last executing test programs: 54.650106327s ago: executing program 4 (id=2637): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1403e, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) (fail_nth: 2) 54.520028981s ago: executing program 4 (id=2642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x11a}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb090", 0x74}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 54.516484311s ago: executing program 4 (id=2643): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 54.481840402s ago: executing program 4 (id=2644): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x189080) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) setresgid(0x0, 0x0, 0x0) sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getpgrp(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94f08dca903d518d}, 0xc0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x567}], 0x1}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 54.017526605s ago: executing program 4 (id=2651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x50) 53.757042452s ago: executing program 4 (id=2655): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/2, 0x3a, 0x2, 0x1}, 0x28) 53.696029864s ago: executing program 32 (id=2655): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/2, 0x3a, 0x2, 0x1}, 0x28) 12.189299156s ago: executing program 5 (id=3003): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010029bd700000000000020000000000000700100000060015000200000014001680100008800c00028008"], 0x38}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x6558, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12.108409008s ago: executing program 5 (id=3008): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (fail_nth: 2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 11.203063654s ago: executing program 5 (id=3027): r0 = socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x1c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={r1, 0xffff, 0x2}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x482, &(0x7f0000001040)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIFJR0EPFU0y2JXTbSBPF1mJTkXoRpKBn8Sj6F3gTQdST4FUvnqRQtJe2niIzO5OPbTa1zSYTk98PNvu+O+/uPM/O1zvvuwlgw+rL/iQR2yLit4joaVQXNuhrPF27cnb0+pWzo0nMzLz2V5K3u3rl7GjZtHzf1qLSn0akHyXFShaaPH3m+Ei9XjtV1AenTrw9OHn6zBPvnhg5VjtWOzl86NDBA0NPPzX8ZFvyzPK6uueDib27X3zj4sujRy6+9dM3WbzbiuXz82iXvizxv2dyzcsebffKKrZ9XjnprDAQbklHRGSbqys//nuiI+Y2Xk+88GGlwQErKrs2bWq9eHoGWMeSqDoCoBrlhT67/y0fq9T1WBMuP9u4AcryvlY8Gks6Iy3adDXd37ZTX0Qcmf7ni+wRKzQOAQAw3yejnx/ujoj3r3/9Utb36JldksY9+fMf+d8dxRxKb0TcGRE7I+KuiNgVEXdH5G3vjYj7lhnPjf2f9NIyP3JJWf/vmWJua2H/r+z9RW9HUdue59+VHB2v1/YX30l/dG3K6kNLrOO753/9tNWy+f2/7JGtv+wLFnFc6mwaoBsbmRrJO6VtcPl8xJ7OxfJPZmcCkojYHRF7bu2jd5SF8ce+2tuq0c3zX0Ib5plmvszSm87yn46m/EvJ/PnJ8RvmJwc3R722f7DcK2708y8XXm21/mXl3waXa43nedu/uUlvMvdl1E5N3vo6Lvz+cct7mtvc/9Pu5PV8nrm7eO29kampU0MR3cnhvL7g9eG595b1sn22//fvW/z431m8J0v+/ojIduIHIuLBiHioiP3hiHgkIvYtkf+Pz7VeVuYfaUXb/3zE2KLnv9n9P9v+c/P1t1HoOP7Dt63W/9+2/8G81F+8kp//bmKxcLLTRXOAy/nuAAAA4P8izX8Dn6QDs+U0HRho/IZ/V9yR1icmpx4/OvHOybHGb+V7oystR7p6ivHQ+ni9NpRMF5/YGB8dLsaKy/HSA8W48WcdW/L6wOhEfazi3GGj29ri+M/82VF1dMAK27Loq8Pdqx4IUIHmefR0YfXcK+FkAOuV/9eGjesmx3+6WnEAq+92r/9vtjkOYPUtdvyfa6qbC4D1yf0/bFyOf9ig0u+rjgCokOs/bEjL+b/+FSxsXhthVFNYqxslL0SUhXRNxKOwQoWqz0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8W8AAAD//4jb5iA=") open_by_handle_at(0xffffffffffffffff, 0x0, 0x103481) r2 = socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) 11.110312156s ago: executing program 5 (id=3029): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x1f0, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000400000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_METRICS={0x8d, 0x8, 0x0, 0x1, "b574f0d6cdc84ec9ef636e1f7a70bde84b723563b7c307d061adb1a5ef38d403eee83bb590d7572df16955178b3c89060f3dd9648da6460d50c0b485d09e0bb9bd5cb0002692be2d18c4dff9187dfc9ee717372f376c3a2b567dcbaa3adc3b6c4cdf534195204519853cc8e13c52500b49e1d02012f050ad4f85bbcdc32711240c0971d67b4263c269"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) readv(r4, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000001480)={&(0x7f00000013c0)=[{0x80000001, 0x257, 0x2a, 0x2}, {0x10bbae7a, 0x8, 0x401, 0xa8f}, {0x5, 0x100000000, 0x5, 0x1}, {0x5, 0x6, 0x6, 0x5}, {0x4, 0x7, 0x476d, 0xac}, {0x5, 0x9b, 0x4, 0x7}], 0x6, 0x20, 0x4, 0x1000}) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 10.228531131s ago: executing program 5 (id=3054): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0x5) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r1 = semget(0x2, 0x4, 0x314) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0xdcc1]) r2 = dup3(0xffffffffffffffff, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) write$eventfd(r3, &(0x7f0000000040)=0x1, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x24018880) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000003380)={&(0x7f0000002380)=""/4096, 0x1000, 0x1, 0x3}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x4) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000100)=0x5, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000200150a010300000000000000000a000009095a710073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x80004}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000ca4ecc8583c4525a3b435d001b04", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001000"/28], 0x50) open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) 9.91805118s ago: executing program 5 (id=3062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xb, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000029c0)) open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000180)={0x3, 0x1, 0xbb, &(0x7f0000000080)=""/187}) 9.872747721s ago: executing program 33 (id=3062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000340)=0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xb, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000029c0)) open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000180)={0x3, 0x1, 0xbb, &(0x7f0000000080)=""/187}) 5.020137528s ago: executing program 0 (id=3096): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80032, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f00000003c0)='pagemap\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r2, 0x1) 3.88463845s ago: executing program 2 (id=3101): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70dbf9db0100140000001800078008000220060000cc040003"], 0x2c}}, 0x8110) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 3.88149654s ago: executing program 1 (id=3102): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r1, 0x4, 0x2800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x5452, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000e40)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r4], 0x8, 0x800) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0xffffffff, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 3.754630834s ago: executing program 0 (id=3103): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0xa}, 0x0, 0x37, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000080000000000000000800120002000200000000000000000030002b000203"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000740)="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", 0x1e8}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/203, 0xcb}, {&(0x7f0000000f00)="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", 0x168}, {&(0x7f0000001cc0)="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", 0x186}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x2000, 0x1000, 0x5, 0x6}, 0x20) 3.734438864s ago: executing program 0 (id=3104): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], 'd'}]}}, 0x0, 0x2a, 0x0, 0x5}, 0x28) (fail_nth: 2) 3.670487616s ago: executing program 0 (id=3105): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.670310916s ago: executing program 0 (id=3106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.597668148s ago: executing program 0 (id=3107): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70dbf9db0100140000001800078008000220060000cc040003"], 0x2c}}, 0x8110) unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 3.333208996s ago: executing program 6 (id=3109): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xd20, 0x1000000000000000, 0x61133e53}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000002380)) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010084b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200000d0000"], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0003800804238004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 2.965034776s ago: executing program 6 (id=3112): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="0454f83368bdf4aadb40b6c01d89f5409e4c033ac5b94427940015f60237ccbe8ea9a3d5421461d24ac2895a5d243742e96432d35aa82e5e4c753c26d09f824e72e758bec6c8c23c63b41029", 0x4c}, {&(0x7f00000003c0)="ea013c49f55f93bb303b3e", 0xb}], 0x2, 0xe7b, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x400, 0x32, 0xffff5cef, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x20009a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xcfc, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000003, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x6, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x8, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x1000009, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x100003, 0x2, 0x204, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x2de9, 0x9, 0x2, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x40, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x4, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0xff, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x7, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0xf, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x9, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x1, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) 2.948893017s ago: executing program 2 (id=3113): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0xa}, 0x0, 0x37, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000080000000000000000800120002000200000000000000000030002b000203"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000740)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb0405e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d328f7d134706eb4d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a4e816e0cb832c42d9f60561d5086ff512190d1129892fd541a0fbc9a41d70cd0d4501fed5545cd04b7800814bcbf492339bbfe784baba895beda0100010000000000d7cb795b3543a8cd8d8efb830dabc88b5b6466cd1d903833fca0e1049480810da129e746e2c9726a846ce85003a6bb9949e5dd140ab97a001c91323d5cb6648d4f61d40d4951ae36a1a404ba3452ae9a969c16a0918b4afe0b7b6afe4d59d8abfed8e7b38ce7c6c4daf306d0136c353c109f0a63c26df5f8866e763dc2fcd93b7c9b7143823cd8272533aa2eb47f873da2e1aeba66332990f5033c712108f71bc055f29317d8dd9b227b524d61381ed55fdb83ee08", 0x1e8}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/203, 0xcb}, {&(0x7f0000000f00)="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", 0x168}, {&(0x7f0000001cc0)="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", 0x186}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x2000, 0x1000, 0x5, 0x6}, 0x20) 2.907191118s ago: executing program 1 (id=3114): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4008840) 2.887349198s ago: executing program 2 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1300}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2c, 0x0, 0x4, 0x0, 0x4, 0x8, 0x29}}}}}]}, 0x34}}, 0x24040810) 2.853702979s ago: executing program 1 (id=3116): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.84049688s ago: executing program 1 (id=3117): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x1409, 0x1, 0x70bd2d, 0x27dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x7, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000040)) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8) tkill(0x0, 0x7) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") socket$kcm(0xa, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x6a48, &(0x7f0000000080)={0x0, 0xcc3c, 0x8000, 0x2, 0x392}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0xee01, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f00000002c0)=0x1) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, 0x0) 2.779337331s ago: executing program 2 (id=3118): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70dbf9db0100140000001800078008000220060000cc040003"], 0x2c}}, 0x8110) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 2.694281654s ago: executing program 6 (id=3119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000005c00)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000004c0)="4566381d8603b8d00a5d92d300282c883ae167aaf8a72e262231e639ffcec168660d68302a175b27ab9381bc163c17ddd5e97e13295daa1941a18c3e25363ae89c98c4b1ec1e2923b34286595798e90f92fbc1b97f3dacde3492189df0694654c8bfad9a93fd62ea4a5f68cae4ee40d697c3bbf76e75d068bdff1e2698e24af754ccc245ee713d7f53031c1fed7f4eabc6740846bd4c243b23de8153f5b1d058850eeecf448833a05202e860e372ada8f2f3fcf6854bd6b93d389565cfc3fd94d2b569405c29bb43edd844cb09b90d12caf06db10c866af4bd61448d6335dd47455ce3ab28ce2440398096803e09764611e2e98acfc032bc", 0xf8}, {&(0x7f0000000680)="cebff47e23c9b29637fde37ed14da27352b686953253d39c661f184272f2903bf136584fa63d5823085e0bb725be2add02ede737e0f2e55e11c6d006173fa3e49bde7f91499659aee577fcf88c5db80bfbc0ec68646980eb53ab6bcc98dc2f47455f20a0df588a76160f4288684afb1fd293c5c08bc9cd04d98f6894deb3796a8f34b57e6b4a1b0d3d98fa491d2185ab9e4f0640769e7c2fe145530d8e0986f23159179f9b62394fc5415aa9a8738da5e83e75c08706d2681893f19f97ee4e9f2a5dcb00af6fc8c0267e9906f5c0e9c199d2", 0xd2}, {&(0x7f0000000780)="0f486ae198908d9e48c82bf189297aa69f1476b7b49776677935175fe7667e9cb64bdca8e35e257bcb245ac3627dbd335ad3c68f47d5da47a710f852b4537dadb1e347b2236f9e85b752605843b622109e2b8497b5ca74fd67801a135d0e1d85bc80cd62769965c5ef91d8e2528a94ab91d38a9bf7cd4cf2fa42eb9b4576bd8f31bfd653d73ea5d6ca", 0x89}, {&(0x7f0000000840)="91b6e4aecaa19d7157633cd6f66e03476e8ba9dbc1bf346fbe3d68aa9a31341fa1542e269931fe2ef1eb8f4071343681cc4b925455c92e379a42148abfaec3d0d589eedc0f622e1cff6e76c1d090e04aca4327319724f3ce03ee38dd3a", 0x5d}, {&(0x7f00000008c0)="5284c98847b46dfb15f5dbeaf6561984189ea297732ac02e9c4e01c4f4df0f5a7b1cc86e55d28e5852d60fe1a164e71971d7d5401aa75b3404d9d29945fa890c10b8be03aaa51b213116fe787eb3843d350f25b02657ca4bda1d8e187f3c76c816b1e84f621b24a3dbdfb28b5dfc1d6a1250c8ed010bdd911e20bf325fab0d7d493b5662e19f2bf5309bda9e45851117ecc9d0a68e", 0x95}], 0x5, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x680e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x98, 0x0, 0x7, {[@generic={0x88, 0x9, "09edb381685829"}, @ssrr={0x89, 0xb, 0xa6, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0xb, [{@rand_addr=0x64010102, 0x1}]}, @lsrr={0x83, 0x17, 0x48, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback]}, @lsrr={0x83, 0xb, 0x3f, [@broadcast, @rand_addr=0x64010102]}, @noop, @lsrr={0x83, 0x23, 0x59, [@broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @broadcast, @empty, @broadcast, @multicast2, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x6, [{@private=0xa010100, 0xfffffffa}, {@broadcast, 0x101}]}, @generic={0x86, 0xa, "924cebfd11cff215"}]}}}], 0x100}}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000000c40)="a0ecb8f9fa6b0e3cc4a2fec1f45f44cb1446e33ef07df9407836f1b40d7a00138a39a9c4547b80e8f4ea45c499e3b298cbec5fb6e1b9039b3d6f", 0x3a}, {&(0x7f0000000c80)="7053e84e99a3ca19a1b3422221", 0xd}, {&(0x7f0000000cc0)="de5f8458420b5c6e37708bc78bbcd25180354c4b59877a430fd3a3efbba443dfa1f681ab", 0x24}, {&(0x7f0000000d40)="fb2dcc32f2841baea3cb82b2c8e0792452ce945847dd7e83ba5a238344a0e5c3be4ff06d077b3576e75dd4678f2c56f9f56038c46244a90bb5f3389141971edd4731f7e9bdfe8ef89e1f248d92f777d8077d80d8c9c4464f7d41124252f1ef641ccca5ca227a82d924452f", 0x6b}, {&(0x7f0000000dc0)="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", 0xf00}, {&(0x7f0000004740)}], 0x6, &(0x7f0000004880)=[@ip_ttl={{0x14, 0x0, 0x2, 0xcae}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x55, 0x0, 0x9, [0x297, 0x200]}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f00000048c0)="9e7657b54d3d3229b9410c39f2630b8fdc79d56f17ce40644770b34da29e776f4771952eaf762439690f8984f4f7ca5b54f4ba303da549d0cc038cf3bd7adc6321511c2de90dc46a6162093e6bb42530", 0x50}, {&(0x7f0000004940)="8eeb06c9ef67af91b08ffa14a8421de1816634debc32617da13307073387fea88571d5ad8cfaae04718addb457b7fcf94255a68ac77f4d84f213459a340a9ec053daf7afd82ba65de5ff47c01fc921111b8957d8a3047aa6444eed4f88ea148317bf8b73b39ed0270c", 0x69}, {&(0x7f0000004a00)}, {&(0x7f0000004a40)="3ba24857be73ef1b7d64569b7c0b6aedf7c7b9ef6ce7d602387245434c50129e695029c68210ef", 