last executing test programs: 27.603428208s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 26.170400066s ago: executing program 0 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 2) 24.453910869s ago: executing program 1 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000a40)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18030000f000000000000000ff00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b50200001400000085000000c6000000bc0900000000000055090100240000009500000000000000bf4d9abb5584387af6020000010000008500000001000000b700d30000000000950000000000000014762298f50b67723beb9f3a10cf010af901ece86b852487faff35152f5a79dec80c4f24d18534ec32d57fdec484b22e23442c52"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e24, @loopback}, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, 0x1}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 23.945705569s ago: executing program 0 (id=50): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8, 0xf39, 0x2, 0xaecb, 0xffffffff, 0x4000, 0x7fff, 0xdd}, 0x20) 23.895192948s ago: executing program 32 (id=50): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8, 0xf39, 0x2, 0xaecb, 0xffffffff, 0x4000, 0x7fff, 0xdd}, 0x20) 23.692463719s ago: executing program 2 (id=53): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 23.685978757s ago: executing program 1 (id=54): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r2], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) close(0x4) 23.453897552s ago: executing program 1 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a3100000000050004000000000014000300686173683a69702c706f72742c6970000c000780080006400000000005000500020000000500010006000000d8c64e14ac7a43f42a7b64319c1b084323078fa3bd9d09b4b3eec1292f0761c187a081281beb4379306ccf59f62458a4bfd7f38a2e0c92d71525d7804ba0ef688141"], 0x58}}, 0x0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$isdn_base(0x22, 0x3, 0x0) memfd_create(0x0, 0x20) sendmmsg(r4, &(0x7f0000000100)=[{{&(0x7f0000000040)=@phonet={0x23, 0x4, 0x5, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="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", 0x1000}], 0x1}}], 0x1, 0x0) 23.428331347s ago: executing program 1 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IEDIJA4gITEpRxDklalboOaINGqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQrlQuFktPZu/IjtJsGJS/35SNvM7I498/Xs2LM73QAG1lj2TxKxNyJ+jYiRWra5wFjtz82VK7N/rVyZTaJSefOPpFruz5Urs0XR4nV78sx4GpF+ksThNvUuXrp8bqZcnr+Y5yeXzr87uXjp8tNnz8+cmT8zf2H65MkTx6eee3b6mZ7EeVfW1kMfLBw5+Opb116fPXXt7R+/Tor4W+LokbFuBx+rVHpcXX/ta0gnQ31sCBtSioisu4ar438kSlHvvJF45eO+Ng7YUpVch8PLFeAOlkS/WwD0R/FDn13/Ftv2zT7678aLtQugLO6b+VY7MhRp1C6Mhluub3tpLCJOLf/9RbbF1tyHAABo8m02/3mq3fwvjXsbyv0/XxsazddS9kfE3RFxICLuiaiWvS8i7t9g/a2LJGvnP+n1TQW2Ttn87/l8bat5/pcWRUZLeW5fNTOcnD5bnj+WfybjMbwzy091qeO7l3/5rNOxxvlftmX1F3PBvB3Xh3Y2v2ZuZmnm38Tc6MZHEYeG2sWfrK4EJBFxMCIObbKOs098daTTsdb4K0m3d3qhOduDdabKlxGP1/p/OVriLyTd1ycn/xfl+WOTxVmx1k8/X32jU/237v+tlfX/7rbn/2r8o0njeu3ixuu4+tunHa9pJjZ1/td37Mj/vj+ztHRxKmJH8lqt0Y37p+uvLfJF+Sz+8aPtx//+qH8ShyMiO4kfiIgHI+KhvO8ejohHIuJol/h/eOnRdzodux36f66l/0ebi7T0fz2xI1r3tE+Uzn3/TfM71pPr+/47UU2N53vW8/23nnZt7mwGAACA/540IvZGkk6sptN0YqL2f/gPxO60vLC49OTphfcuzNWeERiN4bS401W7H1y7HzqVX9YX+emW/PH8vvHnpV3V/MTsQnmu38HDgNvTYfxnfi/1u3XAlvO8Fgwu4x8Gl/EPg8v4h8HVZvzv6kc7gO3X7vf/w3qyMrKdjQG2Vcv4t+wHA8T1Pwwu4x8GV+P47/r8PXAnWdwVt35IXkJiTSLS26IZvUkkWzwK9vY7wI0n+v3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BAAA///oO+WP") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 22.708329265s ago: executing program 1 (id=60): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) (fail_nth: 2) 22.484777811s ago: executing program 2 (id=61): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 22.22423864s ago: executing program 2 (id=63): r0 = socket(0x2, 0x80805, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="cc006c6cf7"], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x152}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0xffffffe8, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x20200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200820, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd=r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="36f0", 0x2}], 0x1, 0x18, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 22.045981625s ago: executing program 1 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0xd, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x4c}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x40000000002, 0x100000000, 0x100000000000001, 0x100000009, 0xfffd, 0xc, 0x2881000004000009, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) 22.004171377s ago: executing program 33 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0xd, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x4c}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x40000000002, 0x100000000, 0x100000000000001, 0x100000009, 0xfffd, 0xc, 0x2881000004000009, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) 21.927872262s ago: executing program 2 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 21.232629325s ago: executing program 2 (id=71): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x80, 0x100, &(0x7f0000006680)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000392000/0x1000)=nil, 0x1000, 0xd) open_by_handle_at(0xffffffffffffffff, 0x0, 0xae100) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffffffffffff, 0x400) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x1000, 0x2, 0x2, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001800010000000000000000000200000000000009000000000600150002000000100016800c00088008"], 0x34}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(r4, 0x0, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r6, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r7, 0x0, 0x0}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) 20.993983428s ago: executing program 2 (id=72): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 20.989725937s ago: executing program 34 (id=72): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 13.322211199s ago: executing program 7 (id=120): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 11.728449696s ago: executing program 7 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 10.753256544s ago: executing program 7 (id=138): r0 = socket(0x23, 0x800, 0x3ff) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f000000b400)={0x0, 0xcf, "8dd07a154ccb50b546fd2c5a6245661a029990ce3b6d0a370bee51ce2f20cb9a45cc71a393ac8517fbbe76cf18e682ab8de4719aaeee25f81559742315c22ab3a000758595c7cb620e4e7efafa4646af43e468686b3d7cc183953b19bdb9dae9e27b80bbba4b2b14e81b3e6deb08b21377c3df53fe4566e0e505c2565b671f884a8dc65a3ab4e9b35267d61568a759183215c68819da85424f263bc739b0236d27b0dace388431ac967bf644ab07f5e7fc5df55469f65bad1c895da0716061b2e73728f495487c576980a78ca639fa"}, &(0x7f000000b500)=0xd7) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000b580), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f000000b640)={&(0x7f000000b540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b600)={&(0x7f000000b5c0)={0x40, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$802154_dgram(r0, &(0x7f000000d900)={&(0x7f000000d840)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14, &(0x7f000000d8c0)={&(0x7f000000d880)="873549592a6f63cebdf72c716a41792f160a5f5120b4fc446e2e731bde5560cbb1bf8c2cdf7a6eab473725293e5b41a6ab2f6342193b97de2c9b889ae30505", 0x3f}, 0x1, 0x0, 0x0, 0xc000}, 0x20004045) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f000000d940)={'nat\x00', 0xf7, "d31948bdc12817492c0e2ba33c667e7d1fa6211204b114397b7a28ed350e66262b868a5a8825ffc4424b88dd630ed2d3b0a8fcadfa700731d32f7ddb2816551d3ac715b08ee29b90fabf7f20b0b9e320524f9bb6d6a8e0c7ef331722a978009e126b188a5420665f440c44f2f58da6209437587d30522f7b3139d84a434f0753a4417fb485f1300c3bc619341702d4114a53210846ff86dcbe6a431890b3d7ee5dd25bcacd4e9547655459bb5d0e17aae8a7471875e896cab016bf5dbf0c8fe63c31cdeb6bfdf276f027a9949263eafd3202d71b79fd5b7453321a0cca86246b6ac022dced594e4c42bc7835f05990b54113ab2466fd43"}, &(0x7f000000da80)=0x11b) 10.601617175s ago: executing program 7 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 9.779222003s ago: executing program 7 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8a626319f48ffc54553d60508b9ffad733c6e10766de5a66531a7d74eb6818291aa44ff3a4f742ae86d6f8e3830740271bb32803e86", 0x36}], 0x1}, 0x404481c) (fail_nth: 2) 8.865386313s ago: executing program 7 (id=156): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x40) 8.772853645s ago: executing program 35 (id=156): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x40) 8.243344571s ago: executing program 6 (id=164): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 8.056925684s ago: executing program 6 (id=167): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = fcntl$getown(r0, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0001083c0001800c00028005000100000000002c00018014000300fe8800000000000000000000000001011400040000000000000000000000ffff0a0101023c0003800c00028005000100000000002c00018014000300fc0000000000000000000000000000007c7b0400000000000000000000000000000000013c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400"], 0xc8}}, 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r2, @ANYBLOB="000326bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00632708e29981260112460b4c0710849450ec1921c2f4", @ANYRES32=r5, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r6, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000"], 0xdc}}, 0x44000) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000680)="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", 0x19c}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x4, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.833791524s ago: executing program 6 (id=177): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 6.51148994s ago: executing program 6 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@errors_remount}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x6c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) 5.842865729s ago: executing program 6 (id=185): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0xfe}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9a98, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="ee71", 0x2}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setregid(0xffffffffffffffff, 0x0) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 5.499323811s ago: executing program 6 (id=190): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x9, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getpid() syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) personality(0xfe47fef9f5ff7379) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) migrate_pages(0x0, 0x171, 0x0, 0x0) 5.468705525s ago: executing program 36 (id=190): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x9, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getpid() syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) personality(0xfe47fef9f5ff7379) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) pidfd_send_signal(r1, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x40000004, 