuous mode [ 250.843418][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.851350][ T70] bridge_slave_0: left allmulticast mode [ 250.856991][ T70] bridge_slave_0: left promiscuous mode [ 250.862838][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.870915][ T70] erspan0: left allmulticast mode [ 250.876040][ T70] erspan0: left promiscuous mode [ 250.881139][ T70] GPL: port 1(erspan0) entered disabled state [ 250.888217][ T70] bridge_slave_1: left allmulticast mode [ 250.893937][ T70] bridge_slave_1: left promiscuous mode [ 250.899610][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.907310][ T70] bridge_slave_0: left allmulticast mode [ 250.913040][ T70] bridge_slave_0: left promiscuous mode [ 250.918667][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.034418][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.044169][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.053598][ T70] bond0 (unregistering): Released all slaves [ 251.114064][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.124086][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.133567][ T70] bond0 (unregistering): Released all slaves [ 251.282611][ T70] bond0 (unregistering): (slave veth3): Releasing active interface [ 251.291078][ T70] bond0 (unregistering): (slave batadv0): Releasing active interface [ 251.300054][ T70] bond0 (unregistering): Released all slaves [ 251.321234][ T70] bond1 (unregistering): (slave geneve2): Releasing active interface [ 251.363339][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.373042][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.382363][ T70] bond0 (unregistering): Released all slaves [ 251.389830][ T70] bond1 (unregistering): Released all slaves [ 251.420396][ T70] tipc: Disabling bearer [ 251.425799][ T70] tipc: Left network mode [ 251.438908][ T70] hsr_slave_0: left promiscuous mode [ 251.444805][ T70] hsr_slave_1: left promiscuous mode [ 251.451525][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.458905][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.467294][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.476343][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.488578][ T70] hsr_slave_0: left promiscuous mode [ 251.494781][ T70] hsr_slave_1: left promiscuous mode [ 251.500454][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.508085][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.516023][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.523912][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.533347][ T70] hsr_slave_0: left promiscuous mode [ 251.539085][ T70] hsr_slave_1: left promiscuous mode [ 251.546751][ T70] hsr_slave_0: left promiscuous mode [ 251.552496][ T70] hsr_slave_1: left promiscuous mode [ 251.558013][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.565404][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.579337][ T70] veth1_macvtap: left promiscuous mode [ 251.584851][ T70] veth0_macvtap: left promiscuous mode [ 251.590358][ T70] veth1_vlan: left promiscuous mode [ 251.595762][ T70] veth0_vlan: left promiscuous mode [ 251.601479][ T70] veth1_macvtap: left promiscuous mode [ 251.606955][ T70] veth0_macvtap: left promiscuous mode [ 251.612542][ T70] veth1_vlan: left promiscuous mode [ 251.617807][ T70] veth0_vlan: left promiscuous mode [ 251.623677][ T70] veth1_macvtap: left allmulticast mode [ 251.629269][ T70] veth1_macvtap: left promiscuous mode [ 251.635207][ T70] veth0_macvtap: left promiscuous mode [ 251.640802][ T70] veth1_vlan: left promiscuous mode [ 251.646770][ T70] veth0_vlan: left promiscuous mode [ 251.762689][ T70] team0 (unregistering): Port device team_slave_1 removed [ 251.772139][ T70] team0 (unregistering): Port device team_slave_0 removed [ 251.823329][ T70] team0 (unregistering): Port device team_slave_1 removed [ 251.832880][ T70] team0 (unregistering): Port device team_slave_0 removed [ 251.860210][ T70] team0 (unregistering): Port device batadv1 removed [ 251.893266][ T70] team0 (unregistering): Port device team_slave_1 removed [ 251.902719][ T70] team0 (unregistering): Port device team_slave_0 removed [ 251.929574][ T70] pimreg (unregistering): left allmulticast mode [ 251.959409][ T70] team0 (unregistering): Port device team_slave_1 removed [ 251.968702][ T70] team0 (unregistering): Port device team_slave_0 removed [ 252.871330][ T70] IPVS: stop unused estimator thread 0... [ 252.877380][ T70] IPVS: stop unused estimator thread 0...