0x27}, {&(0x7f0000004b80)="5f387bc7d0114ba2ea74ab22aa8c7bde7b1f5a8f735e07680fa71612e88819693871088a3f3336cb6cb3b7d88702491ba73fe39e03c25a6957c9f57595aa71293eb4fcaa2457a69a2533084dff22e8b91054833550396396189a42e5a7a3293502106fa5f26ff12090a9bd0d20c9bbdc9d0664beaa83b2f72c20df58c05023753f065486ff8407422ed057ab41a8c784f5dca553c114ca271df37b633600bb8fc880dee6046028171d9983ba11ed9ce5f28c705695b5c00b1fad45baf86bd406b15473f1cd8bc11cb5b9e44290c9c61186b8ef0b524b571e8dec2d73c5a9eb085af76de27fc43762ab036e72bfdf243e763626d4500413204f248d6dd5d06d036c750ae6fca033689edeaf677c27d6594eb3137276a93df200cf74f2e3ca559def97a9b2681762810e53f6036270732ded4f3194fef2d106f279f6b032557b2218844a7926ddfd1a69c4aee9541738e4c35b2512927de2c0567036d2e767141b9baad491899f7405df7059b6d5c3208d8c9d8d7b10e067b8da7f15a4e422022d22e052b5d148ec0321f3a2ef48d7e81cec86d91c3eadbc4746aa226df6c37e03e2c59a9aef787fcfa2b6b6b5adfd98a19d4d8699fae6068c8a9f4b784b2c1e8bc99af2969d9a2cb24b91654540f652260dfa21ce3fcdad5881fdeefd2d9be933a00b399f8e09b5fdf752abbde6e2dc3e38cad793a187584df16d4a01bbb117807028820bc85897cda8904095218a65958d507f2b47b64caee12b494748aa1d015e533b6f63e5a579907881759bce42cba49d38b1b76844c3bd790ca2a1a13e23e3ecf3a8ad6f3e8509839a6f663ac9aed858f6232c41f7e9b68ba6a0b50fa5971d3e23f524de20cc350292e05f6246903af63a48ef910784adf583413eee2d59ff9527cdaf46abd36c91579da72d3eaa6c057f55772bb144cc1669389aba0127d1e931fe73e448e27a4ff82290df7d8f5866fbebd4520f9869e49b5e58d7329bb20df37809ec06963647ad6c420609bb912e599d1a4f9259d22bea2696636b912c61802052460fdb29d9a930a6f420de10465ffab35831d3f172b6e2bda171a5be17b0dcf4ca9f75e674275cee5897090ce07e18c18864b67aed4b3800f69117e901424cb708d30267c66dd9100fbca4b94e5e8dbbbb043366bdeb461e87d79cc21180b875efcaf0c72cebcb81c6e0b55909c143adc1908ea997f06f3fd43e3524e23ff2c360aa95c865f323c78c68f34a30b1999e61d0209ca9f575aab4003527e4a9a25f511315d8a3f9e5b1b11c1aa9302925c0814d9e4c62428af32250572eb77ea53374461b087bffbd4fd29fc583f6fcc37b56a59f52b022e089a4fa19392cf7848a4858ee08c29a71217965bf383f89045970a4e1164bec928f44342b9ce3e32ae60753b34c751b33fd7f805818067dbfce0f8d56864b47a0f425f802a4abe14f733227d489a72864df56430ff345b0abc3fa572a1532ec72880de360a3ff771bb3ed3bb048df338b2e521c9e110bcf811a6461540056c49b75fa425caff2edec9771b9fb86127bd228fbc50f669aa52140ce3cbb5d112da67d984751dddc14899c458e381ee92c12faa569cc86a30d86a8100e8cc112ad3ccde58dc74685a0147f44db60991d1e9044ed7fa4d36096610ba415d08fe4459b86f0d5ff079cd9d695fe065621e6d2a9c5bcd128af24daabe72a5efda7af1bb5ccf469bc03a6ec20a19b22daa1e5918143d03535107474e71691cc05e48b04d9604ed265555f0c384b044311736de993c0cdeea1301b395b56974b20c9b5aeb5eeffa651414904f1a416f107a67e6ed77f71b450689f96b5a183ca91b92506803b12f1f61de7beb997ca908d71c39e2e7991c8748ffd9c926b45460ddb3306c9ee99e449ff922b22c82a3f8b2ea9866a9095d853a30feda045c944aa6e3cf439749aa08426177699ecdf44232f846e1cff14a153315cf5d51200fc092669212c088bbc53cdc9f0c48f7b1276522febbe4b89894615a5135cd08377411e85643d181b8942b553180b50d594dcfd7bb0c66167a62f09c8e08798268cb0ed1256117e03f2f60bef169d0b91c027629bd2e34135e8b3edb5408b8272bcbf84965b3c3643065d1aba17d43829a7a5a8dd70b58b7d697c957e85ccba98a39073b5f8dcb611241d58aec16cd09db3549bc973fd888dc429483d0d7f4749b543b8c85ff87c7a8bee7d602421fdfa71d354549627faa1d12935a6eb172a3caba6d95e552e73adbd655873288299bff89383f66703496ef1fd4f7c52fa315581c5d775497a9088987dfe845f61d36d9ecd5297a1d38fb8aa93cad7c2399344095a561cf7f729e2754553a977a8c34db044e959f4507f242ace5e9c4a0a29f1d013cc16ca61b88de639390292abcd897ffd549a578d38dd2bf0dc5b7559da8d91f1ee2b222d5fa8b8840c1e527ccc275eaa991a2451b7e8cf789a1975bfad1a1d81390fd7a0c9cefc2f398ecabfcf5ed255dda3279f29b5e7d9bdb01b22784efa3689ee78f7a6607c70186f551bcbc0efc477465fbd98883ad4413259a8972f9a5a03b77e3ff2f249c8d0345eae1b6a2456294949a2c8b1b09c63f1473ab2caff565e582df776cc06278942df361c6d4d1e14c3f115fb624fed8191ce7e1ae5dfc14931ac5503efbf3346536df610225d2744454cc9ec44d8011c943a00e49efe57f35818dde581aec77a8891590324d27b1df54b7089f2560443ef3be3ed095b8c78ef23e2ea646e29618abe1335687cffbc52815af791e0894927a3d7751134ee3a48d3cc27d862520752f461381eb1c1765c47214101fceae001f4647dc8308414bb472ddc743c9c428ade053bc09070b125ce2229531511d44dea9a43469ff1da41e040bbb3f89c2dd6bb6cf70c2bf7b239b4da5e4d908639f9f6ed415870ddd7cd57ddc18a7e45c357d0643a5756fcf5d69abf74dba6377d10bfe121d729a8ed84857fe5ce0eca567ac680635a6fa833cf0eb874df499ba50f0f99cfbffdc1d40d9fa826207fa79b43fe9e1bce3a7a8abc2f35e2c719087153d3b53fc56615efa43dc8437733566141b537fb567152ab8980127eb7abe46d66a0bb96afcbabd97323bf1e4658ae776b72d5a2e69cde83dff36c51dc61bda6b384f068b62e547406cd11e38f0edf0ea888774514df8685db1c6384d26c2c2aca8c88a6427808de6d537103b7474f9358aab7b12e0d1ade080bc65206439a398d9507f60bd35c867b8786b0108c4f1466f9b723c244f38c32ce181de6a3d4f7a22f96fa89fe1a22d467148317d19da48b75c214a0030af7fc1e0fc69103185e39177e7e58d9900ccd76648e700ae0c547d08f3ff42d074b1524af35cca8cc7a729c3ecf5d90f996acc7b419f150610bfb2adb59be84740734cb373061f5c0daf5eb95ceb6283d3109fb22272c8fe93ccf02ee1f641c8f5f3846057af3149648a97b6802faacd0abd981f6df84de35274d9dbc29e3cee06ecb881f216e33d94046ea8dbb81a7e6103034f65c110fa81014aa9512c6dd7399c0cfb956bc902b7448a96d15436bd2df9db801e53399e6b4bc2490ad78be96fe29dedd6459bc8a3fcf3c98c00cba860a01ebf52bc030a525f8a0ca70730a90af08d67e17919ad676b73d6fc857b17e3c5ffff6f18039ab27ec0468b4ab4a74776af5a9157f01b29e98f0f38b452417c53e29fb83022d45a23c3f523e0fc88ab6daefa0b7a482de2eafe113d6dfe507482c55df622d69d5a236de944bfa5542324b862602aa778a5a01e86c33ca9c5b425f118cc2aea6b918ab5926ec24b21e14ccc970fece630dfafcb023c6480d0a14e4b82bd488be6b100e29dfc272a3e0a0b992f5d62820844537e66c7b27a4a2ee0e73af40a015ce1d3ee5055bf5fb32a2406517be761980fce3c9e95a79dccd17d68913318a12f26c2a80a4c38696175b5faf37b99017074d5578ba407923970921e8fd23bc0833f5b2a5de7e5deb3e65fd6d3dd18d7dd658aae809819ec77f967c19b90d2570a87eff2e8283a8de365958c384c85dac6375b474aaab2db428e2cbdbf8605ccf940a494fa22198600320d1057b02c79c67d23844365e126c4f063d60a0b043f39644276705d61ad3713a174473c506026177d2ccd91d491577179a5f093dd3471b16d0c4fd0c36d49358616ed71dc5c705f22f29d87ec6b5bfeb8b3057e008ae2854ca8cf017f350591f3893edf77c5438ddad4cf83d536b398c676eace627892b806f12402b009bacd6b946a4103561f0c309d3b3bb84332d3c9e638d434e5f5650fed2e84e77093b065ddc030745205a9be792839f705741f0dd558ebb98c63f54ea11a19d0e59926392410a6b5696487adf3f60602644fc6e9af4c94ee1358dea023ffbcf5f126140663670759e50e4f1276c43c6ef7abdd3125aa8b76244", 0xc3f}], 0x5}}], 0x3, 0xc0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2.381783433s ago: executing program 6 (id=3121): socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x11, 0x2001}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.342905574s ago: executing program 6 (id=3122): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xd20, 0x1000000000000000, 0x61133e53}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000002380)) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010084b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200000d0000"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 2.330070534s ago: executing program 3 (id=3123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) 2.308232415s ago: executing program 3 (id=3124): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0xa}, 0x0, 0x37, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000080000000000000000800120002000200000000000000000030002b000203"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000740)="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", 0x1e8}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/203, 0xcb}, {&(0x7f0000000f00)="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", 0x168}, {&(0x7f0000001cc0)="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", 0x186}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x2000, 0x1000, 0x5, 0x6}, 0x20) 2.268751206s ago: executing program 3 (id=3125): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4008840) 2.226520847s ago: executing program 3 (id=3126): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.226084517s ago: executing program 3 (id=3127): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000013c0)="1c1d2b3c512d6519", 0x8}], 0x1}}], 0x1, 0x1) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r5, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRES32=0x0], 0x100b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x6, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000002c0), 0x4) r7 = accept$phonet_pipe(r5, &(0x7f0000000140), &(0x7f0000000200)=0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth1_vlan\x00'}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008070) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000800)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x2}}}, 0x84) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000000070104000000f3ffffffffffffff00090001"], 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x102, 0x0, 0x0, 0x3, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffe6) 2.14283876s ago: executing program 6 (id=3128): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.923851796s ago: executing program 2 (id=3129): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") 742.331679ms ago: executing program 1 (id=3130): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5400000012000103000000000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="fe00000000000000ffff07467a22ff34abb0788da5493c6ecdfff000000000080003001100000090f3ba2966c3476b5d"], 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000280)}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x3234, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x7be, &(0x7f0000000480)="$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") r3 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r3, &(0x7f0000000d80)=""/169, 0xa9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pim6reg0\x00'}) read(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x80, @private1, 0x6}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000080)={r8, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000240)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000001c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="300000000000000084000000010000000b00c2000500000005000000830000000000000086727b4600020000a0e6c2b73570ab5d75d37bfcc9140fa1a52798434f8980bf0b930a9017abc61c4fa416de3b2b0cae1c3ba89209cd0ad0165425c970bd48e965bb72f655078931830f7bf01a8d", @ANYRES32=r9], 0x30, 0x4001}], 0x1, 0x11) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={r9}, &(0x7f0000000340)=0x8) 128.714096ms ago: executing program 3 (id=3131): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) getgid() openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x171100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x3a008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x102801, 0xb, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) 75.087958ms ago: executing program 1 (id=3132): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x4b65, 0x0) fadvise64(r2, 0x5, 0x7, 0x5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x240000c0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000180)={{r0, &(0x7f0000000040)='\x00', 0x40, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x6]}, {0x9, 0x6, 0x793}}, 0xff, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8}, {[0x8, 0x2949, 0x7, 0xffff]}, 0x401, 0x22, &(0x7f0000000140)=""/34}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000003247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35149a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e571f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521f9e3dbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b13fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc90307f5f7a9cb7f1e5ed79dbf92e5d9c3f40a1313db007da349939e8805418029fef1be9f8729d4f1e43572059a7b4564d00"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) 0s ago: executing program 2 (id=3133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'geneve1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) kernel console output (not intermixed with test programs): [ 263.745915][ T5730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.766098][ T5730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.780551][ T5730] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.789867][ T5730] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.957668][T11253] loop3: detected capacity change from 0 to 2048 [ 263.981578][T11253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.248866][T11274] loop2: detected capacity change from 0 to 128 [ 264.259955][T11274] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.283791][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.559170][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.606808][T11289] FAULT_INJECTION: forcing a failure. [ 264.606808][T11289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.620245][T11289] CPU: 0 UID: 0 PID: 11289 Comm: syz.3.2717 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.620332][T11289] Tainted: [W]=WARN [ 264.620336][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.620342][T11289] Call Trace: [ 264.620400][T11289] [ 264.620405][T11289] __dump_stack+0x1d/0x30 [ 264.620438][T11289] dump_stack_lvl+0x95/0xd0 [ 264.620483][T11289] dump_stack+0x15/0x1b [ 264.620493][T11289] should_fail_ex+0x263/0x280 [ 264.620507][T11289] should_fail+0xb/0x20 [ 264.620552][T11289] should_fail_usercopy+0x1a/0x20 [ 264.620566][T11289] _copy_from_user+0x1c/0xb0 [ 264.620810][T11289] sctp_setsockopt+0x164/0xea0 [ 264.620836][T11289] sock_common_setsockopt+0x69/0x80 [ 264.620852][T11289] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 264.620867][T11289] __sys_setsockopt+0x184/0x200 [ 264.620900][T11289] __x64_sys_setsockopt+0x64/0x80 [ 264.620911][T11289] x64_sys_call+0x2327/0x3020 [ 264.620946][T11289] do_syscall_64+0x12c/0x3b0 [ 264.620961][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.620972][T11289] RIP: 0033:0x7faf3f92cdd9 [ 264.620982][T11289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.620991][T11289] RSP: 002b:00007faf3e37f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.621019][T11289] RAX: ffffffffffffffda RBX: 00007faf3fba5fa0 RCX: 00007faf3f92cdd9 [ 264.621026][T11289] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 264.621047][T11289] RBP: 00007faf3e37f090 R08: 0000000000000008 R09: 0000000000000000 [ 264.621054][T11289] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 264.621061][T11289] R13: 00007faf3fba6038 R14: 00007faf3fba5fa0 R15: 00007fff0af44b78 [ 264.621071][T11289] [ 264.962384][T11293] loop3: detected capacity change from 0 to 1764 [ 265.355417][T11304] loop2: detected capacity change from 0 to 164 [ 265.362352][T11304] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 265.567144][T10933] syz_tun (unregistering): left allmulticast mode [ 265.622109][T11306] lo speed is unknown, defaulting to 1000 [ 265.678573][T11323] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 265.686381][T11323] SELinux: failed to load policy [ 265.733175][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.740738][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.747868][T11306] bridge_slave_0: entered allmulticast mode [ 265.757496][T11306] bridge_slave_0: entered promiscuous mode [ 265.767347][ T5730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.777936][ T5730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.788808][ T5730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.800194][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.807408][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.817532][T11306] bridge_slave_1: entered allmulticast mode [ 265.824007][T11306] bridge_slave_1: entered promiscuous mode [ 265.833429][T11333] loop5: detected capacity change from 0 to 128 [ 265.847707][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.854216][T11333] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.858583][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.882949][ T5730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.893576][ T5730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.904652][ T5730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.918677][T10987] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.927377][T11306] team0: Port device team_slave_0 added [ 265.936704][T11306] team0: Port device team_slave_1 added [ 265.971203][ T5730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.981694][ T5730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.992066][ T5730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 266.004455][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.012691][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.039095][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.057538][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.065663][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.092481][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.208256][T11350] FAULT_INJECTION: forcing a failure. [ 266.208256][T11350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.221466][T11350] CPU: 1 UID: 0 PID: 11350 Comm: syz.2.2735 Tainted: G W syzkaller #0 PREEMPT(full) [ 266.221505][T11350] Tainted: [W]=WARN [ 