0x0) migrate_pages(0x0, 0x171, 0x0, 0x0) 2.663420444s ago: executing program 8 (id=157): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2b, 0x1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r3, 0x4, 0x6c00) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r7, &(0x7f0000006dc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="3a822d6f0306bc598a25fbf98ce3df61eddbb19384ec19a1b8cc10cf952b7536e16239cb61c3ba224865dadc4b1088ed0ce5c9ede116bbde6c3a8329413526b61ec377c0f2833a31b0ec1819ae320ead44ca256a14c3c29f6fea826ce6dfcdbde79656574caca7d33f43358c1f09d1809f0fc894ad8dc2339e2acbd7b63580ad7b88bc00000000000000", 0x8a}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc4069c2e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced3bf6d67479cac4f1a1f9b67512acad7521711c33", 0xd7}, {&(0x7f00000006c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d4d4ba1cf8c4fdde03e83abbdf73e695f165346a78d8d79108d9b516d9abf09a136ab52d0e19dfb2f00bb046d00000000001b000000000010000000", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="9d70b2a7c34e6a7f3116cfa2b021c3136e6530cfe2b242564adf52d96187131c30b12cada737", 0x26}, {&(0x7f0000000100)="7b4bcc9089864d85e764b6bba256e6af91e69ae71ffef7df313e92c30fed65dae5961c2c163fb13606ee96db7249efdb195eb6cbc8462a0b7df5e9a2f2555d3959af1ca406f89e87409474f6c69230cbc89e4052b59bf2d40986e6547ee78b4c36db49a35f2949daa1dadcdb43d5cfb31839d3ce23eccf139ef9c2286a326d1ca5e18e449fe954cb9d33eb4e6761f41cefcaf0c88adc59a283c091f645fecade2b37c10bf3", 0xa5}, {&(0x7f0000000280)="02d3f3e048e65d33e396c2b739cf5b78f9dbc918cd90d3384c2ca9d13f9ad152d4bb2f24a81055e2dd62fdb073f9cd0926c6c9f54896a6522cb14a6dcee80743e8fac9d91c9acebddf920aabd09f4a9aa975877619996a34ff58778b57b6da8e8938b6bc82ad33f637cf60ae5fd21872cf134af66123e18917194dc67bffef0800960c500a", 0x85}, {&(0x7f0000000980)="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", 0x1a9}, {&(0x7f0000000480)="0aa732c38ba9f4ae98f8528cb4a558d6b836a04da29c5fabcb595bbb896d766f9073be7b0346b0ec225618bb72c878b4ac8e1cdadff66cbc6545652f2aba12fce7ee8fc1870ac0d6192d95cf39de108fbd34da90483f34083ffee7980365", 0x5e}, {&(0x7f0000000dc0)="128057c3ecdf99f18b48f0aae1987a57df52c3df6ef6655a29ada4e07fb82bc16b6d09acfd6561625554fabc92cec26138ba1e641d459b332d808d7d7acd57cf2abd209c59d2e676d3a25b109b1ded08377acc67fbd4015e03a13b9f761db934b988d34f45530b2bc710f89c2b0004f62a14c65f6c1a0c018bea98af07fa1dfeb41459930a71e9628b87defa7de243b58eb9eabdcfcedb666bfe5f", 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000440)="40cbb78ddd15003c74339803e041837ce32437861e0bb6726a36a5bd46462c6d27ffe7bca5812a24dfe76907", 0x2c}, {&(0x7f0000000e80)="4ed0e951d86f4bfe0b9c4a0e3547037c2db0ad38956c1c13da5adf7af40c0809173b40b5cb00ed677558e92eeedc0e4fa67422b5ffb81deaa9199c785e7e9a730014e641cfea8b04d6f7ef9f37b99aafa88e805e5118165c038461672f0f328d83e387630cea00cd2b7e564851a4396f3a7006ff4f3daef61888c3238e244d00d7d424710fd77272fd5f2512e52529194343184926a2f30e67d4691a522077384f512b201b4b9ef67cdddb05ab1d0ae4965b4244042c4c3313537641cc335cedc902135071", 0xc5}, {&(0x7f0000000900)="0a7a73ae158b7d997e84979be4c592a29018f838e7e0a7afe7c03be49a7a1e6a146fbbab7facb6ca6b47f1a98ccd6f375e292eb681305070ca618235395737819c43", 0x42}, {&(0x7f0000000f80)="e1cc4ef54ef0fcec70f131fe6eb980e365f954d31cfe664c3139987f40c20e1bfe0cdd1dcb9e63b5629f1133d9c3249eafdd41e3bfbed62249c88fb888f68a3c8aefc64f82eb64a18477f50b4ccbcba26819c920e4f4b4008f9dd6108cd9fce22c1e83fb044bf1ebf740f18e2c339a81d7c2e8140c6a95ad11bbbfee71fb33acb45899ad94747f91bb09712280be061f6039a90d47ee7fefc61fc6862ee0cd017d98e5a4789c791f28ed55f6228f20f3f71e78c6d8b3ffbef7a2fcdacc516f59cefb78cf9650e35a5031c1992cf6275360c64ff0ba336628a07fd6ceaada472756df34246ba8d40688102be779b473", 0xef}, {&(0x7f0000001900)="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", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000002900)="7ef112cf82aa960ab042db237ecefe40130c0c2c925eeede4a1afb3d2faeaf3ac0344aac36fc61da9aa74fe009290cb94c5c4cf2fbeef880f0a452b8d0659518d20137c29d5d1a8bed22af62ee9e2aff81f95470551ffd10ba507ad96102dc7e1b40a8d6ea3521cfc682ca57af721f13ec0a666ba9dee81f2a1e084c4e9db34f443b752368170305827bb5bfb30df2b64947a80a66d18838b3714e8ff0921436937018582fcfb38da39db44656a08a0e5287d03563934c5346d4c00eb291d9b7a906b527415d68747afa49c6c386e7da8bf5e2f0ae4c3051b6981c7701aa6952e2a7c21881a4d19c5356be20faf9635bcb110db2f4698de1fde38f200ed02fa20275903eb3dddb1bab6e7b8891db261987cb83f583fe6d4d2963d08024c807306bec95cb66c5c060ee11bcfb4e5c5d065eeacd68e36473f2824e63447c85b0ed68766ecba1424bde699b0a759d6947dc490349335ae73af915a97e4670e6feaf5e2d2649876a34c41f9600eb5883cb97a81ada071a2e7f6381bc5cfa2455d0af39aaf34248df9fbcadc5ac44c8ca14efebb348a0e1bb59413dd864d46bb7b54d9ace312663a6e08cc7d4c32a2460bb8ed4830b28da5fa289703fd91ab128ef6d8ac029099a36ee2f129ed0fc92bee7bc21a26aa2c5aa4934bcb075dd297a0ab1c2748cdd34253e73f531e6a46c0d84e1c79cfb10a5fee4d4e2b849423be204c9dc99ac66afde651f54bce36f9f12f13c42e2710fec745dd90ed8ee74e601a4518c763d98b5a1903870f6f92040fc6ee559ec3916715a6a8ba25fbe3a25b8d0f91908061c1761c0b8a6d1652860e4d88996e328feec3c305e83264e1e380871c5ce5cd2cbddf1f1eb3bf0cdfc156f2612bb6a5ab8a875497fdf1bd42f9907be8ccbf2c711047c08190ad09d6624300e1d0c859dee3041608f61ff7e7da95de2e6f02276e6fdfb464664ec3b527395b63646ef3f874560b79adc41ad242d01ded6cf7c5af65efc2e690c3b96888cd03cdc77f12bd3e88355194e1aea1e9a450e2bf797c6d3b9c9afccaf727028eb1c3154f86b7ff3aebc5df2e443c1d63781431752e0f52ae0588c887296ffa0e2c6f15651adce10fafb31abf314ca960178ca9b43f709b26c55e8d7d3579eb1facedc30476f66ebe4e5f346d08d6dfacbaa4f518c1c04babb42f6bee26080b83489149b0a26bafb86a542bd9b36f173f98f87dafe2621dcdbc758dcccffaee0fa5f21f891525156ca4b3f1b4e0c71f1c51da092fe5136c17e68d638909b16228cf60d1d76995baa75776e8b676e1519ebd41e77937b513e317c20c92b6b751be6f13a2cea3955d1cd38f55bf0e233ac38714514646c39c6f17925d630dd2d06a8f99886f1aa847424dd5faf256935badd5d8075866a3474b3874003dffb5eb3e9ae34f9df4038a78e130aeda51447dbe0a069cb232991e3998e4825c6a86ee537f20f189b5e08d08982e2fdc74bb0b0c9d2337c167bb76946e92b4349c4115d55e935eb3dae99cf5db689a5884834c82c057f9ea4d44d9a102359e877b632da084f8c16ee872da9b9a017d9772ca3bc9b3853f135b78c6ad9ebc4977a7fa69185eaccc9bd6f360e5038a066b4bb7495e29fb0ae6eceea06f85a84af12482cb2ee3302fa7e3768a71be9f378984ed63bda5cef27257cb5730b362f145ccd9775fec45eb55abc7a3e7b61dba4f07a8aae2358b60888bd0533c2bf24314cbddf491c5f83007fbf25e13c3bf804f1040cc60d67856379b9bb88f02df76a80c2cf59ebec7b8dfb235965b61317a2035d780811cb94241c562636a3d5596ed9e066ba7197d6b0ba62b0d6435028256774cd9be615c9df94f55466ccb8ebee385ed33d8105aeab6e424e9fed9c027a5e34e2aba263152c82038253980c833917f9711fe55e5a780923c7fb576e163d2b398d695b4b67def6e3b20d024528897076cc86838c8ea49e04c787650a97b8ab4515a70a4f8610c0c722a263391074bd526d6e63becff81ed4bacfeceba0543d8043f85c3d858f1683f224ea12a8d6d919060ac4eff8fa4de0783c194ef4cb4a4d419005869e5ddb7c985606d33ea7a39e5a840d4550475ada13cf7e01db723dbeafa466bdf28252b580a4491273889f082798bc1b84fbfdd46331ff5fb85fd995dcbb2e09640f094d628ae1d6dd430d78795ff94bf87f5e7127f46e98314a500d8d9f2cb6ac3b1df329a25069275902947a75947e9cba8a186a78442b6711576d18b19b027b3515a2b602272ea0e275bce7cc5ad65df56dbaab1166a3fa284d5fd552c04e297da29b06608aa093dce6991ec45b6b63033dffb33b8fe543f0d420269558b709a51f556d0e70914ee17cbda26a913f3bc4be5a968059ecde99bdf21b9a74e35d74cc6b6fcbf345d4180b6f5a4b48e8537317432dabc402eb1f027dd5a24217e02db1da4a5128dde56e4af0dec77ad24f5ccd118ae98fa73af26317343d24bef4be1644e10c2903b1edba6a709dd869b770b9bb5c9b8e3d8b0bd7764301f5ac42aa78b3476f672f73152c700bda7f8cbebecb838cdeecbd7acdbd98269db7b053813c64a5e9b392ca7e082f56a9ffafb72bfa42d465dd486d195e0f5a88dd19e2167345a05ba63c96e7d326c7039e168f77596e076d153fd0a33feec5f898eefb794b93f04ee6c011d409b41946e997ffe3e053714ab1b3c6fa50b33504da254af8f891667ff37bd37b4ea85ea89b076277e76ef55baa720bac165f6944cda76cbdc740ad2f8cdc25f6922e1200f8ce5c67989367c7390983005199d9b697afc74a57c95130f1ec8b5b95ce03592ed1bc7e317861af5cc09691b36098e91701e31023efb4ed229f1bf844d18698fbf4b61293d014cef7ca57ef6dfd62ccda5df9cef4acdf47ae36136524de8008f0eda6908af0ef61be5bfabd626e0011611ee99a3b64d992b22a651e6c181d33e308f8ad5b503324eb8e05073cb7d3bd66f1320ae07be71d7750d10d2185a817a36215dfebd777a0ba5e9b6f7dafe2f50d022598c5bcf9e944f282de1cb94ebf44906e5aeb72875fe7180a62e1965345fd95d21cd709f5c2b4d90cc98fcb29ca8377dfd511630aaaab5b8c2be9675af9aa173d78199e701d8a4b558169fd2bc31b2b9cd978735113d2870473556781d24f214bfe029ef4f167cce6699a6f5d3421fab204490a05e11535dd607cbc645c113776dcd49f86d141aba1134e55ca2a2852c5a16aba700dd90038d8eb606bfa7b5868837e039b0714cce2625ec749aab52ed110122258a3499a5515e2fa80c320d01a576ad441173ea3ca45ae41357be4b07ab6acc54d6839ec1cc835a05541f1d7c60ef23d5c5d279d7cc072ac54ab271e62ecc53d17755b035ca88364869dc4e60c8d923347ded02d73c8df898a6181ccc1f11b519ae5a6bec04076425606709711aabe905c3bf2b1961291384053f5b4c0cd5fab6ed30b21f26ad8e95306e3668e531bb2beb0e741436052b16bf910398e96e6210c865d5aef956f2ff6c4b217a4e86d69c238d3e45b0d276fae6a6a4e052c5174e9a6a52dc7371dcf7438596cf3ab96af8af95de9b02b09db64ff6373af5e4acafa31444d58b773b89a98d194108de218e9fde9fff7cb07fe6064c9d7c00016e5cad51197cc33fb377ee05a7d7828da63534990d5f6ebe3e553ae95dd4f4bd0cc849ed8d5357da5462a4c7cc7c09da661b3700755e5619abc385135a8ea5adf060b54277e8ce9bdd4792f0921ec5798a585c5ab6e688086046d778a6b77977d8294053acaebd636e09aeb7f6b66fc55f4e44c0f0cdc2c5994763a0e68456dfaf2b448caf7b9d2c965f5a74428bea14846c9e624dc2f13f08001f768f846792b9252780f82b0c11034a678fb36d25352df0b5078e0390b4ebeef3b5420718f5bf5c8a950de463ca47bb5ab003c6adc3547369d7fb2f656024699f8b03941040ea05a3655e9159a9363d50f16a0ebc8fdbbe7847c99cec2b59f7bb5c36e6d8800342cbc84ee724c3388d0af8615d6c29f0bd632a2f70166a3596c9fda0c81c233e044697e6d3672a8474165e60bb924ea569dc64979e984d37071539f41692b57166f8c70402ed0c106b7b4aa9d2b685e7b0e1f2009e1ebb1067f2f5dda31fe79f048ce5f01844a7a06c88e48a5c2e16cbe9ad3a804109a186c5c7e9cf92213c2a35d1e382cd412cdafd56711d57737ab574fdbe646b72b7f1e111dc5a61484df5fbb24e98085b378761ec6de7586d9ac727122a6834b904a9b952845bd27eea5edc5b20e3920b04da5c45fd266ca3020b730ba5be6f0d874e4ceab60c009c988a41b41bf711dcf40554c7d5e3e8d5cb6cc514277984a684bfe5de649a537d2ea094144df6b2e3ef1ac632dcd6857dbf2c26cffa0dffb9abbe1f33bfd8c41283688b17c60692e1e351892c60cceb81872bdd9a2532f993f4e0d47a5d8966a04eee588e213a1315c3c6e0942e7afce4b434113588c680b36ce216a808c6a9e414d295020b7ec3ddd232fe7d9acd6030c62cd3ad9a455ed682fceb55d6b98f193adf05d72a8de82b6e043b9d8465c97c974751365731e8d6fcf06000b0ffb2f563eb6ab765a722f7500f84e1b3eb2feac296424679351000cb7e5eea831550c035b4077abed925a8270e4871594acba7de38939d4beeb657a44c4dfd2c718d4c522d400fbb214b9ba3e6a8c13d31f625110518a3f1dee850d4f424cb576a4b7b9ef094560c428595a9cf277581c1bf88ab2f559ba2519777dfce0e7b84d3ef8b2d0ba6cbddee71ca015718df3776868766f6c26312e57c03165cf1043004dd2c6b9cdf32e8c68ca2ca3231c5d46c45e67bfd66a047ce163e7fbb724cdb15538cf7f6ffd9847feb43fbf9fd1f196632c3d4d245bf217b952e0378fcfc2e62e9936eca736b947dac896b071349c6925bcdcea4bb7a6ec916256275197581aaf88eee0e30283a5a2ee4e7586bbaba93a648dd14dd6cb803c5de17c7f27acf670b0789d71328368179b7b138074374ef43779c2f51320b0fe2c72eecc63230eb6bf7c2040a7720193fe32291a2bf1a73e4f7f1d72b0e641694038d9508851bae7a341b0cb7674bfa3a1fd846e082a2afc7e632b602cebe410b9a4f6321abc16440a9d7777a868f345c9c523c03fba1e186e186a0075c7a4cfbf9184e41ceeb48132f11b8aade5a34b260186b14d6f818eaa89930a0f6bc7d6d0162b000966037d974970011b4a70ab1f55945fe5f13508302a92ec6f9e7742997020b2dacf7dd78b63c6ffa1bb5c46d888f8ca56db909e460bf3c64989e9e01916a3f7160c32d329aac1722dca481dee9fc530947e08e9facb30f43c8eecb1d8bd70e0074715477cb2b6226d8eb8bd1981106359d483f97c1245d74bd6d95680cb4ac9dddfcf3f87e46a1f68bbff32b40db6a8a5a980a58034f233a51b908e02ce392a253bedd7958e36c8e80a5971df4031276bc603b894cca5d5320ac6c0b059e3721739803700d9a4a30b197d3e922a897d47ae68d0c2ed27b14c665459c00e89029207d2f2de91ec6afb27dc5d8afdfb11f7ef0d16d24242a6cacbd428587643d366c41439479992d86bd49321316d08a2592681fb084a3ecabb4063e7281c367c1733302dba00e5fea94d8593e3aee1aea65237e64efad0ec30cf121c783d58090d57296365ffd8e7f5d5f2b30dbd39c0555cd1913be8812b77aaacac05e956e9fd46d440b87a3a2d8c838da0f0975c41d19dab4285c9d7121485470b9e5111df2540021c2f69ba7b9092b0a1ec303c7e6646048b", 