266.221576][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.221585][T11350] Call Trace: [ 266.221590][T11350] [ 266.221596][T11350] __dump_stack+0x1d/0x30 [ 266.221615][T11350] dump_stack_lvl+0x95/0xd0 [ 266.221630][T11350] dump_stack+0x15/0x1b [ 266.221644][T11350] should_fail_ex+0x263/0x280 [ 266.221761][T11350] ? __pfx_ucma_create_id+0x10/0x10 [ 266.221788][T11350] should_fail+0xb/0x20 [ 266.221808][T11350] should_fail_usercopy+0x1a/0x20 [ 266.221869][T11350] _copy_from_user+0x1c/0xb0 [ 266.221896][T11350] ucma_create_id+0x7f/0x280 [ 266.221915][T11350] ? __pfx_ucma_create_id+0x10/0x10 [ 266.221988][T11350] ucma_write+0x1c9/0x260 [ 266.222020][T11350] vfs_writev+0x42b/0x900 [ 266.222034][T11350] ? __pfx_ucma_write+0x10/0x10 [ 266.222128][T11350] do_writev+0xe9/0x210 [ 266.222147][T11350] __x64_sys_writev+0x45/0x50 [ 266.222169][T11350] x64_sys_call+0x1c0c/0x3020 [ 266.222185][T11350] do_syscall_64+0x12c/0x3b0 [ 266.222213][T11350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.222234][T11350] RIP: 0033:0x7f4c182ecdd9 [ 266.222309][T11350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.222324][T11350] RSP: 002b:00007f4c16d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 266.222392][T11350] RAX: ffffffffffffffda RBX: 00007f4c18566090 RCX: 00007f4c182ecdd9 [ 266.222405][T11350] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 266.222418][T11350] RBP: 00007f4c16d26090 R08: 0000000000000000 R09: 0000000000000000 [ 266.222429][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.222480][T11350] R13: 00007f4c18566128 R14: 00007f4c18566090 R15: 00007fff6fdb6178 [ 266.222496][T11350] [ 266.434437][T11306] hsr_slave_0: entered promiscuous mode [ 266.440559][T11306] hsr_slave_1: entered promiscuous mode [ 266.446282][T11306] debugfs: 'hsr0' already exists in 'hsr' [ 266.452064][T11306] Cannot create hsr debugfs directory [ 266.492424][ T5730] bridge_slave_1: left allmulticast mode [ 266.498073][ T5730] bridge_slave_1: left promiscuous mode [ 266.503779][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.511429][ T5730] bridge_slave_0: left allmulticast mode [ 266.517050][ T5730] bridge_slave_0: left promiscuous mode [ 266.523178][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.721958][ T5730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.731774][ T5730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.741442][ T5730] bond0 (unregistering): Released all slaves [ 266.749078][ T5730] bond1 (unregistering): Released all slaves [ 266.790976][ T5730] tipc: Left network mode [ 266.798834][ T5730] hsr_slave_0: left promiscuous mode [ 266.804507][ T5730] hsr_slave_1: left promiscuous mode [ 266.810232][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.817607][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.825550][ T5730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.833114][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.844415][ T5730] veth1_macvtap: left promiscuous mode [ 266.850392][ T5730] veth0_macvtap: left promiscuous mode [ 266.855963][ T5730] veth1_vlan: left promiscuous mode [ 266.862935][ T5730] veth0_vlan: left promiscuous mode [ 266.923657][ T5730] team0 (unregistering): Port device team_slave_1 removed [ 266.933715][ T5730] team0 (unregistering): Port device team_slave_0 removed [ 266.963967][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 267.022444][T11374] netlink: 'syz.2.2737': attribute type 3 has an invalid length. [ 267.049721][T11374] lo speed is unknown, defaulting to 1000 [ 267.232917][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 267.232933][ T28] audit: type=1326 audit(267.202:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.274258][T11306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.295486][ T28] audit: type=1326 audit(267.202:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.295621][T11408] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 267.330386][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.339381][T11306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.349895][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.351631][ T28] audit: type=1326 audit(267.252:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.367134][T11306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.383061][T11374] loop2: detected capacity change from 0 to 1024 [ 267.402925][T11374] EXT4-fs: Ignoring removed bh option [ 267.413787][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.424745][ T5730] IPVS: stop unused estimator thread 0... [ 267.430573][ T28] audit: type=1326 audit(267.252:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.431838][T11306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.467164][ T28] audit: type=1326 audit(267.252:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.479762][T11374] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.509595][T11306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.514253][T11420] SELinux: security_context_str_to_sid (}o) failed with errno=-22 [ 267.519200][T11374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 267.540722][T11374] System zones: 0-1, 3-12 [ 267.550519][ T28] audit: type=1326 audit(267.252:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.577256][ T28] audit: type=1326 audit(267.252:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.602847][ T28] audit: type=1326 audit(267.252:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.615761][T11374] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.2737: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.628217][ T28] audit: type=1326 audit(267.252:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.650505][T11374] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 267.668313][ T28] audit: type=1326 audit(267.252:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.0.2740" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b7abcdd9 code=0x7ffc0000 [ 267.689449][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.717091][T11374] EXT4-fs (loop2): Remounting filesystem read-only [ 267.723868][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 267.723923][ C1] EXT4-fs (loop2): initial error at time 267: ext4_map_blocks:833: inode 3: block 1 [ 267.723989][ C1] EXT4-fs (loop2): last error at time 267: ext4_map_blocks:833: inode 3: block 1 [ 267.728671][T11404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2740'. [ 267.752041][T11306] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.768272][T11374] EXT4-fs (loop2): 1 orphan inode deleted [ 267.789714][T11374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.803044][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.810096][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.832347][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.839446][T11198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.900578][T11454] FAULT_INJECTION: forcing a failure. [ 267.900578][T11454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.916240][T11454] CPU: 1 UID: 0 PID: 11454 Comm: syz.5.2746 Tainted: G W syzkaller #0 PREEMPT(full) [ 267.916272][T11454] Tainted: [W]=WARN [ 267.916288][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.916298][T11454] Call Trace: [ 267.916304][T11454] [ 267.916310][T11454] __dump_stack+0x1d/0x30 [ 267.916332][T11454] dump_stack_lvl+0x95/0xd0 [ 267.916350][T11454] dump_stack+0x15/0x1b [ 267.916367][T11454] should_fail_ex+0x263/0x280 [ 267.916408][T11454] should_fail+0xb/0x20 [ 267.916429][T11454] should_fail_usercopy+0x1a/0x20 [ 267.916455][T11454] _copy_to_user+0x20/0xa0 [ 267.916558][T11454] simple_read_from_buffer+0xb5/0x130 [ 267.916646][T11454] proc_fail_nth_read+0x10e/0x150 [ 267.916667][T11454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.916687][T11454] vfs_read+0x1ab/0x7f0 [ 267.916832][T11454] ? __rcu_read_unlock+0x4e/0x70 [ 267.916852][T11454] ? __fget_files+0x184/0x1c0 [ 267.916870][T11454] ? __sys_bind+0x222/0x290 [ 267.916956][T11454] ? mutex_lock+0x57/0x90 [ 267.916984][T11454] ksys_read+0xdc/0x1a0 [ 267.917008][T11454] __x64_sys_read+0x40/0x50 [ 267.917072][T11454] x64_sys_call+0x2886/0x3020 [ 267.917092][T11454] do_syscall_64+0x12c/0x3b0 [ 267.917139][T11454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.917160][T11454] RIP: 0033:0x7f3b6711d60e [ 267.917176][T11454] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.917192][T11454] RSP: 002b:00007f3b65baefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.917208][T11454] RAX: ffffffffffffffda RBX: 00007f3b65baf6c0 RCX: 00007f3b6711d60e [ 267.917266][T11454] RDX: 000000000000000f RSI: 00007f3b65baf0a0 RDI: 0000000000000006 [ 267.917278][T11454] RBP: 00007f3b65baf090 R08: 0000000000000000 R09: 0000000000000000 [ 267.917290][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.917306][T11454] R13: 00007f3b673d6038 R14: 00007f3b673d5fa0 R15: 00007ffc7756e228 [ 267.917336][T11454] [ 268.218093][T11470] loop5: detected capacity change from 0 to 128 [ 268.236358][T11470] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.251236][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.279825][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.300842][T10987] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.354177][T11306] veth0_vlan: entered promiscuous mode [ 268.363299][T11306] veth1_vlan: entered promiscuous mode [ 268.376591][T11306] veth0_macvtap: entered promiscuous mode [ 268.383746][T11306] veth1_macvtap: entered promiscuous mode [ 268.393553][T11306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.403658][T11306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.413882][T11198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.422906][T11198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.431801][T11198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.440830][T11198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.975700][T11567] loop3: detected capacity change from 0 to 512 [ 281.983156][T11558] lo speed is unknown, defaulting to 1000 [ 281.984016][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2753'. [ 282.004707][T11567] EXT4-fs: Mount option(s) incompatible with ext3 [ 282.111228][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 282.111242][ T28] audit: type=1326 audit(282.082:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.142936][ T28] audit: type=1326 audit(282.112:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.169745][ T28] audit: type=1326 audit(282.122:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.194817][ T28] audit: type=1326 audit(282.122:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.221698][ T28] audit: type=1326 audit(282.132:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.248800][ T28] audit: type=1326 audit(282.132:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.277524][ T28] audit: type=1326 audit(282.132:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.306016][ T28] audit: type=1326 audit(282.132:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.315647][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2758'. [ 282.333488][ T28] audit: type=1326 audit(282.132:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.373267][ T28] audit: type=1326 audit(282.132:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6715cdd9 code=0x7ffc0000 [ 282.429378][T11593] can0: slcan on ttyS3. [ 282.545884][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 282.844559][T11615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11615 comm=syz.2.2766 [ 282.937395][T11619] loop5: detected capacity change from 0 to 512 [ 282.979802][T11619] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2768: corrupted inode contents [ 283.008986][T11599] can0 (unregistered): slcan off ttyS3. [ 283.050895][T11619] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 283.051050][T11619] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.2768: mark_inode_dirty error [ 283.060275][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 283.060291][ C0] EXT4-fs (loop5): initial error at time 283: ext4_do_update_inode:5690: inode 16 [ 283.060323][ C0] EXT4-fs (loop5): last error at time 283: ext4_do_update_inode:5690: inode 16 [ 283.121171][T11619] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 283.121348][T11619] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2768: corrupted inode contents [ 283.159659][T11619] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 283.159795][T11619] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2768: mark_inode_dirty error [ 283.193432][T11619] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 283.195615][T11619] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2768: corrupted inode contents [ 283.218789][T11619] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 283.219369][T11619] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 283.239057][T11619] loop5: lost filesystem error report for type 5 error -117 [ 283.241118][T11619] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2768: corrupted inode contents [ 283.265637][T11642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2771'. [ 283.290337][T11619] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 283.329920][T11619] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.2768: mark_inode_dirty error [ 283.358967][T11619] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 283.359164][T11619] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 283.398770][T11619] loop5: lost filesystem error report for type 5 error -117 [ 283.435652][T11619] EXT4-fs (loop5): 1 truncate cleaned up [ 283.450615][ T49] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 283.472063][T11650] lo speed is unknown, defaulting to 1000 [ 283.482281][ T49] loop5: lost filesystem error report for type 5 error -117 [ 283.482662][T11619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.566502][T11656] netlink: 'syz.1.2776': attribute type 16 has an invalid length. [ 283.577641][T11656] netlink: 'syz.1.2776': attribute type 17 has an invalid length. [ 283.590143][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.786476][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2777'. [ 284.148022][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.167759][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.327474][T11656] bridge0: port 3(vlan3) entered disabled state [ 284.417094][T11674] FAULT_INJECTION: forcing a failure. [ 284.417094][T11674] name failslab, interval 1, probability 0, space 0, times 0 [ 284.464797][T11674] CPU: 0 UID: 0 PID: 11674 Comm: syz.5.2782 Tainted: G W syzkaller #0 PREEMPT(full) [ 284.464846][T11674] Tainted: [W]=WARN [ 284.464852][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.464907][T11674] Call Trace: [ 284.464913][T11674] [ 284.464920][T11674] __dump_stack+0x1d/0x30 [ 284.464942][T11674] dump_stack_lvl+0x95/0xd0 [ 284.464964][T11674] dump_stack+0x15/0x1b [ 284.464982][T11674] should_fail_ex+0x263/0x280 [ 284.465021][T11674] should_failslab+0x8c/0xb0 [ 284.465095][T11674] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 284.465125][T11674] ? __alloc_skb+0x2d6/0x690 [ 284.465149][T11674] __alloc_skb+0x2d6/0x690 [ 284.465212][T11674] ? __alloc_skb+0x200/0x690 [ 284.465235][T11674] netlink_alloc_large_skb+0xbf/0xf0 [ 284.465258][T11674] netlink_sendmsg+0x40c/0x6f0 [ 284.465296][T11674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.465339][T11674] ____sys_sendmsg+0x563/0x5b0 [ 284.465434][T11674] ___sys_sendmsg+0x195/0x1e0 [ 284.465464][T11674] __x64_sys_sendmsg+0xd4/0x160 [ 284.465487][T11674] x64_sys_call+0x194c/0x3020 [ 284.465554][T11674] do_syscall_64+0x12c/0x3b0 [ 284.465644][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.465664][T11674] RIP: 0033:0x7f3b6715cdd9 [ 284.465679][T11674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.465695][T11674] RSP: 002b:00007f3b65baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.465741][T11674] RAX: ffffffffffffffda RBX: 00007f3b673d5fa0 RCX: 00007f3b6715cdd9 [ 284.465754][T11674] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 284.465766][T11674] RBP: 00007f3b65baf090 R08: 0000000000000000 R09: 0000000000000000 [ 284.465842][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.465855][T11674] R13: 00007f3b673d6038 R14: 00007f3b673d5fa0 R15: 00007ffc7756e228 [ 284.465874][T11674] [ 284.824423][T11686] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2784'. [ 285.078851][ C1] ip6_tunnel: … xmit: Local address not yet configured! [ 285.718514][T11710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2794'. [ 285.881705][T11718] FAULT_INJECTION: forcing a failure. [ 285.881705][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.926789][T11718] CPU: 1 UID: 0 PID: 11718 Comm: syz.1.2795 Tainted: G W syzkaller #0 PREEMPT(full) [ 285.926815][T11718] Tainted: [W]=WARN [ 285.926821][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.926836][T11718] Call Trace: [ 285.926843][T11718] [ 285.926852][T11718] __dump_stack+0x1d/0x30 [ 285.926910][T11718] dump_stack_lvl+0x95/0xd0 [ 285.926926][T11718] dump_stack+0x15/0x1b [ 285.926940][T11718] should_fail_ex+0x263/0x280 [ 285.926960][T11718] should_fail+0xb/0x20 [ 285.926980][T11718] should_fail_usercopy+0x1a/0x20 [ 285.927046][T11718] _copy_from_user+0x1c/0xb0 [ 285.927188][T11718] __copy_msghdr+0x244/0x300 [ 285.927235][T11718] ___sys_sendmsg+0x10c/0x1e0 [ 285.927259][T11718] __x64_sys_sendmsg+0xd4/0x160 [ 285.927279][T11718] x64_sys_call+0x194c/0x3020 [ 285.927361][T11718] do_syscall_64+0x12c/0x3b0 [ 285.927380][T11718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.927396][T11718] RIP: 0033:0x7f10e468cdd9 [ 285.927416][T11718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.927431][T11718] RSP: 002b:00007f10e30df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.927452][T11718] RAX: ffffffffffffffda RBX: 00007f10e4905fa0 RCX: 00007f10e468cdd9 [ 285.927465][T11718] RDX: 0000000020000000 RSI: 0000200000004280 RDI: 0000000000000003 [ 285.927478][T11718] RBP: 00007f10e30df090 R08: 0000000000000000 R09: 0000000000000000 [ 285.927567][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.927596][T11718] R13: 00007f10e4906038 R14: 00007f10e4905fa0 R15: 00007ffda42589e8 [ 285.927616][T11718] [ 286.227006][T11725] FAULT_INJECTION: forcing a failure. [ 286.227006][T11725] name failslab, interval 1, probability 0, space 0, times 0 [ 286.274339][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.2.2797 Tainted: G W syzkaller #0 PREEMPT(full) [ 286.274380][T11725] Tainted: [W]=WARN [ 286.274387][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.274398][T11725] Call Trace: [ 286.274405][T11725] [ 286.274471][T11725] __dump_stack+0x1d/0x30 [ 286.274497][T11725] dump_stack_lvl+0x95/0xd0 [ 286.274516][T11725] dump_stack+0x15/0x1b [ 286.274561][T11725] should_fail_ex+0x263/0x280 [ 286.274595][T11725] should_failslab+0x8c/0xb0 [ 286.274616][T11725] __kmalloc_noprof+0xb8/0x4d0 [ 286.274692][T11725] ? bpf_test_init+0x86/0x130 [ 286.274711][T11725] bpf_test_init+0x86/0x130 [ 286.274803][T11725] bpf_prog_test_run_xdp+0x306/0xa10 [ 286.274829][T11725] ? __rcu_read_unlock+0x4e/0x70 [ 286.274847][T11725] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 286.274929][T11725] bpf_prog_test_run+0x204/0x340 [ 286.274950][T11725] __sys_bpf+0x52e/0x7e0 [ 286.274971][T11725] __x64_sys_bpf+0x41/0x50 [ 286.275033][T11725] x64_sys_call+0x10cb/0x3020 [ 286.275055][T11725] do_syscall_64+0x12c/0x3b0 [ 286.275078][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.275109][T11725] RIP: 0033:0x7f4c182ecdd9 [ 286.275121][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.275137][T11725] RSP: 002b:00007f4c16d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.275156][T11725] RAX: ffffffffffffffda RBX: 00007f4c18565fa0 RCX: 00007f4c182ecdd9 [ 286.275170][T11725] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 286.275184][T11725] RBP: 00007f4c16d47090 R08: 0000000000000000 R09: 0000000000000000 [ 286.275195][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.275208][T11725] R13: 00007f4c18566038 R14: 00007f4c18565fa0 R15: 00007fff6fdb6178 [ 286.275227][T11725] [ 286.773346][T11736] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2800'. [ 286.782476][T11736] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2800'. [ 286.808796][T11736] netlink: 'syz.5.2800': attribute type 5 has an invalid length. [ 286.816562][T11736] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2800'. [ 286.817559][T11732] syzkaller0: entered promiscuous mode [ 286.845159][T11732] syzkaller0: entered allmulticast mode [ 287.105295][T11748] syzkaller0: entered promiscuous mode [ 287.120203][ T28] kauditd_printk_skb: 925 callbacks suppressed [ 287.120256][ T28] audit: type=1400 audit(287.092:10669): avc: denied { prog_load } for pid=11751 comm="syz.5.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 287.125096][T11748] syzkaller0: entered allmulticast mode [ 287.131738][ T28] audit: type=1400 audit(287.092:10670): avc: denied { bpf } for pid=11751 comm="syz.5.2807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.207283][ T28] audit: type=1326 audit(287.122:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11753 comm="syz.1.2808" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e468cdd9 code=0x7ffc0000 [ 287.259372][ T28] audit: type=1326 audit(287.122:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11753 comm="syz.1.2808" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e468cdd9 code=0x7ffc0000 [ 287.315369][ T28] audit: type=1326 audit(287.122:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11753 comm="syz.1.2808" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e468cdd9 code=0x7ffc0000 [ 287.360062][T10987] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.377807][T10987] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 287.391532][ T28] audit: type=1326 audit(287.122:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11753 comm="syz.1.2808" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e468cdd9 code=0x7ffc0000 [ 287.419295][T11765] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.425905][T10987] audit: backlog limit exceeded [ 287.427253][T11767] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2813'. [ 287.457270][T11769] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2812'. [ 287.480882][T11765] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2811'. [ 287.492690][T11754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2808'. [ 287.508866][T11769] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2812'. [ 287.530700][T11769] netlink: 'syz.5.2812': attribute type 5 has an invalid length. [ 287.546932][T11769] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2812'. [ 287.695116][T11789] loop2: detected capacity change from 0 to 128 [ 287.721153][T11789] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 287.884317][T11798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=11798 comm=syz.1.2823 [ 287.903508][T11800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2824'. [ 287.914512][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 287.919811][T11783] loop5: detected capacity change from 0 to 1764 [ 287.953021][T11804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2826'. [ 287.963977][T11783] Cannot find set identified by id 0 to match [ 287.982080][T11798] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 287.985716][T11804] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2826'. [ 288.008862][T11804] netlink: 'syz.0.2826': attribute type 5 has an invalid length. [ 288.419551][T11844] lo speed is unknown, defaulting to 1000 [ 288.425370][T11844] lo speed is unknown, defaulting to 1000 [ 288.431602][T11844] lo speed is unknown, defaulting to 1000 [ 288.438634][T11844] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 288.450709][T11844] lo speed is unknown, defaulting to 1000 [ 288.456665][T11844] lo speed is unknown, defaulting to 1000 [ 288.462806][T11844] lo speed is unknown, defaulting to 1000 [ 288.468951][T11844] lo speed is unknown, defaulting to 1000 [ 288.475600][T11844] lo speed is unknown, defaulting to 1000 [ 288.487855][ T3303] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 288.500360][ T3303] FAT-fs (loop2): Filesystem has been set read-only [ 288.510919][T11853] FAULT_INJECTION: forcing a failure. [ 288.510919][T11853] name failslab, interval 1, probability 0, space 0, times 0 [ 288.523835][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.1.2846 Tainted: G W syzkaller #0 PREEMPT(full) [ 288.523973][T11853] Tainted: [W]=WARN [ 288.523979][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.523990][T11853] Call Trace: [ 288.523995][T11853] [ 288.524002][T11853] __dump_stack+0x1d/0x30 [ 288.524036][T11853] dump_stack_lvl+0x95/0xd0 [ 288.524053][T11853] dump_stack+0x15/0x1b [ 288.524068][T11853] should_fail_ex+0x263/0x280 [ 288.524151][T11853] should_failslab+0x8c/0xb0 [ 288.524177][T11853] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 288.524211][T11853] ? __alloc_skb+0x2d6/0x690 [ 288.524239][T11853] __alloc_skb+0x2d6/0x690 [ 288.524327][T11853] ? __alloc_skb+0x200/0x690 [ 288.524354][T11853] netlink_alloc_large_skb+0xbf/0xf0 [ 288.524381][T11853] netlink_sendmsg+0x40c/0x6f0 [ 288.524404][T11853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.524423][T11853] ____sys_sendmsg+0x563/0x5b0 [ 288.524443][T11853] ___sys_sendmsg+0x195/0x1e0 [ 288.524522][T11853] __x64_sys_sendmsg+0xd4/0x160 [ 288.524544][T11853] x64_sys_call+0x194c/0x3020 [ 288.524629][T11853] do_syscall_64+0x12c/0x3b0 [ 288.524653][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.524687][T11853] RIP: 0033:0x7f10e468cdd9 [ 288.524703][T11853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.524719][T11853] RSP: 002b:00007f10e30df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.524739][T11853] RAX: ffffffffffffffda RBX: 00007f10e4905fa0 RCX: 00007f10e468cdd9 [ 288.524752][T11853] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 288.524809][T11853] RBP: 00007f10e30df090 R08: 0000000000000000 R09: 0000000000000000 [ 288.524822][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.524834][T11853] R13: 00007f10e4906038 R14: 00007f10e4905fa0 R15: 00007ffda42589e8 [ 288.524853][T11853] [ 288.734350][T11856] FAULT_INJECTION: forcing a failure. [ 288.734350][T11856] name failslab, interval 1, probability 0, space 0, times 0 [ 288.765562][T11856] CPU: 1 UID: 0 PID: 11856 Comm: syz.1.2847 Tainted: G W syzkaller #0 PREEMPT(full) [ 288.765663][T11856] Tainted: [W]=WARN [ 288.765669][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.765678][T11856] Call Trace: [ 288.765683][T11856] [ 288.765691][T11856] __dump_stack+0x1d/0x30 [ 288.765791][T11856] dump_stack_lvl+0x95/0xd0 [ 288.765806][T11856] dump_stack+0x15/0x1b [ 288.765858][T11856] should_fail_ex+0x263/0x280 [ 288.765882][T11856] should_failslab+0x8c/0xb0 [ 288.765930][T11856] __kmalloc_noprof+0xb8/0x4d0 [ 288.765957][T11856] ? bpf_test_init+0x86/0x130 [ 288.765980][T11856] bpf_test_init+0x86/0x130 [ 288.766003][T11856] bpf_prog_test_run_skb+0x2a9/0x11c0 [ 288.766105][T11856] ? kstrtoull+0x111/0x140 [ 288.766195][T11856] ? __rcu_read_unlock+0x4e/0x70 [ 288.766214][T11856] ? __fget_files+0x184/0x1c0 [ 288.766228][T11856] ? __rcu_read_unlock+0x4e/0x70 [ 288.766244][T11856] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 288.766323][T11856] bpf_prog_test_run+0x204/0x340 [ 288.766394][T11856] __sys_bpf+0x52e/0x7e0 [ 288.766421][T11856] __x64_sys_bpf+0x41/0x50 [ 288.766439][T11856] x64_sys_call+0x10cb/0x3020 [ 288.766463][T11856] do_syscall_64+0x12c/0x3b0 [ 288.766530][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.766602][T11856] RIP: 0033:0x7f10e468cdd9 [ 288.766614][T11856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.766628][T11856] RSP: 002b:00007f10e30df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.766654][T11856] RAX: ffffffffffffffda RBX: 00007f10e4905fa0 RCX: 00007f10e468cdd9 [ 288.766729][T11856] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 288.766748][T11856] RBP: 00007f10e30df090 R08: 0000000000000000 R09: 0000000000000000 [ 288.766760][T11856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.766773][T11856] R13: 00007f10e4906038 R14: 00007f10e4905fa0 R15: 00007ffda42589e8 [ 288.766866][T11856] [ 288.998543][T11865] FAULT_INJECTION: forcing a failure. [ 288.998543][T11865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.011784][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.3.2853 Tainted: G W syzkaller #0 PREEMPT(full) [ 289.011810][T11865] Tainted: [W]=WARN [ 289.011890][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.011902][T11865] Call Trace: [ 289.011908][T11865] [ 289.011916][T11865] __dump_stack+0x1d/0x30 [ 289.011936][T11865] dump_stack_lvl+0x95/0xd0 [ 289.011952][T11865] dump_stack+0x15/0x1b [ 289.011981][T11865] should_fail_ex+0x263/0x280 [ 289.012002][T11865] should_fail+0xb/0x20 [ 289.012021][T11865] should_fail_usercopy+0x1a/0x20 [ 289.012051][T11865] _copy_from_user+0x1c/0xb0 [ 289.012078][T11865] ___sys_recvmsg+0xaa/0x3b0 [ 289.012098][T11865] ? 0xffffffff81000000 [ 289.012112][T11865] ? __rcu_read_unlock+0x4e/0x70 [ 289.012138][T11865] __x64_sys_recvmsg+0xd1/0x160 [ 289.012221][T11865] x64_sys_call+0x2b1a/0x3020 [ 289.012243][T11865] do_syscall_64+0x12c/0x3b0 [ 289.012265][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.012350][T11865] RIP: 0033:0x7f0224bccdd9 [ 289.012362][T11865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.012378][T11865] RSP: 002b:00007f022361f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 289.012397][T11865] RAX: ffffffffffffffda RBX: 00007f0224e45fa0 RCX: 00007f0224bccdd9 [ 289.012457][T11865] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 289.012497][T11865] RBP: 00007f022361f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.012574][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.012584][T11865] R13: 00007f0224e46038 R14: 00007f0224e45fa0 R15: 00007fff975e1818 [ 289.012599][T11865] [ 289.295085][T11883] capability: warning: `syz.3.2856' uses deprecated v2 capabilities in a way that may be insecure [ 289.404197][T11883] lo speed is unknown, defaulting to 1000 [ 289.408601][T11883] lo speed is unknown, defaulting to 1000 [ 289.617294][T11906] FAULT_INJECTION: forcing a failure. [ 289.617294][T11906] name failslab, interval 1, probability 0, space 0, times 0 [ 289.650255][T11906] CPU: 0 UID: 0 PID: 11906 Comm: syz.3.2865 Tainted: G W syzkaller #0 PREEMPT(full) [ 289.650283][T11906] Tainted: [W]=WARN [ 289.650290][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.650302][T11906] Call Trace: [ 289.650308][T11906] [ 289.650317][T11906] __dump_stack+0x1d/0x30 [ 289.650393][T11906] dump_stack_lvl+0x95/0xd0 [ 289.650491][T11906] dump_stack+0x15/0x1b [ 289.650509][T11906] should_fail_ex+0x263/0x280 [ 289.650532][T11906] should_failslab+0x8c/0xb0 [ 289.650609][T11906] __kmalloc_noprof+0xb8/0x4d0 [ 289.650637][T11906] ? bpf_test_init+0x86/0x130 [ 289.650715][T11906] bpf_test_init+0x86/0x130 [ 289.650738][T11906] bpf_prog_test_run_skb+0x2a9/0x11c0 [ 289.650761][T11906] ? kstrtoull+0x111/0x140 [ 289.650784][T11906] ? __rcu_read_unlock+0x4e/0x70 [ 289.650851][T11906] ? __fget_files+0x184/0x1c0 [ 289.650871][T11906] ? __rcu_read_unlock+0x4e/0x70 [ 289.650888][T11906] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 289.650910][T11906] bpf_prog_test_run+0x204/0x340 [ 289.650977][T11906] __sys_bpf+0x52e/0x7e0 [ 289.651000][T11906] __x64_sys_bpf+0x41/0x50 [ 289.651083][T11906] x64_sys_call+0x10cb/0x3020 [ 289.651100][T11906] do_syscall_64+0x12c/0x3b0 [ 289.651121][T11906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.651210][T11906] RIP: 0033:0x7f0224bccdd9 [ 289.651225][T11906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.651242][T11906] RSP: 002b:00007f022361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.651258][T11906] RAX: ffffffffffffffda RBX: 00007f0224e45fa0 RCX: 00007f0224bccdd9 [ 289.651349][T11906] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 289.651360][T11906] RBP: 00007f022361f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.651369][T11906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.651379][T11906] R13: 00007f0224e46038 R14: 00007f0224e45fa0 R15: 00007fff975e1818 [ 289.651395][T11906] [ 289.885252][T11908] loop3: detected capacity change from 0 to 512 [ 289.905459][T11908] EXT4-fs (loop3): 1 truncate cleaned up [ 289.911656][T11908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.925433][T11908] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 290.044678][T11306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.308701][T11930] FAULT_INJECTION: forcing a failure. [ 290.308701][T11930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.366304][T11930] CPU: 0 UID: 0 PID: 11930 Comm: syz.5.2873 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.366411][T11930] Tainted: [W]=WARN [ 290.366417][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.366426][T11930] Call Trace: [ 290.366430][T11930] [ 290.366437][T11930] __dump_stack+0x1d/0x30 [ 290.366455][T11930] dump_stack_lvl+0x95/0xd0 [ 290.366470][T11930] dump_stack+0x15/0x1b [ 290.366501][T11930] should_fail_ex+0x263/0x280 [ 290.366526][T11930] should_fail+0xb/0x20 [ 290.366581][T11930] should_fail_usercopy+0x1a/0x20 [ 290.366601][T11930] _copy_to_user+0x20/0xa0 [ 290.366703][T11930] simple_read_from_buffer+0xb5/0x130 [ 290.366730][T11930] proc_fail_nth_read+0x10e/0x150 [ 290.366794][T11930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.366816][T11930] vfs_read+0x1ab/0x7f0 [ 290.366839][T11930] ? sock_common_setsockopt+0x69/0x80 [ 290.366861][T11930] ksys_read+0xdc/0x1a0 [ 290.366929][T11930] __x64_sys_read+0x40/0x50 [ 290.367010][T11930] x64_sys_call+0x2886/0x3020 [ 290.367076][T11930] do_syscall_64+0x12c/0x3b0 [ 290.367094][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.367134][T11930] RIP: 0033:0x7f3b6711d60e [ 290.367150][T11930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.367166][T11930] RSP: 