0xffe}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003900)="32af862dac4bdc7636354c9f4624015ac6", 0x11}], 0x1, &(0x7f0000001700)}}], 0x6, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) 2.466381605s ago: executing program 3 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = io_uring_setup(0x43b2, &(0x7f0000000180)={0x0, 0xb4f8, 0x40, 0x3, 0x231}) syz_io_uring_setup(0x5039, &(0x7f0000000e40)={0x0, 0x8f14, 0x20, 0x0, 0x295, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000200)) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x5}, 0x7, 0xc0, 0x1000, 0xe, 0x10, 'syz1\x00', "29c77e33f1a70ee5bb8ccba2dfd7ca8266559dfca6eb8702fa06f0bd6fb781c1", "3942de56703bf2b5e88738a0ae3f66e66a850e368ff8b7578fdb594ac8a467be", [{0xf, 0x7fff, {0x1, 0x4}}, {0x6, 0xb, {0x2, 0x9}}, {0xfff1, 0x4, {0x1, 0x9}}, {0x3, 0xba, {0x1, 0x9}}, {0x8, 0xfffa, {0x3, 0x3}}, {0x4, 0x6, {0x1, 0x61d049eb}}, {0x0, 0x1, {0x3, 0x4}}, {0x8, 0x100, {0x0, 0x5}}, {0xc, 0x6, {0x1, 0x9}}, {0xfa04, 0x8000, {0x0, 0xffffffff}}, {0xfffe, 0x6, {0x2, 0x5078000}}, {0xffd6, 0x2, {0x3, 0x6}}, {0x1ff, 0x7ff}, {0x1, 0x3, {0x1, 0x3}}, {0x8001, 0x2, {0x1}}, {0x2, 0x9, {0x0, 0x401}}, {0x0, 0x8, {0x3}}, {0x3, 0x8, {0x0, 0x9}}, {0x9, 0xfffb, {0x2, 0xeb}}, {0xff80, 0x2627, {0x1, 0x9}}, {0xc, 0x5, {0x1, 0x2}}, {0x0, 0x0, {0x2, 0xd}}, {0x6, 0x2, {0x1, 0x8001}}, {0x1, 0xba6b, {0x1, 0x8}}, {0x2f5, 0xd, {0x0, 0x8}}, {0x7f, 0x40, {0x1, 0x3}}, {0x6, 0x5, {0x0, 0x6}}, {0x276c, 0x4}, {0x401, 0x70, {0x2}}, {0xcd5, 0xa3c, {0x2f2500e9d8f5731d, 0x6110238a}}, {0x89, 0x2, {0xf67ffc17ff66b039, 0x8}}, {0xd, 0x8, {0x0, 0xf11}}, {0x8, 0xfffb, {0x1}}, {0x40, 0x6, {0x0, 0x7}}, {0xd, 0x5, {0x1, 0x8500}}, {0x7, 0x5, {0x3, 0x2}}, {0xb7a, 0x3, {0x3, 0xe}}, {0x806, 0x10, {0x0, 0xfffffffb}}, {0x1ff, 0x3ff, {0x0, 0x99b}}, {0x5, 0x7, {0x0, 0x91f}}]}}}, {{0x254, 0x1, {{0x1, 0xc}, 0x4, 0x5, 0x401, 0x7f, 0x26, 'syz0\x00', "9d776ea96302f9801365ca16e25e95ede02a1f1f0462532c7d167d2eaac03b75", "dee32bc9c98c0f3be3e79998d01f5107afd50503729a890fdf6b8cd7cd6f2be5", [{0x2, 0xc, {0x0, 0x2}}, {0x8, 0x3c, {0x3, 0x400000}}, {0x5, 0x9, {0x1, 0x10001}}, {0x0, 0x4, {0x0, 0x5}}, {0x0, 0x0, {0x1, 0x100}}, {0x9, 0xd902, {0x0, 0x5}}, {0x800, 0x9, {0x2, 0x5}}, {0x1, 0x8, {0x1, 0x8}}, {0x7fff, 0xee4, {0x2, 0x6}}, {0x6, 0x3, {0x0, 0xffffffff}}, {0x8001, 0x2, {0x0, 0x800}}, {0x3, 0xa90a, {0x1, 0x9}}, {0x9, 0x8510, {0x0, 0x9}}, {0x6, 0xf, {0x2, 0x2}}, {0x100, 0x3, {0x2, 0x1}}, {0x93, 0x8, {0x2, 0x9}}, {0x380, 0x1, {0x2, 0x8}}, {0x5, 0x0, {0x2, 0x5}}, {0x655, 0x8, {0x1, 0x1}}, {0x0, 0x85, {0x2, 0xfffffff8}}, {0x7, 0x1, {0x1, 0x4}}, {0x3, 0x8, {0x1, 0x6}}, {0x401, 0x1, {0x0, 0xd8ca64a}}, {0x8, 0x7, {0x2, 0x4}}, {0x7fff, 0x2, {0x0, 0x5}}, {0xdb, 0x2, {0x3, 0xfffffff9}}, {0x400, 0x80, {0x0, 0xc}}, {0x3, 0x2, {0x1, 0x9}}, {0x6, 0x10, {0x3, 0xfffffff7}}, {0x0, 0x4, {0x3, 0x1c09}}, {0x1, 0x1000, {0x1, 0x400}}, {0x8, 0x6, {0x1, 0xfffffff7}}, {0x8001, 0x4, {0x3, 0x6}}, {0xfff8, 0x1ff, {0x2, 0x80}}, {0xa839, 0x4, {0x3, 0xbd2c}}, {0x8, 0xf, {0x1, 0x3}}, {0xff, 0x6, {0x2, 0xeb}}, {0x4, 0x6, {0x1, 0x4}}, {0x3, 0x6, {0x2, 0xd5bb}}, {0x0, 0x0, {0x1, 0x80000001}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x5, 0x1, 0xf, 0x7, 0x25, 'syz1\x00', "6b8ebd4de16f7681c5e53d6836ba439ca15a0bc9e60b96a005d000c5f2973a36", "e919be9f1c25a375d544b818e3ed6a898aefa405e8ad047284e3ebeb7691d66a", [{0xd1a3, 0x6, {0x3, 0x40}}, {0x115, 0x101, {0x3, 0x8e}}, {0x4f1, 0x8, {0x0, 0x6}}, {0x3b6d, 0x1000, {0x1, 0x4}}, {0x3, 0x7f, {0x911e5d3f85c2db25, 0x3}}, {0x1ff, 0x9, {0x2, 0x3f}}, {0xd, 0x0, {0x2, 0xcac8}}, {0x9, 0x262, {0x3, 0x4}}, {0x8, 0x8001, {0x3, 0x2}}, {0xa0, 0x3, {0x3}}, {0x8, 0x0, {0x0, 0xfffffffe}}, {0x4, 0x9, {0x1, 0x8}}, {0x4, 0x3, {0x0, 0x8}}, {0x1, 0x7, {0x3, 0x1}}, {0x0, 0x0, {0x2, 0x8}}, {0xa86, 0x6, {0x2, 0x8}}, {0x5, 0x4457, {0x2, 0x3}}, {0x0, 0x200, {0x2, 0x514}}, {0x1ff, 0xbc40, {0x0, 0x4}}, {0x1c00, 0x2, {0x3, 0x67072578}}, {0x9, 0x1, {0x1, 0x3}}, {0xcaa, 0x1, {0x1, 0x510}}, {0x6, 0x3, {0x1, 0x5}}, {0x5, 0xfff7, {0x1, 0x2}}, {0xfff6, 0x4925, {0x2, 0x2}}, {0x3, 0x0, {0x2, 0x80000000}}, {0x0, 0x1, {0x3, 0x50f}}, {0xc, 0x9, {0x0, 0x8}}, {0x4c8, 0xe5c8, {0x3, 0x7fffffff}}, {0x1, 0x6, {0x3, 0x200}}, {0xff, 0x1, {0x2, 0x1}}, {0x7ff, 0x3, {0x0, 0x7}}, {0x2, 0xfffa, {0x3, 0xfffffff8}}, {0x7, 0x9, {0x3, 0x7fde}}, {0x7, 0xffff, {0x2, 0x6}}, {0x8f, 0x4471, {0x2, 0x9}}, {0x9, 0xea4, {0x0, 0x18f}}, {0x66, 0xe416, {0x0, 0x7541}}, {0x9, 0x3, {0x0, 0x2}}, {0x2, 0x1, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1}, 0xf9, 0x7, 0x6, 0x7, 0xe, 'syz0\x00', "7a1cfd9c1cb4ef0a98636d2bb2579c7e71e1e743b46864646deafac070c00147", "2c6a58ee42151688f3ab8c2e40391643aaf53ff249e3a0461c941cc0200425e0", [{0x800, 0x7}, {0x101, 0x0, {0x2, 0x9}}, {0xecd, 0x1, {0x1, 0x5}}, {0x7, 0x56, {0x0, 0x7}}, {0x6, 0xfffa, {0x0, 0x7}}, {0x3, 0x5, {0x1, 0x5}}, {0x7, 0x5, {0x0, 0xac}}, {0x9, 0x7, {0x0, 0x3}}, {0x3, 0x0, {0x3, 0xf73}}, {0x8, 0x9b, {0x1, 0x2}}, {0x800, 0x5b, {0x4, 0x8}}, {0x0, 0xf30a, {0x0, 0x7}}, {0x1, 0x5, {0x2, 0x2}}, {0xfff, 0x9, {0x1, 0x8}}, {0x0, 0x3, {0x0, 0x6}}, {0x9, 0x1, {0x1, 0x5be5}}, {0x8000, 0x401, {0x3, 0x7}}, {0x1, 0x2, {0x3, 0x6}}, {0xc, 0x6, {0x2, 0x7ff}}, {0x9, 0xa, {0x3, 0x401}}, {0xff, 0xf, {0x2, 0xe0}}, {0xb, 0x4, {0x1, 0x44e}}, {0xa000, 0x2, {0x3, 0xe32}}, {0x0, 0x2, {0x0, 0x1}}, {0xb, 0x6, {0x0, 0x6}}, {0x200, 0x5, {0x1, 0x4eb}}, {0xb, 0x7, {0x3, 0x100}}, {0x3ff, 0x10, {0x0, 0x40}}, {0x600, 0x7, {0x1, 0x800}}, {0x200, 0xe}, {0xd, 0x10, {0x5, 0x24}}, {0x401, 0xb, {0x1, 0x80000001}}, {0x80, 0x0, {0x2, 0x3}}, {0xe600, 0x6, {0x1, 0x6}}, {0x8, 0xfff8, {0x1, 0x7}}, {0xd1d, 0x2, {0x3, 0x1}}, {0x2, 0x0, {0x3, 0x80000000}}, {0xf499, 0x2fa, {0x0, 0x3ff8}}, {0x3, 0x3, {0x3, 0x5}}, {0x3ff, 0x5, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x1, 0xcd, 0x0, 0x0, 0x20, 'syz0\x00', "c339a0a448ee744b575a7d96b39d09760a0df8d1a8e5d9615d96a35a847380d2", "9a28702b0012ba663ec938b5640153f8d26753c641066eb4cd014cf2b5240bea", [{0x1, 0x4, {0x1, 0x7f}}, {0x8, 0x1ff, {0x3, 0xffff}}, {0x3, 0x1000, {0x1, 0xe}}, {0x6, 0x1, {0x1, 0x2}}, {0x9, 0x6, {0x2, 0x4}}, {0x2, 0x8, {0x0, 0xe}}, {0x0, 0xc776, {0x1, 0x7}}, {0x0, 0xb, {0x3, 0x2}}, {0x81, 0x1ff, {0x3, 0x2}}, {0xa, 0x1ff, {0x1, 0x5}}, {0x5, 0x2, {0x1, 0xff}}, {0x98f8, 0x9, {0x0, 0x13}}, {0x64f, 0x5, {0x3, 0xfffffff2}}, {0x81, 0x4, {0x0, 0x4}}, {0x9, 0x6, {0x3, 0x5}}, {0xc149, 0x6, {0x1}}, {0xeb6, 0x4, {0x2, 0x5}}, {0x5, 0x0, {0x0, 0x7fffffff}}, {0x0, 0x400, {0x0, 0x4ff}}, {0x7ff, 0x9, {0x0, 0x10}}, {0xb44, 0x5, {0x0, 0x845}}, {0x3, 0x7, {0x2, 0xf4d1}}, {0xac, 0xe, {0x3, 0x7}}, {0xe, 0x1, {0x2, 0x6}}, {0x9, 0x101, {0x3, 0x1000}}, {0xf8e5, 0x8001, {0x3, 0x11}}, {0x8000, 0x0, {0x3, 0x5}}, {0x7ff, 0x1, {0x0, 0x5}}, {0x200, 0x5, {0x0, 0x5}}, {0x101, 0x7fff, {0x1, 0x6}}, {0x2, 0x9, {0x1, 0x1}}, {0x3964, 0x800, {0xd94b73a879b8408b, 0x9}}, {0x0, 0x9, {0x3, 0x9}}, {0x3, 0x3, {0x2, 0x9}}, {0x0, 0x7ff, {0x1, 0x4}}, {0x5, 0x9b, {0x0, 0x2092}}, {0x6, 0x6, {0x2, 0x1ff}}, {0x19, 0x800, {0x1, 0x5}}, {0x6, 0x10, {0x3, 0x4}}, {0x11, 0xb848, {0x0, 0x65}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x1}, 0x20044041) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0x8, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x80045300, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x7, 0x48c1, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0xe, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0xc}, 0x8, 0xffffffff, 0x5, 0x0, 0x9, 0x8, 0x49, 0xd, 0x1, 0x1, {0x7, 0x3, 0x1000, 0x101, 0xfffffffe, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r12, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2.443381881s ago: executing program 5 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = io_uring_setup(0x43b2, &(0x7f0000000180)={0x0, 0xb4f8, 0x40, 0x3, 0x231}) syz_io_uring_setup(0x5039, &(0x7f0000000e40)={0x0, 0x8f14, 0x20, 0x0, 0x295, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000200)) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x5}, 0x7, 0xc0, 0x1000, 0xe, 0x10, 'syz1\x00', "29c77e33f1a70ee5bb8ccba2dfd7ca8266559dfca6eb8702fa06f0bd6fb781c1", "3942de56703bf2b5e88738a0ae3f66e66a850e368ff8b7578fdb594ac8a467be", [{0xf, 0x7fff, {0x1, 0x4}}, {0x6, 0xb, {0x2, 0x9}}, {0xfff1, 0x4, {0x1, 0x9}}, {0x3, 0xba, {0x1, 0x9}}, {0x8, 0xfffa, {0x3, 0x3}}, {0x4, 0x6, {0x1, 0x61d049eb}}, {0x0, 0x1, {0x3, 0x4}}, {0x8, 0x100, {0x0, 0x5}}, {0xc, 0x6, {0x1, 0x9}}, {0xfa04, 0x8000, {0x0, 0xffffffff}}, {0xfffe, 0x6, {0x2, 0x5078000}}, {0xffd6, 0x2, {0x3, 0x6}}, {0x1ff, 0x7ff}, {0x1, 0x3, {0x1, 0x3}}, {0x8001, 0x2, {0x1}}, {0x2, 0x9, {0x0, 0x401}}, {0x0, 0x8, {0x3}}, {0x3, 0x8, {0x0, 0x9}}, {0x9, 0xfffb, {0x2, 0xeb}}, {0xff80, 0x2627, {0x1, 0x9}}, {0xc, 0x5, {0x1, 0x2}}, {0x0, 0x0, {0x2, 0xd}}, {0x6, 0x2, {0x1, 0x8001}}, {0x1, 0xba6b, {0x1, 0x8}}, {0x2f5, 0xd, {0x0, 0x8}}, {0x7f, 0x40, {0x1, 0x3}}, {0x6, 0x5, {0x0, 0x6}}, {0x276c, 0x4}, {0x401, 0x70, {0x2}}, {0xcd5, 0xa3c, {0x2f2500e9d8f5731d, 0x6110238a}}, {0x89, 0x2, {0xf67ffc17ff66b039, 0x8}}, {0xd, 0x8, {0x0, 0xf11}}, {0x8, 0xfffb, {0x1}}, {0x40, 0x6, {0x0, 0x7}}, {0xd, 0x5, {0x1, 0x8500}}, {0x7, 0x5, {0x3, 0x2}}, {0xb7a, 0x3, {0x3, 0xe}}, {0x806, 0x10, {0x0, 0xfffffffb}}, {0x1ff, 0x3ff, {0x0, 0x99b}}, {0x5, 0x7, {0x0, 0x91f}}]}}}, {{0x254, 0x1, {{0x1, 0xc}, 0x4, 0x5, 0x401, 0x7f, 0x26, 'syz0\x00', "9d776ea96302f9801365ca16e25e95ede02a1f1f0462532c7d167d2eaac03b75", "dee32bc9c98c0f3be3e79998d01f5107afd50503729a890fdf6b8cd7cd6f2be5", [{0x2, 0xc, {0x0, 0x2}}, {0x8, 0x3c, {0x3, 0x400000}}, {0x5, 0x9, {0x1, 0x10001}}, {0x0, 0x4, {0x0, 0x5}}, {0x0, 0x0, {0x1, 0x100}}, {0x9, 0xd902, {0x0, 0x5}}, {0x800, 0x9, {0x2, 0x5}}, {0x1, 0x8, {0x1, 0x8}}, {0x7fff, 0xee4, {0x2, 0x6}}, {0x6, 0x3, {0x0, 0xffffffff}}, {0x8001, 0x2, {0x0, 0x800}}, {0x3, 0xa90a, {0x1, 0x9}}, {0x9, 0x8510, {0x0, 0x9}}, {0x6, 0xf, {0x2, 0x2}}, {0x100, 0x3, {0x2, 0x1}}, {0x93, 0x8, {0x2, 0x9}}, {0x380, 0x1, {0x2, 0x8}}, {0x5, 0x0, {0x2, 0x5}}, {0x655, 0x8, {0x1, 0x1}}, {0x0, 0x85, {0x2, 0xfffffff8}}, {0x7, 0x1, {0x1, 0x4}}, {0x3, 0x8, {0x1, 0x6}}, {0x401, 0x1, {0x0, 0xd8ca64a}}, {0x8, 0x7, {0x2, 0x4}}, {0x7fff, 0x2, {0x0, 0x5}}, {0xdb, 0x2, {0x3, 0xfffffff9}}, {0x400, 