002b:00007f3b65baefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.367182][T11930] RAX: ffffffffffffffda RBX: 00007f3b65baf6c0 RCX: 00007f3b6711d60e [ 290.367268][T11930] RDX: 000000000000000f RSI: 00007f3b65baf0a0 RDI: 0000000000000004 [ 290.367278][T11930] RBP: 00007f3b65baf090 R08: 0000000000000000 R09: 0000000000000000 [ 290.367288][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.367300][T11930] R13: 00007f3b673d6038 R14: 00007f3b673d5fa0 R15: 00007ffc7756e228 [ 290.367321][T11930] [ 290.819787][T11939] loop3: detected capacity change from 0 to 2048 [ 290.851114][T11939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.937598][T11306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.983253][T11949] loop5: detected capacity change from 0 to 512 [ 290.992024][T11951] netlink: 'syz.3.2880': attribute type 5 has an invalid length. [ 291.029676][T11949] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.2881: corrupted inode contents [ 291.056875][T11955] FAULT_INJECTION: forcing a failure. [ 291.056875][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 291.082920][T11949] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.084822][T11949] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 291.086825][T11955] CPU: 0 UID: 0 PID: 11955 Comm: syz.3.2882 Tainted: G W syzkaller #0 PREEMPT(full) [ 291.086852][T11955] Tainted: [W]=WARN [ 291.086910][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.086921][T11955] Call Trace: [ 291.086926][T11955] [ 291.086933][T11955] __dump_stack+0x1d/0x30 [ 291.087027][T11955] dump_stack_lvl+0x95/0xd0 [ 291.087062][T11955] dump_stack+0x15/0x1b [ 291.087125][T11955] should_fail_ex+0x263/0x280 [ 291.087154][T11955] should_failslab+0x8c/0xb0 [ 291.087189][T11955] __kmalloc_noprof+0xb8/0x4d0 [ 291.087215][T11955] ? bpf_test_init+0x86/0x130 [ 291.087234][T11955] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.087257][T11955] bpf_test_init+0x86/0x130 [ 291.087278][T11955] bpf_prog_test_run_xdp+0x306/0xa10 [ 291.087356][T11955] ? __rcu_read_unlock+0x4e/0x70 [ 291.087422][T11955] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.087443][T11955] bpf_prog_test_run+0x204/0x340 [ 291.087501][T11955] __sys_bpf+0x52e/0x7e0 [ 291.087599][T11955] __x64_sys_bpf+0x41/0x50 [ 291.087617][T11955] x64_sys_call+0x10cb/0x3020 [ 291.087637][T11955] do_syscall_64+0x12c/0x3b0 [ 291.087705][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.087724][T11955] RIP: 0033:0x7f0224bccdd9 [ 291.087738][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.087806][T11955] RSP: 002b:00007f022361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.087824][T11955] RAX: ffffffffffffffda RBX: 00007f0224e45fa0 RCX: 00007f0224bccdd9 [ 291.087837][T11955] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 291.087848][T11955] RBP: 00007f022361f090 R08: 0000000000000000 R09: 0000000000000000 [ 291.087860][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.087871][T11955] R13: 00007f0224e46038 R14: 00007f0224e45fa0 R15: 00007fff975e1818 [ 291.087947][T11955] [ 291.093976][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 291.094002][ C1] EXT4-fs (loop5): initial error at time 291: ext4_do_update_inode:5690: inode 15 [ 291.094030][ C1] EXT4-fs (loop5): last error at time 291: ext4_do_update_inode:5690: inode 15 [ 291.326793][T11949] loop5: lost filesystem error report for type 5 error -117 [ 291.330159][T11949] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.2881: corrupted inode contents [ 291.367813][T11949] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.369723][T11949] EXT4-fs error (device loop5): ext4_evict_inode:315: inode #15: comm syz.5.2881: mark_inode_dirty error [ 291.414203][T11949] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.414536][T11949] EXT4-fs (loop5): 1 orphan inode deleted [ 291.457750][T11949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.501129][T11968] netlink: 'syz.2.2889': attribute type 3 has an invalid length. [ 291.520863][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.551968][T11968] lo speed is unknown, defaulting to 1000 [ 291.594470][T11968] lo speed is unknown, defaulting to 1000 [ 291.652274][T11979] netlink: 'syz.5.2892': attribute type 5 has an invalid length. [ 291.815892][T11196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.833588][T11196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.846795][T11972] lo speed is unknown, defaulting to 1000 [ 291.858580][T11972] lo speed is unknown, defaulting to 1000 [ 291.895036][T11196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.928027][T11196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.016457][T11196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.033168][T11196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.102433][T11196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.126660][T11196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.223537][ T28] kauditd_printk_skb: 556 callbacks suppressed [ 292.223550][ T28] audit: type=1400 audit(292.192:11226): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 292.266723][ T28] audit: type=1400 audit(292.232:11227): avc: denied { search } for pid=3020 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.298771][ T28] audit: type=1400 audit(292.232:11228): avc: denied { search } for pid=3020 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.334246][T12015] devpts: Bad value for 'gid' [ 292.336912][T11972] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.340367][T12015] devpts: Bad value for 'gid' [ 292.355021][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.363118][ T28] audit: type=1400 audit(292.232:11229): avc: denied { search } for pid=3020 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.367435][T11972] bridge_slave_0: entered allmulticast mode [ 292.389833][ T28] audit: type=1400 audit(292.232:11230): avc: denied { read } for pid=3020 comm="dhcpcd" name="n39" dev="tmpfs" ino=14107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.412074][T11972] bridge_slave_0: entered promiscuous mode [ 292.419828][ T28] audit: type=1400 audit(292.232:11231): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=14107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.446733][T11972] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.459673][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.463796][ T28] audit: type=1400 audit(292.232:11232): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n39" dev="tmpfs" ino=14107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 292.473580][T11972] bridge_slave_1: entered allmulticast mode [ 292.491793][ T28] audit: type=1400 audit(292.302:11233): avc: denied { mounton } for pid=12014 comm="syz.3.2904" path="/46/file0" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.517367][T11972] bridge_slave_1: entered promiscuous mode [ 292.523911][ T28] audit: type=1400 audit(292.342:11234): avc: denied { read open } for pid=12027 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.551932][ T28] audit: type=1400 audit(292.342:11235): avc: denied { getattr } for pid=12027 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.579889][T11972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.591032][T11196] vlan3: left allmulticast mode [ 292.598366][T11196] dummy0: left allmulticast mode [ 292.605175][T11196] vlan3: left promiscuous mode [ 292.618631][T12043] netlink: 'syz.5.2907': attribute type 3 has an invalid length. [ 292.627340][T11196] dummy0: left promiscuous mode [ 292.633115][T11196] bridge0: port 3(vlan3) entered disabled state [ 292.857759][T11196] bridge_slave_1: left allmulticast mode [ 292.863603][T11196] bridge_slave_1: left promiscuous mode [ 292.869890][T11196] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.877617][T11196] bridge_slave_0: left allmulticast mode [ 292.885894][T11196] bridge_slave_0: left promiscuous mode [ 292.891642][T11196] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.080013][T11196] team0: Port device bridge2 removed [ 293.120623][T11196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.130618][T11196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.140457][T11196] bond0 (unregistering): Released all slaves [ 293.149164][T11972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.158686][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 293.181760][T11196] tipc: Left network mode [ 293.193305][T11972] team0: Port device team_slave_0 added [ 293.203272][T11972] team0: Port device team_slave_1 added [ 293.214902][T12043] lo speed is unknown, defaulting to 1000 [ 293.241976][T11972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.254050][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.285198][T12062] FAULT_INJECTION: forcing a failure. [ 293.285198][T12062] name failslab, interval 1, probability 0, space 0, times 0 [ 293.298957][T11972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.310264][T12043] lo speed is unknown, defaulting to 1000 [ 293.310704][T11972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.323776][T12062] CPU: 0 UID: 0 PID: 12062 Comm: syz.3.2915 Tainted: G W syzkaller #0 PREEMPT(full) [ 293.323863][T12062] Tainted: [W]=WARN [ 293.323868][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.323877][T12062] Call Trace: [ 293.323882][T12062] [ 293.323889][T12062] __dump_stack+0x1d/0x30 [ 293.323910][T12062] dump_stack_lvl+0x95/0xd0 [ 293.323932][T12062] dump_stack+0x15/0x1b [ 293.324022][T12062] should_fail_ex+0x263/0x280 [ 293.324045][T12062] should_failslab+0x8c/0xb0 [ 293.324069][T12062] __kmalloc_noprof+0xb8/0x4d0 [ 293.324095][T12062] ? bpf_test_init+0x86/0x130 [ 293.324118][T12062] bpf_test_init+0x86/0x130 [ 293.324160][T12062] bpf_prog_test_run_xdp+0x306/0xa10 [ 293.324181][T12062] ? __rcu_read_unlock+0x4e/0x70 [ 293.324278][T12062] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.324298][T12062] bpf_prog_test_run+0x204/0x340 [ 293.324320][T12062] __sys_bpf+0x52e/0x7e0 [ 293.324394][T12062] __x64_sys_bpf+0x41/0x50 [ 293.324412][T12062] x64_sys_call+0x10cb/0x3020 [ 293.324430][T12062] do_syscall_64+0x12c/0x3b0 [ 293.324491][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.324508][T12062] RIP: 0033:0x7f0224bccdd9 [ 293.324523][T12062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.324584][T12062] RSP: 002b:00007f022361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.324621][T12062] RAX: ffffffffffffffda RBX: 00007f0224e45fa0 RCX: 00007f0224bccdd9 [ 293.324631][T12062] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 293.324641][T12062] RBP: 00007f022361f090 R08: 0000000000000000 R09: 0000000000000000 [ 293.324649][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.324658][T12062] R13: 00007f0224e46038 R14: 00007f0224e45fa0 R15: 00007fff975e1818 [ 293.324672][T12062] [ 293.356726][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.564668][T12060] syz.2.2913 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 293.586045][T12060] CPU: 1 UID: 0 PID: 12060 Comm: syz.2.2913 Tainted: G W syzkaller #0 PREEMPT(full) [ 293.586138][T12060] Tainted: [W]=WARN [ 293.586144][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.586153][T12060] Call Trace: [ 293.586160][T12060] [ 293.586166][T12060] __dump_stack+0x1d/0x30 [ 293.586197][T12060] dump_stack_lvl+0x95/0xd0 [ 293.586264][T12060] dump_stack+0x15/0x1b [ 293.586283][T12060] dump_header+0x80/0x240 [ 293.586302][T12060] oom_kill_process+0x295/0x350 [ 293.586364][T12060] out_of_memory+0x97d/0xb80 [ 293.586388][T12060] try_charge_memcg+0x62f/0xa10 [ 293.586468][T12060] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 293.586492][T12060] __alloc_frozen_pages_noprof+0x18a/0x350 [ 293.586515][T12060] alloc_pages_mpol+0xb3/0x260 [ 293.586536][T12060] ? mod_lruvec_state+0xe0/0xf0 [ 293.586609][T12060] alloc_pages_noprof+0x8f/0x140 [ 293.586627][T12060] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 293.586661][T12060] __kvmalloc_node_noprof+0x3d4/0x640 [ 293.586681][T12060] ? futex_hash_allocate+0x190/0x9a0 [ 293.586707][T12060] ? futex_hash_allocate+0x190/0x9a0 [ 293.586731][T12060] futex_hash_allocate+0x190/0x9a0 [ 293.586815][T12060] ? cap_task_prctl+0x13f/0x6b0 [ 293.586839][T12060] futex_hash_prctl+0xd8/0xf0 [ 293.586947][T12060] __se_sys_prctl+0x4f4/0x1400 [ 293.586973][T12060] __x64_sys_prctl+0x67/0x80 [ 293.587053][T12060] x64_sys_call+0x2533/0x3020 [ 293.587092][T12060] do_syscall_64+0x12c/0x3b0 [ 293.587148][T12060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.587184][T12060] RIP: 0033:0x7f4c182ecdd9 [ 293.587271][T12060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.587302][T12060] RSP: 002b:00007f4c16d47028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 293.587322][T12060] RAX: ffffffffffffffda RBX: 00007f4c18565fa0 RCX: 00007f4c182ecdd9 [ 293.587339][T12060] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 293.587409][T12060] RBP: 00007f4c18382d69 R08: 0000000000000000 R09: 0000000000000000 [ 293.587469][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.587551][T12060] R13: 00007f4c18566038 R14: 00007f4c18565fa0 R15: 00007fff6fdb6178 [ 293.587630][T12060] [ 293.587824][T12060] memory: usage 307200kB, limit 307200kB, failcnt 276 [ 293.838220][T11972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.918158][T11196] hsr_slave_0: left promiscuous mode [ 293.941088][T11196] hsr_slave_1: left promiscuous mode [ 293.953906][T11196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.974035][T11196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.997769][T11196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.013125][T11196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.021049][T12060] memory+swap: usage 307540kB, limit 9007199254740988kB, failcnt 0 [ 294.043720][T12060] kmem: usage 306964kB, limit 9007199254740988kB, failcnt 0 [ 294.058296][T11196] batadv_slave_1: left allmulticast mode [ 294.071699][T11196] batadv_slave_1: left promiscuous mode [ 294.091305][T12060] Memory cgroup stats for /syz2: [ 294.091476][T12060] cache 0 [ 294.102809][T11196] veth1_macvtap: left promiscuous mode [ 294.112936][T11196] veth0_macvtap: left promiscuous mode [ 294.120326][T12060] rss 0 [ 294.126511][T12060] shmem 0 [ 294.133353][T11196] veth1_vlan: left promiscuous mode [ 294.144588][T12060] mapped_file 0 [ 294.154727][T11196] veth0_vlan: left promiscuous mode [ 294.165015][T12060] dirty 0 [ 294.178258][T12060] writeback 0 [ 294.194009][T12060] workingset_refault_anon 1 [ 294.217316][T12060] workingset_refault_file 768 [ 294.236071][T12060] swap 356352 [ 294.246465][T12060] swapcached 4583424 [ 294.263205][T12060] pgpgin 192209 [ 294.274464][T12060] pgpgout 192202 [ 294.282183][T12060] pgfault 263102 [ 294.291375][T12060] pgmajfault 11 [ 294.298369][T12060] inactive_anon 28672 [ 294.302762][T12060] active_anon 0 [ 294.306395][T12060] inactive_file 0 [ 294.319623][T12060] active_file 0 [ 294.342072][T12060] unevictable 0 [ 294.352028][T12060] hierarchical_memory_limit 314572800 [ 294.357997][T11196] team0 (unregistering): Port device team_slave_1 removed [ 294.366022][T12060] hierarchical_memsw_limit 9223372036854771712 [ 294.376053][T11196] team0 (unregistering): Port device team_slave_0 removed [ 294.384908][T12060] total_cache 0 [ 294.388557][T12060] total_rss 0 [ 294.394861][T12060] total_shmem 0 [ 294.402349][T12060] total_mapped_file 0 [ 294.412965][T12060] total_dirty 0 [ 294.419857][T12060] total_writeback 0 [ 294.432136][T12060] total_workingset_refault_anon 1 [ 294.442786][T12060] total_workingset_refault_file 768 [ 294.457718][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 294.491444][T11972] hsr_slave_0: entered promiscuous mode [ 294.497854][T12060] total_swap 356352 [ 294.507983][T12060] total_swapcached 4583424 [ 294.514601][T11972] hsr_slave_1: entered promiscuous mode [ 294.527189][T12060] total_pgpgin 192209 [ 294.540924][T12060] total_pgpgout 192202 [ 294.552458][T12060] total_pgfault 263102 [ 294.585385][T12060] total_pgmajfault 11 [ 294.607874][T12060] total_inactive_anon 28672 [ 294.623748][T12100] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 294.638798][T12060] total_active_anon 0 [ 294.650860][T12060] total_inactive_file 0 [ 294.666277][T12060] total_active_file 0 [ 294.698623][T12060] total_unevictable 0 [ 294.725042][T12060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2913,pid=12059,uid=0 [ 294.741822][T12105] loop5: detected capacity change from 0 to 1024 [ 294.756406][T11196] IPVS: stop unused estimator thread 0... [ 294.762775][T12105] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.798312][T12060] Memory cgroup out of memory: Killed process 12059 (syz.2.2913) total-vm:229336kB, anon-rss:1320kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 294.908061][T12105] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2918: Invalid block bitmap block 0 in block_group 0 [ 294.927891][T12112] __nla_validate_parse: 10 callbacks suppressed [ 294.927933][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 294.938940][T12105] loop5: lost filesystem error report for type 5 error -117 [ 