0x80, {0x0, 0xc}}, {0x3, 0x2, {0x1, 0x9}}, {0x6, 0x10, {0x3, 0xfffffff7}}, {0x0, 0x4, {0x3, 0x1c09}}, {0x1, 0x1000, {0x1, 0x400}}, {0x8, 0x6, {0x1, 0xfffffff7}}, {0x8001, 0x4, {0x3, 0x6}}, {0xfff8, 0x1ff, {0x2, 0x80}}, {0xa839, 0x4, {0x3, 0xbd2c}}, {0x8, 0xf, {0x1, 0x3}}, {0xff, 0x6, {0x2, 0xeb}}, {0x4, 0x6, {0x1, 0x4}}, {0x3, 0x6, {0x2, 0xd5bb}}, {0x0, 0x0, {0x1, 0x80000001}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x5, 0x1, 0xf, 0x7, 0x25, 'syz1\x00', "6b8ebd4de16f7681c5e53d6836ba439ca15a0bc9e60b96a005d000c5f2973a36", "e919be9f1c25a375d544b818e3ed6a898aefa405e8ad047284e3ebeb7691d66a", [{0xd1a3, 0x6, {0x3, 0x40}}, {0x115, 0x101, {0x3, 0x8e}}, {0x4f1, 0x8, {0x0, 0x6}}, {0x3b6d, 0x1000, {0x1, 0x4}}, {0x3, 0x7f, {0x911e5d3f85c2db25, 0x3}}, {0x1ff, 0x9, {0x2, 0x3f}}, {0xd, 0x0, {0x2, 0xcac8}}, {0x9, 0x262, {0x3, 0x4}}, {0x8, 0x8001, {0x3, 0x2}}, {0xa0, 0x3, {0x3}}, {0x8, 0x0, {0x0, 0xfffffffe}}, {0x4, 0x9, {0x1, 0x8}}, {0x4, 0x3, {0x0, 0x8}}, {0x1, 0x7, {0x3, 0x1}}, {0x0, 0x0, {0x2, 0x8}}, {0xa86, 0x6, {0x2, 0x8}}, {0x5, 0x4457, {0x2, 0x3}}, {0x0, 0x200, {0x2, 0x514}}, {0x1ff, 0xbc40, {0x0, 0x4}}, {0x1c00, 0x2, {0x3, 0x67072578}}, {0x9, 0x1, {0x1, 0x3}}, {0xcaa, 0x1, {0x1, 0x510}}, {0x6, 0x3, {0x1, 0x5}}, {0x5, 0xfff7, {0x1, 0x2}}, {0xfff6, 0x4925, {0x2, 0x2}}, {0x3, 0x0, {0x2, 0x80000000}}, {0x0, 0x1, {0x3, 0x50f}}, {0xc, 0x9, {0x0, 0x8}}, {0x4c8, 0xe5c8, {0x3, 0x7fffffff}}, {0x1, 0x6, {0x3, 0x200}}, {0xff, 0x1, {0x2, 0x1}}, {0x7ff, 0x3, {0x0, 0x7}}, {0x2, 0xfffa, {0x3, 0xfffffff8}}, {0x7, 0x9, {0x3, 0x7fde}}, {0x7, 0xffff, {0x2, 0x6}}, {0x8f, 0x4471, {0x2, 0x9}}, {0x9, 0xea4, {0x0, 0x18f}}, {0x66, 0xe416, {0x0, 0x7541}}, {0x9, 0x3, {0x0, 0x2}}, {0x2, 0x1, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1}, 0xf9, 0x7, 0x6, 0x7, 0xe, 'syz0\x00', "7a1cfd9c1cb4ef0a98636d2bb2579c7e71e1e743b46864646deafac070c00147", "2c6a58ee42151688f3ab8c2e40391643aaf53ff249e3a0461c941cc0200425e0", [{0x800, 0x7}, {0x101, 0x0, {0x2, 0x9}}, {0xecd, 0x1, {0x1, 0x5}}, {0x7, 0x56, {0x0, 0x7}}, {0x6, 0xfffa, {0x0, 0x7}}, {0x3, 0x5, {0x1, 0x5}}, {0x7, 0x5, {0x0, 0xac}}, {0x9, 0x7, {0x0, 0x3}}, {0x3, 0x0, {0x3, 0xf73}}, {0x8, 0x9b, {0x1, 0x2}}, {0x800, 0x5b, {0x4, 0x8}}, {0x0, 0xf30a, {0x0, 0x7}}, {0x1, 0x5, {0x2, 0x2}}, {0xfff, 0x9, {0x1, 0x8}}, {0x0, 0x3, {0x0, 0x6}}, {0x9, 0x1, {0x1, 0x5be5}}, {0x8000, 0x401, {0x3, 0x7}}, {0x1, 0x2, {0x3, 0x6}}, {0xc, 0x6, {0x2, 0x7ff}}, {0x9, 0xa, {0x3, 0x401}}, {0xff, 0xf, {0x2, 0xe0}}, {0xb, 0x4, {0x1, 0x44e}}, {0xa000, 0x2, {0x3, 0xe32}}, {0x0, 0x2, {0x0, 0x1}}, {0xb, 0x6, {0x0, 0x6}}, {0x200, 0x5, {0x1, 0x4eb}}, {0xb, 0x7, {0x3, 0x100}}, {0x3ff, 0x10, {0x0, 0x40}}, {0x600, 0x7, {0x1, 0x800}}, {0x200, 0xe}, {0xd, 0x10, {0x5, 0x24}}, {0x401, 0xb, {0x1, 0x80000001}}, {0x80, 0x0, {0x2, 0x3}}, {0xe600, 0x6, {0x1, 0x6}}, {0x8, 0xfff8, {0x1, 0x7}}, {0xd1d, 0x2, {0x3, 0x1}}, {0x2, 0x0, {0x3, 0x80000000}}, {0xf499, 0x2fa, {0x0, 0x3ff8}}, {0x3, 0x3, {0x3, 0x5}}, {0x3ff, 0x5, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x1, 0xcd, 0x0, 0x0, 0x20, 'syz0\x00', "c339a0a448ee744b575a7d96b39d09760a0df8d1a8e5d9615d96a35a847380d2", "9a28702b0012ba663ec938b5640153f8d26753c641066eb4cd014cf2b5240bea", [{0x1, 0x4, {0x1, 0x7f}}, {0x8, 0x1ff, {0x3, 0xffff}}, {0x3, 0x1000, {0x1, 0xe}}, {0x6, 0x1, {0x1, 0x2}}, {0x9, 0x6, {0x2, 0x4}}, {0x2, 0x8, {0x0, 0xe}}, {0x0, 0xc776, {0x1, 0x7}}, {0x0, 0xb, {0x3, 0x2}}, {0x81, 0x1ff, {0x3, 0x2}}, {0xa, 0x1ff, {0x1, 0x5}}, {0x5, 0x2, {0x1, 0xff}}, {0x98f8, 0x9, {0x0, 0x13}}, {0x64f, 0x5, {0x3, 0xfffffff2}}, {0x81, 0x4, {0x0, 0x4}}, {0x9, 0x6, {0x3, 0x5}}, {0xc149, 0x6, {0x1}}, {0xeb6, 0x4, {0x2, 0x5}}, {0x5, 0x0, {0x0, 0x7fffffff}}, {0x0, 0x400, {0x0, 0x4ff}}, {0x7ff, 0x9, {0x0, 0x10}}, {0xb44, 0x5, {0x0, 0x845}}, {0x3, 0x7, {0x2, 0xf4d1}}, {0xac, 0xe, {0x3, 0x7}}, {0xe, 0x1, {0x2, 0x6}}, {0x9, 0x101, {0x3, 0x1000}}, {0xf8e5, 0x8001, {0x3, 0x11}}, {0x8000, 0x0, {0x3, 0x5}}, {0x7ff, 0x1, {0x0, 0x5}}, {0x200, 0x5, {0x0, 0x5}}, {0x101, 0x7fff, {0x1, 0x6}}, {0x2, 0x9, {0x1, 0x1}}, {0x3964, 0x800, {0xd94b73a879b8408b, 0x9}}, {0x0, 0x9, {0x3, 0x9}}, {0x3, 0x3, {0x2, 0x9}}, {0x0, 0x7ff, {0x1, 0x4}}, {0x5, 0x9b, {0x0, 0x2092}}, {0x6, 0x6, {0x2, 0x1ff}}, {0x19, 0x800, {0x1, 0x5}}, {0x6, 0x10, {0x3, 0x4}}, {0x11, 0xb848, {0x0, 0x65}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x1}, 0x20044041) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0x8, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x80045300, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x7, 0x48c1, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x7fffe, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0xe, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0xc}, 0x8, 0xffffffff, 0x5, 0x0, 0x9, 0x8, 0x49, 0xd, 0x1, 0x1, {0x7, 0x3, 0x1000, 0x101, 0xfffffffe, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r12, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2.229740798s ago: executing program 8 (id=225): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) sendmsg$inet(r0, 0x0, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800", @ANYRES32=r2], 0x50}}, 0x0) 2.180462508s ago: executing program 8 (id=226): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000f80)=""/4115, 0x30, 0x1013, 0x1, 0xcbbd}, 0x28) 2.156163144s ago: executing program 4 (id=227): r0 = socket(0x10, 0x80002, 0x0) unshare(0x22020600) r1 = socket(0x18, 0x800, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) recvmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 2.128869988s ago: executing program 8 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x203) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 2.106086514s ago: executing program 3 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) (fail_nth: 2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000300)='./file0\x00', 0x203) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 2.042059121s ago: executing program 4 (id=230): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000040)) syslog(0x9, 0x0, 0x0) 1.060796218s ago: executing program 5 (id=231): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000f80)=""/4115, 0x28, 0x1013, 0x1, 0xcbbd}, 0x28) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x62}, @void, @val={0xc, 0x99, {0xffffffff, 0x30}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 973.193131ms ago: executing program 4 (id=232): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) mremap(&(0x7f00008b1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000188000/0x4000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_submit(0x0, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0xfffffffe, 0x8, 0x3511, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) r1 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x9000000000, 0x800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x7fff, 0x0, &(0x7f0000000e80)=[{&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000740)=""/223, 0xdf}, {&(0x7f0000000840)=""/105, 0x69}, {&(0x7f00000008c0)=""/131, 0x83}, {&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000bc0)=""/143, 0x8f}, {&(0x7f0000000a80)=""/73, 0x49}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/127, 0x7f}, {&(0x7f0000000e00)=""/108, 0x6c}], &(0x7f0000000280)=[0xb, 0xfffffffffffff1c2], 0xa}, 0x20) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r6, @ANYBLOB="0000000000620000200012800b00010065727370616e00001000028004001200060011004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000f40)={'ip6_vti0\x00', r6, 0x2f, 0x5c, 0xd3, 0x4, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x20, 0x4, 0x9}}) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x5, 0xfffffbff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 835.756344ms ago: executing program 8 (id=233): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000340)}, 0x2, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x3, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x004', @ANYRES16=r3, @ANYBLOB="3fab00000000000000002e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r7 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) (async) r9 = socket$inet6(0xa, 0x80002, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000004000000040004001200000000000000147cad143df9eac4a3da9b", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000340), &(0x7f0000000440)=r9}, 0x20) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r7, 0x0, 0x0) openat$cgroup_procs(r11, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000440)={0x0, 0xfffffffffffffd1f, &(0x7f0000000240)={&(0x7f0000000540)=@getqdisc={0x3c, 0x26, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}, {0xfff3, 0xa}, {0xb, 0xd}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0xf0ffffffffffff}, 0x840) 789.697245ms ago: executing program 5 (id=234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@auto_da_alloc}, {@data_err_ignore}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000000)='./file/file0/..//file0\x00') r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x84, &(0x7f0000000240)=ANY=[]) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x3, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x1250ab8b8e040515, 0x10, 0x6, 0x7, 0x1, @private2={0xfc, 0x2, '\x00', 0x5}, @private1, 0x7800, 0x8000, 0xc0000, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=@newchain={0x858, 0x1e, 0x4, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x820, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x4b, 0x0, 0x2, 0x1c000000, 0x5, 0x20000000, 0x10, 0x6, 0x9, 0x3ff, 0x200, 0x7ff, 0x8, 0x401, 0x6, 0xffa, 0x1, 0x40, 0x4, 0xce94, 0x1, 0x6, 0x9, 0xfb6, 0x623, 0x8, 0x0, 0x5, 0x0, 0x7, 0x7a, 0x101, 0x6, 0x1, 0xe01c, 0x4, 0x0, 0x4, 0x2, 0x2, 0x1, 0x1d4, 0x2, 0x3a, 0x789, 0x0, 0x4, 0x7, 0xd085, 0x7ff, 0x101, 0x3, 0xd, 0xf, 0x81, 0x8, 0x3, 0x6000000, 0x7, 0x7174, 0xfffff699, 0x71b6, 0x7fff, 0xffffff30, 0x7, 0x2, 0x7, 0xffffffff, 0x8d, 0x8, 0x7fff, 0xfff, 0xb, 0x9, 0x9413, 0x8, 0x81, 0x51, 0x400, 0xd2, 0x10001, 0x7, 0x3, 0x548, 0x4, 0xfffffffe, 0x0, 0x1, 0x10000, 0x8, 0x200, 0x6, 0x4, 0x1, 0x80fa, 0x2, 0x6, 0x3, 0x7e64, 0x8, 0x3, 0x8, 0x7, 0x5, 0x9, 0x3, 0x5, 0x2, 0x0, 0x4, 0x8, 0x101, 0xbf, 0x2, 0x6, 0x812, 0x1000, 0x8, 0x6, 0x0, 0x649, 0x3, 0x3, 0x5, 0xf, 0x8001, 0x9, 0x6, 0x8, 0x9, 0x6e, 0xb27, 0xd, 0x4, 0x7, 0x401, 0x7, 0x9, 0x1, 0x1, 0xafa, 0x3, 0x6, 0x6, 0x3, 0x74, 0x2, 0x4, 0xffffffff, 0x514, 0x5, 0x4, 0x8000, 0x55, 0x8, 0x78f8, 0x7fff, 0x9, 0x1, 0x6, 0x5, 0x7ff, 0x5, 0x81, 0xbf, 0x64f, 0x3, 0xf, 0x2, 0x1, 0x3, 0x81, 0x1000, 0xaa, 0x3, 0x8000, 0x314f, 0x9c9f, 0x6, 0x7, 0x6, 0x9, 0x870e, 0xffffffff, 0x9, 0x8, 0x3, 0x4, 0xe195, 0xfffffff9, 0x7fffffff, 0x8, 0x6cd, 0x0, 0x7, 0x4, 0x6, 0xfff, 0x3, 0x53b, 0x400, 0xb62c, 0x8, 0x2, 0x0, 0x0, 0x153, 0xffff8001, 0x6, 0x2, 0x2, 0x0, 0x2, 0x2, 0x8, 0xe67, 0x3ff, 0x7, 0xff, 0x0, 0x3, 0x0, 0x0, 0xa6, 0x591f, 0x6, 0x2, 0x6, 0x0, 0x5, 0x7, 0x2, 0x80000000, 0x2, 0x1, 0x3, 0x7, 0xf, 0xb, 0xba0, 0x4, 0x7ff, 0x7, 0x8, 0x3dc8, 0x5, 0x5, 0x2f2f, 0x7, 0x1000, 0x1, 0xe1, 0x68a0, 0x10, 0xff33]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9ae, 0xfffffff9, 0x6, 0x1ff, 0xfffffffa, 0x80, 0x4efd, 0x400, 0x1e6, 0x6, 0x8, 0xae, 0x1, 0x9, 0x50, 0x826, 0x7, 0x4, 0x2, 0x1, 0x2, 0xfffffffa, 0x94, 0x0, 0xffff, 0x397, 0x2, 0x4c51, 0x9, 0x5c3, 0x3, 0x4, 0x7, 0x7, 0x2, 0x8, 0x1, 0x1, 0x6, 0xae2, 0x322a, 0xf6f2, 0x6, 0x1, 0x7, 0x3, 0x4, 0x6, 0x9, 0x83, 0x4, 0x6, 0xf, 0x50f4e1be, 0x5, 0x8, 0x1, 0x1abf, 0x9, 0xfff, 0x5, 0x864a, 0x6, 0xd98c, 0x12, 0x8000, 0x5, 0xd4, 0x9920, 0x5, 0x6, 0x5, 0x7ff, 0x16, 0xfffffff9, 0x8, 0x2, 0xffff9816, 0x7322, 0x3, 0x6, 0x0, 0x4, 0x2, 0x5, 0x7, 0x200, 0x1ff, 0xfffffc9e, 0x4, 0x4, 0x5, 0xa1, 0x3, 0x7, 0x100, 0x9, 0x4, 0xea0e, 0x7fffffff, 0xfffffffd, 0xfffffff7, 0x5, 0x4, 0x9, 0x5cee, 0x7, 0x5, 0x9, 0x3, 0x7, 0x5, 0x1e53, 0x1000, 0x5, 0x800, 0x254, 0x7fff, 0x18, 0x8, 0x3, 0x3, 0x7, 0x6, 0x8, 0x40, 0x4, 0x2, 0x0, 0xef3, 0x800000, 0xd, 0x453, 0xf00, 0x6, 0x9, 0x6, 0x63d7, 0x6, 0x2, 0x80000000, 0x1, 0x7, 0x9, 0x7f, 0x9, 0x0, 0xa49, 0x4, 0x20000000, 0x8, 0x10000, 0xffff, 0x8, 0x0, 0x2, 0x400, 0x5, 0x0, 0x6, 0x70, 0xc307, 0xf, 0x2, 0x6, 0x2, 0x1, 0x40, 0x6, 0x5, 0x3, 0x4, 0x7, 0x80000000, 0xffffffff, 0x5ee, 0x4, 0x1, 0x9, 0x0, 0x2, 0x7fffffff, 0x1, 0x2, 0x40, 0x98, 0x3, 0x6107, 0x81, 0x3, 0x2, 0x4, 0x4, 0x10, 0x5, 0x0, 0x5, 0xdbd, 0x401, 0x7, 0x7ff, 0xffff, 0x24, 0x7, 0x59, 0x2, 0x40, 0x2, 0xe9036617, 0x1, 0x0, 0x41d0, 0x3, 0xc92d, 0x0, 0x0, 0x2, 0x9, 0xf, 0x8, 0x4, 0x4, 0x8, 0x7fffffff, 0x401, 0xfe, 0x2, 0x4, 0x400, 0x401, 0xf, 0x4, 0x0, 0x7, 0x7, 0x4d7a, 0xfff, 0x2, 0x6, 0x4bcc, 0x7fff, 0x6, 0x9, 0x3, 0x6, 0x100, 0xff0, 0x3, 0x2, 0x3, 0x200, 0x9, 0x0, 0x8, 0x1000, 0x3ff]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}]}, 0x858}}, 0x44004) 789.125465ms ago: executing program 3 (id=235): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) sendmsg$inet(r0, 0x0, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800", @ANYRES32=r2], 0x50}}, 0x0) 566.204461ms ago: executing program 5 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000a40)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x32) 553.303709ms ago: executing program 8 (id=237): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="030000000000000038ca"], 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x18fce4b23d0dbe7f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mlockall(0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b000000", 0xd, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x109, 0x0, 0x8000}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$caif_stream(0x25, 0x1, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) 552.240569ms ago: executing program 3 (id=238): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x0, 0x4000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) syz_clone(0x35200011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 541.870956ms ago: executing program 4 (id=239): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r2], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) close(0x4) 353.988369ms ago: executing program 3 (id=240): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) socket(0x2, 0x80000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0xe7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = open(&(0x7f0000000180)='./file1/file0\x00', 0x66842, 0x23) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 334.765076ms ago: executing program 5 (id=241): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x2b, 0x1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r5, &(0x7f0000006dc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="3a822d6f0306bc598a25fbf98ce3df61eddbb19384ec19a1b8cc10cf952b7536e16239cb61c3ba224865dadc4b1088ed0ce5c9ede116bbde6c3a8329413526b61ec377c0f2833a31b0ec1819ae320ead44ca256a14c3c29f6fea826ce6dfcdbde79656574caca7d33f43358c1f09d1809f0fc894ad8dc2339e2acbd7b63580ad7b88bc00000000000000", 0x8a}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc4069c2e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced3bf6d67479cac4f1a1f9b67512acad7521711c33", 0xd7}, {&(0x7f00000006c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d4d4ba1cf8c4fdde03e83abbdf73e695f165346a78d8d79108d9b516d9abf09a136ab52d0e19dfb2f00bb046d00000000001b000000000010000000", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="9d70b2a7c34e6a7f3116cfa2b021c3136e6530cfe2b242564adf52d96187131c30b12cada737", 0x26}, {&(0x7f0000000100)="7b4bcc9089864d85e764b6bba256e6af91e69ae71ffef7df313e92c30fed65dae5961c2c163fb13606ee96db7249efdb195eb6cbc8462a0b7df5e9a2f2555d3959af1ca406f89e87409474f6c69230cbc89e4052b59bf2d40986e6547ee78b4c36db49a35f2949daa1dadcdb43d5cfb31839d3ce23eccf139ef9c2286a326d1ca5e18e449fe954cb9d33eb4e6761f41cefcaf0c88adc59a283c091f645fecade2b37c10bf3", 0xa5}, {&(0x7f0000000280)="02d3f3e048e65d33e396c2b739cf5b78f9dbc918cd90d3384c2ca9d13f9ad152d4bb2f24a81055e2dd62fdb073f9cd0926c6c9f54896a6522cb14a6dcee80743e8fac9d91c9acebddf920aabd09f4a9aa975877619996a34ff58778b57b6da8e8938b6bc82ad33f637cf60ae5fd21872cf134af66123e18917194dc67bffef0800960c500a", 0x85}, {&(0x7f0000000980)="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", 0x1a9}, {&(0x7f0000000480)="0aa732c38ba9f4ae98f8528cb4a558d6b836a04da29c5fabcb595bbb896d766f9073be7b0346b0ec225618bb72c878b4ac8e1cdadff66cbc6545652f2aba12fce7ee8fc1870ac0d6192d95cf39de108fbd34da90483f34083ffee7980365", 0x5e}, {&(0x7f0000000dc0)="128057c3ecdf99f18b48f0aae1987a57df52c3df6ef6655a29ada4e07fb82bc16b6d09acfd6561625554fabc92cec26138ba1e641d459b332d808d7d7acd57cf2abd209c59d2e676d3a25b109b1ded08377acc67fbd4015e03a13b9f761db934b988d34f45530b2bc710f89c2b0004f62a14c65f6c1a0c018bea98af07fa1dfeb41459930a71e9628b87defa7de243b58eb9eabdcfcedb666bfe5f", 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000440)="40cbb78ddd15003c74339803e041837ce32437861e0bb6726a36a5bd46462c6d27ffe7bca5812a24dfe76907", 0x2c}, {&(0x7f0000000e80)="4ed0e951d86f4bfe0b9c4a0e3547037c2db0ad38956c1c13da5adf7af40c0809173b40b5cb00ed677558e92eeedc0e4fa67422b5ffb81deaa9199c785e7e9a730014e641cfea8b04d6f7ef9f37b99aafa88e805e5118165c038461672f0f328d83e387630cea00cd2b7e564851a4396f3a7006ff4f3daef61888c3238e244d00d7d424710fd77272fd5f2512e52529194343184926a2f30e67d4691a522077384f512b201b4b9ef67cdddb05ab1d0ae4965b4244042c4c3313537641cc335cedc902135071", 0xc5}, {&(0x7f0000000900)="0a7a73ae158b7d997e84979be4c592a29018f838e7e0a7afe7c03be49a7a1e6a146fbbab7facb6ca6b47f1a98ccd6f375e292eb681305070ca618235395737819c43", 0x42}, {&(0x7f0000000f80)="e1cc4ef54ef0fcec70f131fe6eb980e365f954d31cfe664c3139987f40c20e1bfe0cdd1dcb9e63b5629f1133d9c3249eafdd41e3bfbed62249c88fb888f68a3c8aefc64f82eb64a18477f50b4ccbcba26819c920e4f4b4008f9dd6108cd9fce22c1e83fb044bf1ebf740f18e2c339a81d7c2e8140c6a95ad11bbbfee71fb33acb45899ad94747f91bb09712280be061f6039a90d47ee7fefc61fc6862ee0cd017d98e5a4789c791f28ed55f6228f20f3f71e78c6d8b3ffbef7a2fcdacc516f59cefb78cf9650e35a5031c1992cf6275360c64ff0ba336628a07fd6ceaada472756df34246ba8d40688102be779b473", 0xef}, {&(0x7f0000001900)="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", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000002900)="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", 0xffe}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003900)="32af862dac4bdc7636354c9f4624015ac6", 0x11}], 0x1, &(0x7f0000001700)}}], 0x6, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) 304.58602ms ago: executing program 4 (id=242): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0) 182.164425ms ago: executing program 4 (id=243): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000002940)=ANY=[@ANYBLOB="180000000540000000000000070000006b110a000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0xfec5) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)="11212e", 0x3}, 0x1, 0x0, 0x0, 0x24008011}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002100000000000000850000002e000000850000002a00000095ff82224b4edc129bba4bdc22ebab7a023e033c00d5b601726377862c52e2e60327cd87426e6f283269928032247d8184aeacafe5372a528444a81edff5a9777b0f4db447747ddb736befd20bd6ea743858f89096af7162bd8ffab10997de05b72b0b033d047af730"], &(0x7f0000000200)='GPL\x00', 0xb8ad, 0xffffffffffffffcd, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x50040) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x11) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x100000001, 0x10001}, 0x2, 0x10000, 0x9, 0x2, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff0400"/28], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) ptrace$peek(0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @private=0xa010102}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x600, 0x48c, 0x0, 0x0) r5 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2}) r6 = socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(r6, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) recvmmsg(r6, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r5, r6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 98.668529ms ago: executing program 5 (id=244): r0 = socket$inet(0x2, 0x800, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/121, 0x79}], 0x1, 0x5, 0xfffff073) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000202073110000000000202020af00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x101000) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000040)) 0s ago: executing program 3 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) (fail_nth: 2) kernel console output (not intermixed with test programs): 89][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.560184][ T3315] team0: Port device team_slave_0 added [ 36.565953][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.573121][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.580361][ T3320] bridge_slave_1: entered allmulticast mode [ 36.586894][ T3320] bridge_slave_1: entered promiscuous mode [ 36.605299][ T3317] team0: Port device team_slave_0 added [ 36.611820][ T3315] team0: Port device team_slave_1 added [ 36.636877][ T3317] team0: Port device team_slave_1 added [ 36.657053][ T3316] team0: Port device team_slave_0 added [ 36.662721][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.669960][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.677154][ T3314] bridge_slave_0: entered allmulticast mode [ 36.683628][ T3314] bridge_slave_0: entered promiscuous mode [ 36.695192][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.702401][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.709655][ T3314] bridge_slave_1: entered allmulticast mode [ 36.716096][ T3314] bridge_slave_1: entered promiscuous mode [ 36.723433][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.737605][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.744583][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.770640][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.782244][ T3316] team0: Port device team_slave_1 added [ 