294.944743][T12105] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.2918: Failed to acquire dquot type 0 [ 294.952091][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 294.952107][ C0] EXT4-fs (loop5): initial error at time 294: ext4_read_block_bitmap_nowait:483 [ 294.952125][ C0] EXT4-fs (loop5): last error at time 294: ext4_read_block_bitmap_nowait:483 [ 294.964496][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2919'. [ 294.996949][T12105] loop5: lost filesystem error report for type 5 error -117 [ 295.000682][T12105] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2918: Freeing blocks not in datazone - block = 0, count = 4096 [ 295.021387][T12105] loop5: lost filesystem error report for type 5 error -117 [ 295.022543][T12105] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2918: Invalid inode bitmap blk 0 in block_group 0 [ 295.042695][T11193] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 0 [ 295.059353][T12105] loop5: lost filesystem error report for type 5 error -117 [ 295.059407][T11193] loop5: lost filesystem error report for type 5 error -117 [ 295.069305][T12105] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 295.076730][T12127] loop3: detected capacity change from 0 to 512 [ 295.087880][T12105] loop5: lost filesystem error report for type 5 error -117 [ 295.091663][T12105] EXT4-fs (loop5): 1 orphan inode deleted [ 295.108444][T12127] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2920: corrupted in-inode xattr: invalid ea_ino [ 295.142399][T12105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.163951][T12127] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.165006][T12127] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2920: couldn't read orphan inode 15 (err -117) [ 295.174177][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 295.174197][ C1] EXT4-fs (loop3): initial error at time 295: ext4_iget_extra_inode:5128: inode 15 [ 295.174242][ C1] EXT4-fs (loop3): last error at time 295: ext4_iget_extra_inode:5128: inode 15 [ 295.230954][T12127] loop3: lost filesystem error report for type 5 error -117 [ 295.231535][T12127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.236638][T11972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.282589][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.290436][T11972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.303675][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.332499][T11972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.341408][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.357784][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.382983][T11972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.395596][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.403679][T11306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.489095][T11972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.515500][T11972] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.555227][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.562310][T11198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.573239][T12155] netlink: 'syz.3.2926': attribute type 3 has an invalid length. [ 295.596604][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.603707][ T5730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.650553][T12155] lo speed is unknown, defaulting to 1000 [ 295.661445][T12167] loop5: detected capacity change from 0 to 512 [ 295.677451][T12167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.702888][T12155] lo speed is unknown, defaulting to 1000 [ 295.828281][T12191] loop2: detected capacity change from 0 to 2048 [ 295.844225][T11972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.872758][T12191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.960670][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.988553][T11972] veth0_vlan: entered promiscuous mode [ 296.013741][T11972] veth1_vlan: entered promiscuous mode [ 296.055656][T11972] veth0_macvtap: entered promiscuous mode [ 296.069058][T11972] veth1_macvtap: entered promiscuous mode [ 296.078949][T11972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.089048][T11972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.098914][ T5730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.107667][ T5730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.117048][ T5730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.252929][ T5730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.340852][T12229] netlink: 'syz.0.2931': attribute type 1 has an invalid length. [ 296.436489][T12233] netlink: 'syz.1.2888': attribute type 9 has an invalid length. [ 296.535042][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.728012][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 296.738015][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 296.923874][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 297.284904][T12272] macsec1: entered promiscuous mode [ 297.290171][T12272] macsec1: entered allmulticast mode [ 297.509132][ T28] kauditd_printk_skb: 299 callbacks suppressed [ 297.509145][ T28] audit: type=1400 audit(296.982:11532): avc: denied { connect } for pid=12257 comm="syz.1.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 297.568592][ T28] audit: type=1400 audit(297.472:11533): avc: denied { write } for pid=12257 comm="syz.1.2941" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.715047][T12276] loop5: detected capacity change from 0 to 512 [ 297.750365][T12276] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 297.766370][ T28] audit: type=1400 audit(297.732:11534): avc: denied { mount } for pid=12279 comm="syz.3.2949" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 297.956312][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 297.983356][T12296] FAULT_INJECTION: forcing a failure. [ 297.983356][T12296] name failslab, interval 1, probability 0, space 0, times 0 [ 298.042746][T12296] CPU: 0 UID: 0 PID: 12296 Comm: syz.5.2955 Tainted: G W syzkaller #0 PREEMPT(full) [ 298.042830][T12296] Tainted: [W]=WARN [ 298.042837][T12296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.042848][T12296] Call Trace: [ 298.042855][T12296] [ 298.042863][T12296] __dump_stack+0x1d/0x30 [ 298.042904][T12296] dump_stack_lvl+0x95/0xd0 [ 298.042924][T12296] dump_stack+0x15/0x1b [ 298.042941][T12296] should_fail_ex+0x263/0x280 [ 298.042983][T12296] should_failslab+0x8c/0xb0 [ 298.043004][T12296] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 298.043033][T12296] ? __alloc_skb+0x2d6/0x690 [ 298.043061][T12296] __alloc_skb+0x2d6/0x690 [ 298.043100][T12296] ? __alloc_skb+0x200/0x690 [ 298.043171][T12296] netlink_alloc_large_skb+0xbf/0xf0 [ 298.043202][T12296] netlink_sendmsg+0x40c/0x6f0 [ 298.043222][T12296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.043242][T12296] ____sys_sendmsg+0x563/0x5b0 [ 298.043261][T12296] ___sys_sendmsg+0x195/0x1e0 [ 298.043362][T12296] __x64_sys_sendmsg+0xd4/0x160 [ 298.043421][T12296] x64_sys_call+0x194c/0x3020 [ 298.043438][T12296] do_syscall_64+0x12c/0x3b0 [ 298.043463][T12296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.043485][T12296] RIP: 0033:0x7f3b6715cdd9 [ 298.043500][T12296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.043516][T12296] RSP: 002b:00007f3b65baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.043532][T12296] RAX: ffffffffffffffda RBX: 00007f3b673d5fa0 RCX: 00007f3b6715cdd9 [ 298.043597][T12296] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 298.043613][T12296] RBP: 00007f3b65baf090 R08: 0000000000000000 R09: 0000000000000000 [ 298.043623][T12296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.043632][T12296] R13: 00007f3b673d6038 R14: 00007f3b673d5fa0 R15: 00007ffc7756e228 [ 298.043647][T12296] [ 298.267025][ T28] audit: type=1326 audit(298.212:11535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12289 comm="syz.2.2953" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c182ecdd9 code=0x7ffc0000 [ 298.301485][ T28] audit: type=1326 audit(298.212:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12289 comm="syz.2.2953" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c182ecdd9 code=0x7ffc0000 [ 298.398705][ T28] audit: type=1326 audit(298.232:11537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12289 comm="syz.2.2953" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c182ecdd9 code=0x7ffc0000 [ 298.431198][ T28] audit: type=1326 audit(298.232:11538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12289 comm="syz.2.2953" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c182ecdd9 code=0x7ffc0000 [ 298.431204][T12307] loop5: detected capacity change from 0 to 512 [ 298.431224][ T28] audit: type=1326 audit(298.232:11539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12289 comm="syz.2.2953" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c182ecdd9 code=0x7ffc0000 [ 298.431258][ T28] audit: type=1326 audit(298.232:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12289 comm="syz.2.2953" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c182ecdd9 code=0x7ffc0000 [ 298.521804][ T28] audit: type=1326 audit(298.232:11541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12289 comm="syz.2.2953" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c182ecdd9 code=0x7ffc0000 [ 298.563640][T12307] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2959: corrupted inode contents [ 298.575739][T12307] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.575967][T12307] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.2959: mark_inode_dirty error [ 298.585103][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 298.585117][ C1] EXT4-fs (loop5): initial error at time 298: ext4_do_update_inode:5690: inode 16 [ 298.585164][ C1] EXT4-fs (loop5): last error at time 298: ext4_do_update_inode:5690: inode 16 [ 298.621055][T12307] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.621345][T12307] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2959: corrupted inode contents [ 298.642314][T12307] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.642428][T12307] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2959: mark_inode_dirty error [ 298.662804][T12307] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.663124][T12307] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2959: corrupted inode contents [ 298.684091][T12307] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.684324][T12307] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 298.702208][T12307] loop5: lost filesystem error report for type 5 error -117 [ 298.702635][T12307] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.2959: corrupted inode contents [ 298.723309][T12307] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.723481][T12307] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.2959: mark_inode_dirty error [ 298.744415][T12307] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.745116][T12307] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 298.763341][T12307] loop5: lost filesystem error report for type 5 error -117 [ 298.768816][T12307] EXT4-fs (loop5): 1 truncate cleaned up [ 298.782246][T12307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.794838][ T7304] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 298.818042][T12307] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 298.869627][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.929343][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 299.400867][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2973'. [ 299.537861][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2979'. [ 299.550493][T12361] netlink: 'syz.0.2979': attribute type 28 has an invalid length. [ 299.558618][T12361] netlink: 'syz.0.2979': attribute type 29 has an invalid length. [ 299.566997][T12361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2979'. [ 299.578120][T12361] batman_adv: batadv0: Interface deactivated: dummy0 [ 299.587777][T12361] netlink: 'syz.0.2979': attribute type 13 has an invalid length. [ 299.595736][T12361] netlink: 'syz.0.2979': attribute type 17 has an invalid length. [ 299.631938][T12361] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.641154][T12361] batman_adv: batadv0: Interface activated: dummy0 [ 299.647697][T12361] batadv0: mtu less than device minimum [ 299.654071][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.664933][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.675633][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.686419][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.697394][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.708337][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.719101][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.730032][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.740767][T12361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.778088][T12361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.835545][T12361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.846658][T12380] netlink: 'syz.1.2984': attribute type 3 has an invalid length. [ 299.856039][T12361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.878510][T12361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.891274][T12361] veth1_vlan: left promiscuous mode [ 299.897234][T12361] veth0_vlan: left promiscuous mode [ 299.902847][T12361] veth0_vlan: entered promiscuous mode [ 299.911287][T12361] veth1_vlan: entered promiscuous mode [ 299.919987][T12361] veth1_macvtap: left promiscuous mode [ 299.926172][T12361] veth0_macvtap: left promiscuous mode [ 299.932468][T12361] veth0_macvtap: entered promiscuous mode [ 299.943819][T12361] veth1_macvtap: entered promiscuous mode [ 299.953013][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.964718][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.975709][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.989644][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.000766][T12361] vlan2: left promiscuous mode [ 300.005541][T12361] gretap0: left promiscuous mode [ 300.011350][T12361] batadv_slave_1: entered promiscuous mode [ 300.017176][T12361] batadv_slave_1: entered allmulticast mode [ 300.023193][T12361] macsec1: left promiscuous mode [ 300.028218][T12361] macsec1: left allmulticast mode [ 300.033300][T12361] batadv_slave_1: left allmulticast mode [ 300.050429][T12361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.096154][T12361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.150222][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.157313][ T5730] bridge0: port 1(bridge_slave_0) entered listening state [ 300.166300][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.173398][ T5730] bridge0: port 2(bridge_slave_1) entered listening state [ 300.214680][T11193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.223592][T11193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.237756][T12386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.247660][T12386] bond2 (unregistering): Released all slaves [ 300.260380][T11193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.269266][T11193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.280381][T12380] lo speed is unknown, defaulting to 1000 [ 300.286952][T12380] lo speed is unknown, defaulting to 1000 [ 300.423254][T12402] __nla_validate_parse: 2 callbacks suppressed [ 300.423338][T12402] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2991'. [ 300.447547][T12403] loop5: detected capacity change from 0 to 512 [ 300.465491][T12403] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2992: corrupted in-inode xattr: invalid ea_ino [ 300.482976][T12403] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 300.483230][T12403] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2992: couldn't read orphan inode 15 (err -117) [ 300.492396][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 300.492410][ C1] EXT4-fs (loop5): initial error at time 300: ext4_iget_extra_inode:5128: inode 15 [ 300.492439][ C1] EXT4-fs (loop5): last error at time 300: ext4_iget_extra_inode:5128: inode 15 [ 300.529600][T12403] loop5: lost filesystem error report for type 5 error -117 [ 300.530394][T12403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.531539][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'. [ 300.572088][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.793154][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 301.039092][T12476] netlink: 'syz.0.3019': attribute type 3 has an invalid length. [ 301.068684][T12476] lo speed is unknown, defaulting to 1000 [ 301.079525][T12476] lo speed is unknown, defaulting to 1000 [ 301.279132][T12483] loop2: detected capacity change from 0 to 2048 [ 301.300313][T12483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.327356][T12483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3021: bg 0: block 345: padding at end of block bitmap is not set [ 301.344393][T12483] EXT4-fs (loop2): Remounting filesystem read-only [ 301.612483][T12501] loop5: detected capacity change from 0 to 512 [ 301.620409][T12501] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3027: corrupted inode contents [ 301.632909][T12501] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 301.633027][T12501] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 301.642222][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 301.642241][ C1] EXT4-fs (loop5): initial error at time 301: ext4_do_update_inode:5690: inode 15 [ 301.642299][ C1] EXT4-fs (loop5): last error at time 301: ext4_do_update_inode:5690: inode 15 [ 301.676285][T12501] loop5: lost filesystem error report for type 5 error -117 [ 301.676795][T12501] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3027: corrupted inode contents [ 301.696044][T12501] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 301.696213][T12501] EXT4-fs error (device loop5): ext4_evict_inode:315: inode #15: comm syz.5.3027: mark_inode_dirty error [ 301.716933][T12501] EXT4-fs (loop5): 1 orphan inode deleted [ 301.723985][T12501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.744219][T10987] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.818558][T12514] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3033'. [ 301.820589][ C1] sd 0:0:1:0: [sda] tag#8132 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 301.838082][ C1] sd 0:0:1:0: [sda] tag#8132 CDB: Read(6) 08 00 00 00 00 00 [ 301.911264][T12519] FAULT_INJECTION: forcing a failure. [ 301.911264][T12519] name failslab, interval 1, probability 0, space 0, times 0 [ 301.923966][T12519] CPU: 0 UID: 0 PID: 12519 Comm: syz.1.3035 Tainted: G W syzkaller #0 PREEMPT(full) [ 301.924003][T12519] Tainted: [W]=WARN [ 301.924007][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.924013][T12519] Call Trace: [ 301.924018][T12519] [ 301.924022][T12519] __dump_stack+0x1d/0x30 [ 301.924036][T12519] dump_stack_lvl+0x95/0xd0 [ 301.924047][T12519] dump_stack+0x15/0x1b [ 301.924071][T12519] should_fail_ex+0x263/0x280 [ 301.924097][T12519] should_failslab+0x8c/0xb0 [ 301.924113][T12519] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 301.924130][T12519] ? __alloc_skb+0x2d6/0x690 [ 301.924175][T12519] __alloc_skb+0x2d6/0x690 [ 301.924191][T12519] ? __alloc_skb+0x200/0x690 [ 301.924246][T12519] netlink_alloc_large_skb+0xbf/0xf0 [ 301.924259][T12519] netlink_sendmsg+0x40c/0x6f0 [ 301.924344][T12519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.924357][T12519] ____sys_sendmsg+0x563/0x5b0 [ 301.924370][T12519] ___sys_sendmsg+0x195/0x1e0 [ 301.924465][T12519] __x64_sys_sendmsg+0xd4/0x160 [ 301.924478][T12519] x64_sys_call+0x194c/0x3020 [ 301.924490][T12519] do_syscall_64+0x12c/0x3b0 [ 301.924503][T12519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.924514][T12519] RIP: 0033:0x7f54e58bcdd9 [ 301.924569][T12519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.924579][T12519] RSP: 002b:00007f54e430f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.924590][T12519] RAX: ffffffffffffffda RBX: 00007f54e5b35fa0 RCX: 00007f54e58bcdd9 [ 301.924598][T12519] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 301.924605][T12519] RBP: 00007f54e430f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.924612][T12519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.924618][T12519] R13: 00007f54e5b36038 R14: 00007f54e5b35fa0 R15: 00007ffc037987e8 [ 301.924688][T12519] [ 302.132332][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.217461][T12534] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3041'. [ 302.227181][T12534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3041'. [ 302.242395][T12538] loop2: detected capacity change from 0 to 1024 [ 302.259309][T12538] EXT4-fs: dax option not supported [ 302.289623][T12546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3047'. [ 302.305182][T12538] loop2: detected capacity change from 0 to 512 [ 302.316707][T12538] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 302.326450][T12538] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 302.334877][T12538] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3042: bad orphan inode 4 [ 302.344972][T12538] loop2: lost filesystem error report for type 5 error -117 [ 302.345440][T12538] EXT4-fs (loop2): 1 orphan inode deleted [ 302.352768][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 302.352785][ C1] EXT4-fs (loop2): initial error at time 302: ext4_orphan_get:1423 [ 302.352810][ C1] EXT4-fs (loop2): last error at time 302: ext4_orphan_get:1423 [ 302.381119][T12538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.395953][ T3413] lo speed is unknown, defaulting to 1000 [ 302.401800][ T3413] syz2: Port: 1 Link DOWN [ 302.574537][T12562] loop3: detected capacity change from 0 to 512 [ 302.593136][T12562] EXT4-fs: Ignoring removed nobh option [ 302.619138][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 302.619149][ T28] audit: type=1400 audit(303.591:11611): avc: denied { unmount } for pid=10987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.628688][T12562] EXT4-fs (loop3): orphan cleanup on readonly fs [ 302.656314][T12562] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3053: EA inode hash validation failed [ 302.673464][T12562] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 302.695465][T12562] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.3053: corrupted inode contents [ 302.708767][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 302.715216][ C0] EXT4-fs (loop3): initial error at time 303: ext4_do_update_inode:5690: inode 15 [ 302.724442][ C0] EXT4-fs (loop3): last error at time 303: ext4_do_update_inode:5690: inode 15 [ 302.734049][T12562] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.3053: mark_inode_dirty error [ 302.750284][T12562] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.3053: corrupted inode contents [ 302.767626][T12562] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.3053: mark_inode_dirty error [ 302.781803][T12562] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.3053: mark inode dirty (error -117) [ 302.797232][T12562] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 302.808108][T12562] EXT4-fs (loop3): 1 orphan inode deleted [ 302.818334][T12562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 302.842836][ T28] audit: type=1400 audit(303.811:11612): avc: denied { connect } for pid=12561 comm="syz.3.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.866157][ T28] audit: type=1400 audit(303.811:11613): avc: denied { bind } for pid=12561 comm="syz.3.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.894922][T11306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.897253][ T28] audit: type=1400 audit(303.811:11614): avc: denied { write } for pid=12561 comm="syz.3.3053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.927975][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.938849][ T28] audit: type=1400 audit(303.811:11615): avc: denied { bind } for pid=12561 comm="syz.3.3053" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.959112][T12580] FAULT_INJECTION: forcing a failure. [ 302.959112][T12580] name failslab, interval 1, probability 0, space 0, times 0 [ 302.991500][T12580] CPU: 1 UID: 0 PID: 12580 Comm: syz.1.3061 Tainted: G W syzkaller #0 PREEMPT(full) [ 302.991604][T12580] Tainted: [W]=WARN [ 302.991610][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.991619][T12580] Call Trace: [ 302.991623][T12580] [ 302.991629][T12580] __dump_stack+0x1d/0x30 [ 302.991647][T12580] dump_stack_lvl+0x95/0xd0 [ 302.991663][T12580] dump_stack+0x15/0x1b [ 302.991750][T12580] should_fail_ex+0x263/0x280 [ 302.991772][T12580] should_failslab+0x8c/0xb0 [ 302.991793][T12580] __kvmalloc_node_noprof+0x155/0x640 [ 302.991810][T12580] ? vmemdup_user+0x2b/0xd0 [ 302.991876][T12580] vmemdup_user+0x2b/0xd0 [ 302.991917][T12580] map_lookup_elem+0x2e3/0x6b0 [ 302.991938][T12580] __sys_bpf+0x406/0x7e0 [ 302.991964][T12580] __x64_sys_bpf+0x41/0x50 [ 302.992099][T12580] x64_sys_call+0x10cb/0x3020 [ 302.992116][T12580] do_syscall_64+0x12c/0x3b0 [ 302.992157][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.992177][T12580] RIP: 0033:0x7f54e58bcdd9 [ 302.992191][T12580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.992207][T12580] RSP: 002b:00007f54e430f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.992268][T12580] RAX: ffffffffffffffda RBX: 00007f54e5b35fa0 RCX: 00007f54e58bcdd9 [ 302.992281][T12580] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000001 [ 302.992292][T12580] RBP: 00007f54e430f090 R08: 0000000000000000 R09: 0000000000000000 [ 302.992384][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.992396][T12580] R13: 00007f54e5b36038 R14: 00007f54e5b35fa0 R15: 00007ffc037987e8 [ 302.992413][T12580] [ 303.179154][T12584] loop3: detected capacity change from 0 to 2048 [ 303.200633][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.228625][T12584] EXT4-fs warning (device loop3): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 303.269811][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.311150][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.390635][T12586] lo speed is unknown, defaulting to 1000 [ 303.399256][T12586] lo speed is unknown, defaulting to 1000 [ 303.415036][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3070'. [ 303.439186][T12609] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3069'. [ 303.469568][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.484176][T12616] FAULT_INJECTION: forcing a failure. [ 303.484176][T12616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.505175][T12616] CPU: 0 UID: 0 PID: 12616 Comm: syz.3.3072 Tainted: G W syzkaller #0 PREEMPT(full) [ 303.505231][T12616] Tainted: [W]=WARN [ 303.505238][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.505249][T12616] Call Trace: [ 303.505255][T12616] [ 303.505261][T12616] __dump_stack+0x1d/0x30 [ 303.505279][T12616] dump_stack_lvl+0x95/0xd0 [ 303.505294][T12616] dump_stack+0x15/0x1b [ 303.505362][T12616] should_fail_ex+0x263/0x280 [ 303.505382][T12616] should_fail+0xb/0x20 [ 303.505399][T12616] should_fail_usercopy+0x1a/0x20 [ 303.505419][T12616] _copy_to_user+0x20/0xa0 [ 303.505472][T12616] simple_read_from_buffer+0xb5/0x130 [ 303.505564][T12616] proc_fail_nth_read+0x10e/0x150 [ 303.505627][T12616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.505646][T12616] vfs_read+0x1ab/0x7f0 [ 303.505665][T12616] ? __rcu_read_unlock+0x4e/0x70 [ 303.505684][T12616] ? __fget_files+0x184/0x1c0 [ 303.505779][T12616] ? mutex_lock+0x57/0x90 [ 303.505801][T12616] ksys_read+0xdc/0x1a0 [ 303.505872][T12616] __x64_sys_read+0x40/0x50 [ 303.505892][T12616] x64_sys_call+0x2886/0x3020 [ 303.505909][T12616] do_syscall_64+0x12c/0x3b0 [ 303.505932][T12616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.506038][T12616] RIP: 0033:0x7f0224b8d60e [ 303.506123][T12616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.506137][T12616] RSP: 002b:00007f022361efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.506198][T12616] RAX: ffffffffffffffda RBX: 00007f022361f6c0 RCX: 00007f0224b8d60e [ 303.506211][T12616] RDX: 000000000000000f RSI: 00007f022361f0a0 RDI: 0000000000000005 [ 303.506222][T12616] RBP: 00007f022361f090 R08: 0000000000000000 R09: 0000000000000000 [ 303.506233][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.506278][T12616] R13: 00007f0224e46038 R14: 00007f0224e45fa0 R15: 00007fff975e1818 [ 303.506293][T12616] [ 303.714075][ T28] audit: type=1400 audit(304.681:11616): avc: denied { node_bind } for pid=12617 comm="syz.2.3073" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 303.745708][ T28] audit: type=1400 audit(304.681:11617): avc: denied { wake_alarm } for pid=12617 comm="syz.2.3073" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.833168][ T49] bridge_slave_1: left allmulticast mode [ 303.847506][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3071'. [ 303.866690][ T49] bridge_slave_1: left promiscuous mode [ 303.891849][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.948833][ T7304] net_ratelimit: 61 callbacks suppressed [ 304.948852][ T7304] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 305.498860][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 305.674047][ T49] bridge_slave_0: left allmulticast mode [ 305.680618][ T49] bridge_slave_0: left promiscuous mode [ 305.686446][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.772164][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.784106][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.795065][ T49] bond0 (unregistering): Released all slaves [ 305.808858][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 305.858382][T12655] FAULT_INJECTION: forcing a failure. [ 305.858382][T12655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.881640][T12655] CPU: 1 UID: 0 PID: 12655 Comm: syz.1.3078 Tainted: G W syzkaller #0 PREEMPT(full) [ 305.881722][T12655] Tainted: [W]=WARN [ 305.881728][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.881739][T12655] Call Trace: [ 305.881745][T12655] [ 305.881752][T12655] __dump_stack+0x1d/0x30 [ 305.881774][T12655] dump_stack_lvl+0x95/0xd0 [ 305.881805][T12655] dump_stack+0x15/0x1b [ 305.881819][T12655] should_fail_ex+0x263/0x280 [ 305.881839][T12655] should_fail+0xb/0x20 [ 305.881856][T12655] should_fail_usercopy+0x1a/0x20 [ 305.881948][T12655] _copy_from_iter+0xcf/0xea0 [ 305.881973][T12655] packet_sendmsg+0x1ef0/0x3240 [ 305.881999][T12655] ? __rcu_read_unlock+0x4e/0x70 [ 305.882028][T12655] ? avc_has_perm_noaudit+0xab/0x130 [ 305.882055][T12655] ? selinux_socket_sendmsg+0x192/0x1c0 [ 305.882084][T12655] ? __pfx_packet_sendmsg+0x10/0x10 [ 305.882134][T12655] ____sys_sendmsg+0x563/0x5b0 [ 305.882153][T12655] ___sys_sendmsg+0x195/0x1e0 [ 305.882185][T12655] __x64_sys_sendmsg+0xd4/0x160 [ 305.882268][T12655] x64_sys_call+0x194c/0x3020 [ 305.882289][T12655] do_syscall_64+0x12c/0x3b0 [ 305.882328][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.882347][T12655] RIP: 0033:0x7f54e58bcdd9 [ 305.882361][T12655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.882448][T12655] RSP: 002b:00007f54e430f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.882466][T12655] RAX: ffffffffffffffda RBX: 00007f54e5b35fa0 RCX: 00007f54e58bcdd9 [ 305.882481][T12655] RDX: 0000000020040890 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 305.882492][T12655] RBP: 00007f54e430f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.882510][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.882521][T12655] R13: 00007f54e5b36038 R14: 00007f54e5b35fa0 R15: 00007ffc037987e8 [ 305.882568][T12655] [ 306.083300][ T5730] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.110391][ T49] hsr_slave_0: left promiscuous mode [ 306.117452][ T49] hsr_slave_1: left promiscuous mode [ 306.137412][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.166071][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.193241][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.216522][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.232786][ T49] veth1_macvtap: left promiscuous mode [ 306.244297][ T49] veth0_macvtap: left promiscuous mode [ 306.256850][ T49] veth1_vlan: left promiscuous mode [ 306.266919][ T49] veth0_vlan: left promiscuous mode [ 306.369744][T12686] cgroup: noprefix used incorrectly [ 306.411808][ T49] team0 (unregistering): Port device team_slave_1 removed [ 306.444430][ T49] team0 (unregistering): Port device team_slave_0 removed [ 306.526433][T12664] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3082'. [ 306.538310][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 306.546891][T12684] tipc: Started in network mode [ 306.551969][T12684] tipc: Node identity ac1414aa, cluster identity 4711 [ 306.558878][T12684] tipc: Enabled bearer , priority 10 [ 306.569225][T12586] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.576298][T12586] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.583376][T12586] bridge_slave_0: entered allmulticast mode [ 306.589789][T12586] bridge_slave_0: entered promiscuous mode [ 306.596412][T12586] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.603461][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.610528][T12586] bridge_slave_1: entered allmulticast mode [ 306.616588][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.620804][T12586] bridge_slave_1: entered promiscuous mode [ 306.664697][T12586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.675333][T12586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.695141][T12586] team0: Port device team_slave_0 added [ 306.701820][T12586] team0: Port device team_slave_1 added [ 306.732448][T12586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.741065][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.770636][T12586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.782945][T12586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.790115][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.816257][T12586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.827582][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 306.852231][T12586] hsr_slave_0: entered promiscuous mode [ 306.858210][T12586] hsr_slave_1: entered promiscuous mode [ 306.864243][T12586] debugfs: 'hsr0' already exists in 'hsr' [ 306.870085][T12586] Cannot create hsr debugfs directory [ 306.941667][T12586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.950289][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.957860][T12586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.967716][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.975858][T12586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.984754][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.992692][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 307.000725][T12586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.009502][T12586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.066723][T12586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.138795][ T7304] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 307.363867][T12748] loop2: detected capacity change from 0 to 256 [ 307.385937][ T28] audit: type=1400 audit(308.351:11618): avc: denied { getopt } for pid=12747 comm="syz.2.