36.802411][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.816852][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.823872][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.849892][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.864065][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.871146][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.897123][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.908204][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.915166][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.941287][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.958259][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.969348][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.978743][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.985829][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.011889][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.023020][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.030189][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.056315][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.092615][ T3320] team0: Port device team_slave_0 added [ 37.108672][ T3314] team0: Port device team_slave_0 added [ 37.116003][ T3320] team0: Port device team_slave_1 added [ 37.124156][ T3315] hsr_slave_0: entered promiscuous mode [ 37.130349][ T3315] hsr_slave_1: entered promiscuous mode [ 37.141874][ T3314] team0: Port device team_slave_1 added [ 37.176405][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.183383][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.209484][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.225595][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.232593][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.258602][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.271792][ T3316] hsr_slave_0: entered promiscuous mode [ 37.277994][ T3316] hsr_slave_1: entered promiscuous mode [ 37.283901][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.289699][ T3316] Cannot create hsr debugfs directory [ 37.300362][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.307672][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.333727][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.347575][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.354553][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.380705][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.394229][ T3317] hsr_slave_0: entered promiscuous mode [ 37.400387][ T3317] hsr_slave_1: entered promiscuous mode [ 37.406302][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.412033][ T3317] Cannot create hsr debugfs directory [ 37.485814][ T3320] hsr_slave_0: entered promiscuous mode [ 37.491964][ T3320] hsr_slave_1: entered promiscuous mode [ 37.497952][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.503679][ T3320] Cannot create hsr debugfs directory [ 37.519076][ T3314] hsr_slave_0: entered promiscuous mode [ 37.525160][ T3314] hsr_slave_1: entered promiscuous mode [ 37.531387][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.537340][ T3314] Cannot create hsr debugfs directory [ 37.703768][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.712925][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.731370][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.746247][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.766976][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.785985][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.795141][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.804144][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.830834][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.839901][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.851036][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.860802][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.903207][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.912914][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.922298][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.945318][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.980019][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.988521][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.013546][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.022728][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.031586][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.051737][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.058903][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.072455][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.085433][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.098915][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.106082][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.118725][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.129270][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.136380][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.157880][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.164966][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.178763][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.189297][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.196378][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.205658][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.212774][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.231762][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.241836][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.248936][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.281506][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.288663][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.304658][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.311779][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.333755][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.369612][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.403105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.410442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.443594][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.450706][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.467006][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.493612][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.548034][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.590890][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.607251][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.631211][ T3315] veth0_vlan: entered promiscuous mode [ 38.650838][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.675625][ T3315] veth1_vlan: entered promiscuous mode [ 38.736522][ T3315] veth0_macvtap: entered promiscuous mode [ 38.747217][ T3315] veth1_macvtap: entered promiscuous mode [ 38.761342][ T3316] veth0_vlan: entered promiscuous mode [ 38.772523][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.818195][ T3316] veth1_vlan: entered promiscuous mode [ 38.825122][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.850919][ T3317] veth0_vlan: entered promiscuous mode [ 38.880365][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.897911][ T3316] veth0_macvtap: entered promiscuous mode [ 38.906465][ T3317] veth1_vlan: entered promiscuous mode [ 38.913291][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.922960][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937854][ T3316] veth1_macvtap: entered promiscuous mode [ 38.944635][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.957169][ T3320] veth0_vlan: entered promiscuous mode [ 38.965178][ T3320] veth1_vlan: entered promiscuous mode [ 38.998803][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.001531][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.023767][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.046830][ T3314] veth0_vlan: entered promiscuous mode [ 39.058499][ T3320] veth0_macvtap: entered promiscuous mode [ 39.068565][ T3314] veth1_vlan: entered promiscuous mode [ 39.084505][ T3317] veth0_macvtap: entered promiscuous mode [ 39.091654][ T576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.100894][ T576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.116629][ T3320] veth1_macvtap: entered promiscuous mode [ 39.131172][ T3317] veth1_macvtap: entered promiscuous mode [ 39.141971][ T576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.163985][ T576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.200539][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.216335][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.229437][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.242695][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.260674][ T3314] veth0_macvtap: entered promiscuous mode [ 39.272356][ T130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.298830][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 39.298848][ T28] audit: type=1400 audit(1773116892.107:115): avc: denied { perfmon } for pid=3491 comm="syz.2.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.325589][ T130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.339209][ T130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.357189][ T3314] veth1_macvtap: entered promiscuous mode [ 39.370789][ T28] audit: type=1400 audit(1773116892.107:116): avc: denied { prog_run } for pid=3491 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.389828][ T28] audit: type=1400 audit(1773116892.177:117): avc: denied { map_create } for pid=3496 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.409260][ T28] audit: type=1400 audit(1773116892.177:118): avc: denied { write } for pid=3496 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 39.429130][ T28] audit: type=1400 audit(1773116892.237:119): avc: denied { setopt } for pid=3496 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.433495][ T130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.469399][ T130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.491971][ T28] audit: type=1400 audit(1773116892.257:120): avc: denied { open } for pid=3496 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.517283][ C0] hrtimer: interrupt took 77545 ns [ 39.522959][ T130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.537887][ T130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.549093][ T28] audit: type=1400 audit(1773116892.257:121): avc: denied { kernel } for pid=3496 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.550169][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.573598][ T28] audit: type=1400 audit(1773116892.297:122): avc: denied { write } for pid=3496 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.626277][ T130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.657363][ T28] audit: type=1400 audit(1773116892.317:123): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.680603][ T28] audit: type=1400 audit(1773116892.377:124): avc: denied { create } for pid=3496 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.701321][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.711969][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.749937][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.771286][ T3505] FAULT_INJECTION: forcing a failure. [ 39.771286][ T3505] name failslab, interval 1, probability 0, space 0, times 1 [ 39.781694][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.812380][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 39.812412][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.812435][ T3505] Call Trace: [ 39.812443][ T3505] [ 39.812452][ T3505] __dump_stack+0x1d/0x30 [ 39.812529][ T3505] dump_stack_lvl+0x95/0xd0 [ 39.812625][ T3505] dump_stack+0x15/0x1b [ 39.812655][ T3505] should_fail_ex+0x263/0x280 [ 39.812685][ T3505] should_failslab+0x8c/0xb0 [ 39.812710][ T3505] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 39.812741][ T3505] ? __alloc_skb+0x2d6/0x690 [ 39.812799][ T3505] __alloc_skb+0x2d6/0x690 [ 39.812826][ T3505] ? __alloc_skb+0x200/0x690 [ 39.812851][ T3505] netlink_alloc_large_skb+0xbf/0xf0 [ 39.812885][ T3505] netlink_sendmsg+0x40c/0x6f0 [ 39.812975][ T3505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.813014][ T3505] ____sys_sendmsg+0x563/0x5b0 [ 39.813104][ T3505] ___sys_sendmsg+0x195/0x1e0 [ 39.813272][ T3505] __x64_sys_sendmsg+0xd4/0x160 [ 39.813379][ T3505] x64_sys_call+0x194c/0x3020 [ 39.813410][ T3505] do_syscall_64+0x12c/0x370 [ 39.813457][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.813532][ T3505] RIP: 0033:0x7f622dfec799 [ 39.813558][ T3505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.813580][ T3505] RSP: 002b:00007f622ca47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.813615][ T3505] RAX: ffffffffffffffda RBX: 00007f622e265fa0 RCX: 00007f622dfec799 [ 39.813629][ T3505] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 39.813645][ T3505] RBP: 00007f622ca47090 R08: 0000000000000000 R09: 0000000000000000 [ 39.813715][ T3505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.813731][ T3505] R13: 00007f622e266038 R14: 00007f622e265fa0 R15: 00007ffc6d76ad88 [ 39.813755][ T3505] [ 40.050514][ T3510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 40.134569][ T3506] loop0: detected capacity change from 0 to 512 [ 40.150572][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.290058][ T3506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.317044][ T3497] syz.2.11 (3497) used greatest stack depth: 10312 bytes left [ 40.335986][ T3506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.392498][ T3520] loop4: detected capacity change from 0 to 1024 [ 40.464259][ T3520] EXT4-fs: Ignoring removed orlov option [ 40.520377][ T3506] EXT4-fs (loop0): 1 orphan inode deleted [ 40.588817][ T3506] EXT4-fs (loop0): 1 truncate cleaned up [ 40.662516][ T3506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.748509][ T3520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.930532][ T3539] tipc: Can't bind to reserved service type 0 [ 40.931746][ T3506] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #12: block 7: comm syz.0.1: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 40.955781][ T3520] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.006778][ T3529] IPVS: starting estimator thread 0... [ 41.021747][ T3506] EXT4-fs (loop0): Remounting filesystem read-only [ 41.039563][ T3542] 9p: Bad value for 'wfdno' [ 41.075523][ T3545] Illegal XDP return value 2401685462 on prog (id 7) dev N/A, expect packet loss! [ 41.115288][ T3543] IPVS: using max 2400 ests per chain, 120000 per kthread [ 41.134763][ T3506] syz.0.1 (3506) used greatest stack depth: 9736 bytes left [ 41.224599][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.262774][ T3554] ªªªªªª: renamed from vlan0 (while UP) [ 41.270104][ T3556] FAULT_INJECTION: forcing a failure. [ 41.270104][ T3556] name failslab, interval 1, probability 0, space 0, times 0 [ 41.284708][ T3556] CPU: 1 UID: 0 PID: 3556 Comm: syz.1.27 Not tainted syzkaller #0 PREEMPT(full) [ 41.284745][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 41.284763][ T3556] Call Trace: [ 41.284846][ T3556] [ 41.284857][ T3556] __dump_stack+0x1d/0x30 [ 41.284918][ T3556] dump_stack_lvl+0x95/0xd0 [ 41.285026][ T3556] dump_stack+0x15/0x1b [ 41.285057][ T3556] should_fail_ex+0x263/0x280 [ 41.285091][ T3556] should_failslab+0x8c/0xb0 [ 41.285121][ T3556] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 41.285155][ T3556] ? __alloc_skb+0x2d6/0x690 [ 41.285189][ T3556] __alloc_skb+0x2d6/0x690 [ 41.285223][ T3556] ? __alloc_skb+0x200/0x690 [ 41.285299][ T3556] netlink_alloc_large_skb+0xbf/0xf0 [ 41.285331][ T3556] netlink_sendmsg+0x40c/0x6f0 [ 41.285387][ T3556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.285426][ T3556] ____sys_sendmsg+0x563/0x5b0 [ 41.285480][ T3556] ___sys_sendmsg+0x195/0x1e0 [ 41.285540][ T3556] __x64_sys_sendmsg+0xd4/0x160 [ 41.285582][ T3556] x64_sys_call+0x194c/0x3020 [ 41.285642][ T3556] do_syscall_64+0x12c/0x370 [ 41.285670][ T3556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.285699][ T3556] RIP: 0033:0x7f5a2eddc799 [ 41.285718][ T3556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.285740][ T3556] RSP: 002b:00007f5a2d837028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.285805][ T3556] RAX: ffffffffffffffda RBX: 00007f5a2f055fa0 RCX: 00007f5a2eddc799 [ 41.285822][ T3556] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 41.285908][ T3556] RBP: 00007f5a2d837090 R08: 0000000000000000 R09: 0000000000000000 [ 41.285924][ T3556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.285940][ T3556] R13: 00007f5a2f056038 R14: 00007f5a2f055fa0 R15: 00007ffe7537f508 [ 41.285966][ T3556] [ 41.496430][ T3561] loop4: detected capacity change from 0 to 512 [ 41.503950][ T3561] EXT4-fs: Ignoring removed nobh option [ 41.510098][ T3561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.526919][ T3561] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.545074][ T3561] EXT4-fs (loop4): 1 truncate cleaned up [ 41.551251][ T3561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.642032][ T3566] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 41.665755][ T3561] capability: warning: `syz.4.26' uses deprecated v2 capabilities in a way that may be insecure [ 41.702192][ T3573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 41.737759][ T3575] Cannot find set identified by id 0 to match [ 41.767675][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.793891][ T3580] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 42.054824][ T3583] loop3: detected capacity change from 0 to 512 [ 42.063564][ T3583] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.070161][ T3583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.36: ea_inode with extended attributes [ 42.082669][ T3583] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.085223][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.100825][ C1] EXT4-fs (loop3): initial error at time 1773116894: ext4_xattr_inode_iget:441: inode 11 [ 42.110718][ C1] EXT4-fs (loop3): last error at time 1773116894: ext4_xattr_inode_iget:441: inode 11 [ 42.175849][ T3594] loop1: detected capacity change from 0 to 512 [ 42.218256][ T3594] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.225295][ T3583] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.36: error while reading EA inode 11 err=-117 [ 42.237470][ T3583] loop3: lost filesystem error report for type 5 error -117 [ 42.237929][ T3594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.38: ea_inode with extended attributes [ 42.257846][ T3594] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.258624][ T3594] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.38: error while reading EA inode 11 err=-117 [ 42.267805][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 42.267827][ C1] EXT4-fs (loop1): initial error at time 1773116895: ext4_xattr_inode_iget:441: inode 11 [ 42.267867][ C1] EXT4-fs (loop1): last error at time 1773116895: ext4_xattr_inode_iget:441: inode 11 [ 42.306034][ T3594] loop1: lost filesystem error report for type 5 error -117 [ 42.307331][ T3583] EXT4-fs (loop3): 1 orphan inode deleted [ 42.320707][ T3583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.385258][ T3594] EXT4-fs (loop1): 1 orphan inode deleted [ 42.391824][ T3594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.405972][ T3594] FAULT_INJECTION: forcing a failure. [ 42.405972][ T3594] name failslab, interval 1, probability 0, space 0, times 0 [ 42.418914][ T3594] CPU: 1 UID: 0 PID: 3594 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT(full) [ 42.418947][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.419033][ T3594] Call Trace: [ 42.419041][ T3594] [ 42.419051][ T3594] __dump_stack+0x1d/0x30 [ 42.419086][ T3594] dump_stack_lvl+0x95/0xd0 [ 42.419117][ T3594] dump_stack+0x15/0x1b [ 42.419214][ T3594] should_fail_ex+0x263/0x280 [ 42.419241][ T3594] ? kzalloc_noprof+0x52/0xa0 [ 42.419286][ T3594] should_failslab+0x8c/0xb0 [ 42.419324][ T3594] __kmalloc_cache_noprof+0x5f/0x410 [ 42.419359][ T3594] kzalloc_noprof+0x52/0xa0 [ 42.419472][ T3594] ip6_setup_cork+0x35e/0x680 [ 42.419584][ T3594] ip6_make_skb+0x107/0x370 [ 42.419608][ T3594] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 42.419657][ T3594] udpv6_sendmsg+0x1574/0x17d0 [ 42.419703][ T3594] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 42.419789][ T3594] ? avc_has_perm+0x101/0x190 [ 42.419820][ T3594] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 42.419850][ T3594] inet6_sendmsg+0xac/0xd0 [ 42.419980][ T3594] ? __pfx_inet6_sendmsg+0x10/0x10 [ 42.420015][ T3594] ____sys_sendmsg+0x3c1/0x5b0 [ 42.420046][ T3594] ___sys_sendmsg+0x195/0x1e0 [ 42.420145][ T3594] __sys_sendmmsg+0x185/0x320 [ 42.420185][ T3594] __x64_sys_sendmmsg+0x57/0x70 [ 42.420221][ T3594] x64_sys_call+0x27aa/0x3020 [ 42.420257][ T3594] do_syscall_64+0x12c/0x370 [ 42.420313][ T3594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.420334][ T3594] RIP: 0033:0x7f5a2eddc799 [ 42.420348][ T3594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.420384][ T3594] RSP: 002b:00007f5a2d7f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 42.420410][ T3594] RAX: ffffffffffffffda RBX: 00007f5a2f056180 RCX: 00007f5a2eddc799 [ 42.420427][ T3594] RDX: 040000000000017d RSI: 0000200000002940 RDI: 0000000000000003 [ 42.420444][ T3594] RBP: 00007f5a2d7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 42.420537][ T3594] R10: 0000000000000888 R11: 0000000000000246 R12: 0000000000000001 [ 42.420552][ T3594] R13: 00007f5a2f056218 R14: 00007f5a2f056180 R15: 00007ffe7537f508 [ 42.420571][ T3594] [ 42.733898][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.834354][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.006635][ T3613] raw_sendmsg: syz.4.47 forgot to set AF_INET. Fix it! [ 43.315356][ T3547] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.331719][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.505553][ T3622] syzkaller0: entered promiscuous mode [ 43.513124][ T3622] syzkaller0: entered allmulticast mode [ 43.524913][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.589910][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.720299][ T3643] netlink: 32 bytes leftover after parsing attributes in process `syz.3.52'. [ 43.740616][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.856748][ T3628] chnl_net:caif_netlink_parms(): no params data found [ 43.946708][ T30] bridge_slave_1: left allmulticast mode [ 