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.411503][T12586] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.625187][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.632263][T11198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.649326][ T3079] tipc: Node number set to 2886997162 [ 307.660139][ T5730] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 307.676432][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.683516][T11198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.706023][ T28] audit: type=1400 audit(308.671:11619): avc: denied { write } for pid=12755 comm="syz.2.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 307.729331][T12752] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.746264][T12586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.760781][T12586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.839957][ T28] audit: type=1400 audit(308.811:11620): avc: denied { ioctl } for pid=12775 comm="syz.0.3096" path="socket:[38922]" dev="sockfs" ino=38922 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.877601][T12780] loop2: detected capacity change from 0 to 512 [ 307.884950][T12780] EXT4-fs: inline encryption not supported [ 307.903073][T12780] ext2: Unknown parameter 'smackfshat' [ 307.931489][T12586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.420015][ T5730] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 308.434415][ T28] audit: type=1400 audit(309.211:11621): avc: denied { shutdown } for pid=12775 comm="syz.0.3096" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.963490][T12809] netlink: 'syz.2.3101': attribute type 3 has an invalid length. [ 308.971556][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 309.002572][T12809] lo speed is unknown, defaulting to 1000 [ 309.014427][T12809] lo speed is unknown, defaulting to 1000 [ 309.074826][T12586] veth0_vlan: entered promiscuous mode [ 309.092801][T12586] veth1_vlan: entered promiscuous mode [ 309.124707][T12586] veth0_macvtap: entered promiscuous mode [ 309.140768][T12586] veth1_macvtap: entered promiscuous mode [ 309.162694][T12586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.185575][T12586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.207031][T11196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.228353][T11196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.254715][T11196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.264008][T12813] Cannot find set identified by id 0 to match [ 309.273638][T12831] netlink: 'syz.0.3107': attribute type 3 has an invalid length. [ 309.283154][T11196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.316991][T12831] lo speed is unknown, defaulting to 1000 [ 309.323094][T12831] lo speed is unknown, defaulting to 1000 [ 309.355064][T12835] netlink: 'syz.6.3063': attribute type 1 has an invalid length. [ 309.365541][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3063'. [ 309.474363][ T28] audit: type=1326 audit(310.441:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.6.3109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29034acdd9 code=0x7ffc0000 [ 309.478052][T12847] loop6: detected capacity change from 0 to 512 [ 309.505051][ T7304] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 309.517256][ T28] audit: type=1326 audit(310.441:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.6.3109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29034acdd9 code=0x7ffc0000 [ 309.537970][T12837] lo speed is unknown, defaulting to 1000 [ 309.546582][ T28] audit: type=1326 audit(310.441:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.6.3109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29034acdd9 code=0x7ffc0000 [ 309.557442][T12837] lo speed is unknown, defaulting to 1000 [ 309.575895][T12847] EXT4-fs (loop6): 1 truncate cleaned up [ 309.591993][T12847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.613264][ T28] audit: type=1326 audit(310.441:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.6.3109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29034acdd9 code=0x7ffc0000 [ 309.638305][ T28] audit: type=1326 audit(310.441:11626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.6.3109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29034acdd9 code=0x7ffc0000 [ 309.663419][ T28] audit: type=1326 audit(310.441:11627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.6.3109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29034acdd9 code=0x7ffc0000 [ 309.689050][ T28] audit: type=1326 audit(310.441:11628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12846 comm="syz.6.3109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29034acdd9 code=0x7ffc0000 [ 309.695391][T12847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=12847 comm=syz.6.3109 [ 309.769278][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3109'. [ 309.793701][T12837] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.801694][T12837] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.809064][T12837] bridge_slave_0: entered allmulticast mode [ 309.815605][T12837] bridge_slave_0: entered promiscuous mode [ 309.822429][T12837] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.829557][T12837] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.836725][T12837] bridge_slave_1: entered allmulticast mode [ 309.843340][T12837] bridge_slave_1: entered promiscuous mode [ 309.891590][T12586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.909148][T12837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.931051][T12837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.972532][T12837] team0: Port device team_slave_0 added [ 309.984793][T12837] team0: Port device team_slave_1 added [ 309.985537][T12870] loop6: detected capacity change from 0 to 2048 [ 309.999359][T12863] FAULT_INJECTION: forcing a failure. [ 309.999359][T12863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.017996][T12876] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 310.024088][T12863] CPU: 1 UID: 0 PID: 12863 Comm: syz.3.3111 Tainted: G W syzkaller #0 PREEMPT(full) [ 310.024117][T12863] Tainted: [W]=WARN [ 310.024142][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.024153][T12863] Call Trace: [ 310.024160][T12863] [ 310.024167][T12863] __dump_stack+0x1d/0x30 [ 310.024189][T12863] dump_stack_lvl+0x95/0xd0 [ 310.024208][T12863] dump_stack+0x15/0x1b [ 310.024241][T12863] should_fail_ex+0x263/0x280 [ 310.024328][T12863] should_fail+0xb/0x20 [ 310.024348][T12863] should_fail_usercopy+0x1a/0x20 [ 310.024400][T12863] _copy_to_iter+0xd2/0xea0 [ 310.024431][T12863] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 310.024455][T12863] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 310.024476][T12863] ? __list_del_entry_valid_or_report+0x65/0x130 [ 310.024523][T12863] tun_do_read+0x12c0/0x1600 [ 310.024554][T12863] tun_chr_read_iter+0x176/0x250 [ 310.024583][T12863] do_iter_readv_writev+0x4fd/0x5a0 [ 310.024651][T12863] vfs_readv+0x1f4/0x6e0 [ 310.024674][T12863] do_readv+0xe9/0x210 [ 310.024731][T12863] __x64_sys_readv+0x45/0x50 [ 310.024755][T12863] x64_sys_call+0x27c0/0x3020 [ 310.024811][T12863] do_syscall_64+0x12c/0x3b0 [ 310.024832][T12863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.024850][T12863] RIP: 0033:0x7f0224bccdd9 [ 310.024865][T12863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.024884][T12863] RSP: 002b:00007f022361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 310.024903][T12863] RAX: ffffffffffffffda RBX: 00007f0224e45fa0 RCX: 00007f0224bccdd9 [ 310.024916][T12863] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 310.024928][T12863] RBP: 00007f022361f090 R08: 0000000000000000 R09: 0000000000000000 [ 310.024940][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.024951][T12863] R13: 00007f0224e46038 R14: 00007f0224e45fa0 R15: 00007fff975e1818 [ 310.025048][T12863] [ 310.045259][T12837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.045273][T12837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.045294][T12837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.045741][T12837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.045750][T12837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.045808][T12837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.063019][T12837] hsr_slave_0: entered promiscuous mode [ 310.076295][ T5730] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.086496][T12880] netlink: 'syz.2.3118': attribute type 3 has an invalid length. [ 310.089311][T12837] hsr_slave_1: entered promiscuous mode [ 310.094975][T12870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.097004][T12837] debugfs: 'hsr0' already exists in 'hsr' [ 310.369620][T12586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.369786][T12837] Cannot create hsr debugfs directory [ 310.452821][T12837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.511637][T12837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.538044][T12895] loop6: detected capacity change from 0 to 512 [ 310.563948][T12895] EXT4-fs (loop6): 1 truncate cleaned up [ 310.572019][T12895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.583961][T12837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.594513][T11193] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 310.612630][T12895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=12895 comm=syz.6.3122 [ 310.667065][T12837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.707491][T12586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.741167][T12837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.119063][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.324998][T12913] loop2: detected capacity change from 0 to 2048 [ 311.386326][T12913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.638950][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 312.051056][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.102226][T12917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12917 comm=syz.1.3130 [ 312.158781][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 312.679429][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 312.716578][T12837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.733715][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.742049][T12837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.805581][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.807128][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.821304][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 312.821316][ T28] audit: type=1326 audit(313.791:11805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 312.822354][T12837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.839630][ T28] audit: type=1326 audit(313.801:11806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 312.888433][T12837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.901262][ T28] audit: type=1326 audit(313.801:11807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 312.935030][ T2] ================================================================== [ 312.943111][ T2] BUG: KCSAN: data-race in alloc_pid / copy_process [ 312.949689][ T2] [ 312.951991][ T2] read-write to 0xffffffff86c5c3a8 of 4 bytes by task 12929 on cpu 1: [ 312.960118][ T2] alloc_pid+0x6ca/0x950 [ 312.964349][ T2] copy_process+0x11a2/0x23a0 [ 312.969002][ T2] kernel_clone+0x1a5/0x5e0 [ 312.973485][ T2] __se_sys_clone3+0x1f5/0x230 [ 312.978228][ T2] __x64_sys_clone3+0x31/0x40 [ 312.982884][ T2] x64_sys_call+0x580/0x3020 [ 312.987455][ T2] do_syscall_64+0x12c/0x3b0 [ 312.992026][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.997908][ T2] [ 313.000210][ T2] read to 0xffffffff86c5c3a8 of 4 bytes by task 2 on cpu 0: [ 313.007468][ T2] copy_process+0x1b1d/0x23a0 [ 313.012122][ T2] kernel_clone+0x1a5/0x5e0 [ 313.016603][ T2] kernel_thread+0xe5/0x120 [ 313.021084][ T2] kthreadd+0x25b/0x320 [ 313.025224][ T2] ret_from_fork+0x146/0x330 [ 313.029800][ T2] ret_from_fork_asm+0x1a/0x30 [ 313.034543][ T2] [ 313.036842][ T2] value changed: 0x800000f7 -> 0x800000f8 [ 313.042535][ T2] [ 313.044837][ T2] Reported by Kernel Concurrency Sanitizer on: [ 313.050965][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 313.061358][ T2] Tainted: [W]=WARN [ 313.065138][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.075169][ T2] ================================================================== [ 313.083513][ T28] audit: type=1326 audit(313.801:11808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 313.109392][ T28] audit: type=1326 audit(313.831:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 313.143453][ T28] audit: type=1326 audit(313.831:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 313.193405][ T28] audit: type=1326 audit(313.831:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 313.220298][T11192] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 313.236584][ T28] audit: type=1326 audit(313.831:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 313.250402][T12837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.265039][ T28] audit: type=1326 audit(313.831:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 313.283666][T12837] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.299821][ T28] audit: type=1326 audit(313.831:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12921 comm="syz.3.3131" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0224bccdd9 code=0x7ffc0000 [ 313.334134][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.341214][T11198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.356378][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.363491][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.506247][T12837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.578263][T12837] veth0_vlan: entered promiscuous mode [ 313.587423][T12837] veth1_vlan: entered promiscuous mode [ 313.604704][T12837] veth0_macvtap: entered promiscuous mode [ 313.612437][T12837] veth1_macvtap: entered promiscuous mode [ 313.631204][T12837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.641945][T12837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.652168][T11198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.661221][T11198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.670055][T11198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.680595][T11198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.738972][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 314.258798][T11198] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 314.778805][ T5730] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.298835][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 315.808889][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 315.815981][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 315.823199][ T7304] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.338833][ T5730] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.858822][ T7304] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 317.378852][T11192] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 317.899169][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 318.418798][T11192] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 318.938890][T11192] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 319.468869][ T7304] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 319.988820][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 320.508805][T11192] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 321.029148][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 321.548789][T11192] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.068778][T11192] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.588844][ T49] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01