43.955990][ T30] bridge_slave_1: left promiscuous mode [ 43.964914][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.996072][ T30] bridge_slave_0: left allmulticast mode [ 44.001816][ T30] bridge_slave_0: left promiscuous mode [ 44.015522][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.069566][ T3662] loop1: detected capacity change from 0 to 512 [ 44.091461][ T3657] loop3: detected capacity change from 0 to 512 [ 44.132929][ T3662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.148641][ T3657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.213607][ T3657] EXT4-fs (loop3): 1 orphan inode deleted [ 44.226617][ T3662] EXT4-fs (loop1): 1 orphan inode deleted [ 44.233618][ T3662] EXT4-fs (loop1): 1 truncate cleaned up [ 44.240553][ T3657] EXT4-fs (loop3): 1 truncate cleaned up [ 44.268951][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.280445][ T3662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.322717][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.357656][ T3657] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.56: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 44.382051][ T3662] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #12: block 7: comm syz.1.58: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 44.424445][ T3662] EXT4-fs (loop1): Remounting filesystem read-only [ 44.430537][ T3657] EXT4-fs (loop3): Remounting filesystem read-only [ 44.439325][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.450212][ T30] bond0 (unregistering): Released all slaves [ 44.515687][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.536795][ T30] hsr_slave_0: left promiscuous mode [ 44.546609][ T30] hsr_slave_1: left promiscuous mode [ 44.552341][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.566890][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.578929][ T3675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 44.588851][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 44.588868][ T28] audit: type=1400 audit(1773116897.397:199): avc: denied { read open } for pid=3676 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.636254][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.637893][ T28] audit: type=1400 audit(1773116897.427:200): avc: denied { getattr } for pid=3676 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.643704][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.649131][ T3662] syz.1.58 (3662) used greatest stack depth: 9352 bytes left [ 44.732798][ T30] veth1_macvtap: left promiscuous mode [ 44.738673][ T30] veth0_macvtap: left promiscuous mode [ 44.748684][ T28] audit: type=1400 audit(1773116897.557:201): avc: denied { add_name } for pid=3673 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.770300][ T30] veth1_vlan: left promiscuous mode [ 44.776498][ T30] veth0_vlan: left promiscuous mode [ 44.815740][ T28] audit: type=1400 audit(1773116897.617:202): avc: denied { remove_name } for pid=3689 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.913968][ T30] team0 (unregistering): Port device team_slave_1 removed [ 44.924842][ T30] team0 (unregistering): Port device team_slave_0 removed [ 44.961653][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.968890][ T3628] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.976206][ T3628] bridge_slave_0: entered allmulticast mode [ 44.982665][ T3628] bridge_slave_0: entered promiscuous mode [ 44.991369][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.998508][ T3628] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.006884][ T3628] bridge_slave_1: entered allmulticast mode [ 45.013445][ T3628] bridge_slave_1: entered promiscuous mode [ 45.046296][ T3692] hsr0: entered promiscuous mode [ 45.078056][ T3628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.106085][ T3628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.135275][ T28] audit: type=1400 audit(1773116897.937:203): avc: denied { execute } for pid=3700 comm="syz.2.63" path="/24/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.138983][ T3628] team0: Port device team_slave_0 added [ 45.169266][ T28] audit: type=1400 audit(1773116897.977:204): avc: denied { name_bind } for pid=3700 comm="syz.2.63" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.191964][ T3628] team0: Port device team_slave_1 added [ 45.198274][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.239194][ T3628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.246375][ T28] audit: type=1400 audit(1773116897.977:205): avc: denied { remount } for pid=3700 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.266192][ T3628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.307797][ T3628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.334726][ T3628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.342805][ T3628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.405685][ T3628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.492225][ T3628] hsr_slave_0: entered promiscuous mode [ 45.498685][ T3628] hsr_slave_1: entered promiscuous mode [ 45.504629][ T3628] debugfs: 'hsr0' already exists in 'hsr' [ 45.510711][ T3628] Cannot create hsr debugfs directory [ 45.552546][ T28] audit: type=1400 audit(1773116898.357:206): avc: denied { write } for pid=3728 comm="syz.3.68" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.577361][ T3729] loop3: detected capacity change from 0 to 164 [ 45.624009][ T28] audit: type=1400 audit(1773116898.387:207): avc: denied { open } for pid=3728 comm="syz.3.68" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.667898][ T28] audit: type=1400 audit(1773116898.407:208): avc: denied { mount } for pid=3728 comm="syz.3.68" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.711598][ T3716] loop2: detected capacity change from 0 to 512 [ 45.723758][ T3735] netlink: 'syz.3.69': attribute type 14 has an invalid length. [ 45.731733][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 45.743736][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.754642][ T3716] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.771134][ T3735] bond0: option xmit_hash_policy: invalid value (172) [ 45.791682][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 45.820051][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.827353][ T3716] EXT4-fs (loop2): 1 orphan inode deleted [ 45.834207][ T3716] EXT4-fs (loop2): 1 truncate cleaned up [ 45.849012][ T3716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.878202][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.927513][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.022250][ T3628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.052881][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.095903][ T3315] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.112453][ T3315] EXT4-fs (loop2): Remounting filesystem read-only [ 46.165287][ T3628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.178152][ T3628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.188456][ T3628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.207914][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.251945][ T3714] chnl_net:caif_netlink_parms(): no params data found [ 46.296222][ T3757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.363411][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.371259][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.378827][ T3714] bridge_slave_0: entered allmulticast mode [ 46.385878][ T3714] bridge_slave_0: entered promiscuous mode [ 46.394563][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.402087][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.410560][ T3714] bridge_slave_1: entered allmulticast mode [ 46.417575][ T3714] bridge_slave_1: entered promiscuous mode [ 46.435318][ T3628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.475495][ T3714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.497843][ T3714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.513320][ T30] bridge_slave_1: left allmulticast mode [ 46.525079][ T30] bridge_slave_1: left promiscuous mode [ 46.531268][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.545859][ T30] bridge_slave_0: left allmulticast mode [ 46.551546][ T30] bridge_slave_0: left promiscuous mode [ 46.559974][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.608556][ T3805] loop4: detected capacity change from 0 to 164 [ 46.653057][ T3810] FAULT_INJECTION: forcing a failure. [ 46.653057][ T3810] name failslab, interval 1, probability 0, space 0, times 0 [ 46.678856][ T3810] CPU: 1 UID: 0 PID: 3810 Comm: syz.4.78 Not tainted syzkaller #0 PREEMPT(full) [ 46.678890][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 46.678970][ T3810] Call Trace: [ 46.678978][ T3810] [ 46.678988][ T3810] __dump_stack+0x1d/0x30 [ 46.679023][ T3810] dump_stack_lvl+0x95/0xd0 [ 46.679053][ T3810] dump_stack+0x15/0x1b [ 46.679074][ T3810] should_fail_ex+0x263/0x280 [ 46.679165][ T3810] should_failslab+0x8c/0xb0 [ 46.679186][ T3810] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 46.679251][ T3810] ? __alloc_skb+0x2d6/0x690 [ 46.679283][ T3810] __alloc_skb+0x2d6/0x690 [ 46.679354][ T3810] ? __alloc_skb+0x200/0x690 [ 46.679384][ T3810] netlink_alloc_large_skb+0xbf/0xf0 [ 46.679411][ T3810] netlink_sendmsg+0x40c/0x6f0 [ 46.679508][ T3810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.679547][ T3810] ____sys_sendmsg+0x563/0x5b0 [ 46.679642][ T3810] ___sys_sendmsg+0x195/0x1e0 [ 46.679693][ T3810] __x64_sys_sendmsg+0xd4/0x160 [ 46.679732][ T3810] x64_sys_call+0x194c/0x3020 [ 46.679795][ T3810] do_syscall_64+0x12c/0x370 [ 46.679828][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.679854][ T3810] RIP: 0033:0x7f8bcf91c799 [ 46.679873][ T3810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.679894][ T3810] RSP: 002b:00007f8bce36f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.679970][ T3810] RAX: ffffffffffffffda RBX: 00007f8bcfb95fa0 RCX: 00007f8bcf91c799 [ 46.679988][ T3810] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 46.680004][ T3810] RBP: 00007f8bce36f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.680020][ T3810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.680035][ T3810] R13: 00007f8bcfb96038 R14: 00007f8bcfb95fa0 R15: 00007ffe8c8107f8 [ 46.680125][ T3810] [ 46.923177][ T3816] loop4: detected capacity change from 0 to 512 [ 46.934614][ T3816] ======================================================= [ 46.934614][ T3816] WARNING: The mand mount option has been deprecated and [ 46.934614][ T3816] and is ignored by this kernel. Remove the mand [ 46.934614][ T3816] option from the mount to silence this warning. [ 46.934614][ T3816] ======================================================= [ 46.971900][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.986922][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.998572][ T30] bond0 (unregistering): Released all slaves [ 47.009570][ T3816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.028481][ T3816] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.031302][ T3714] team0: Port device team_slave_0 added [ 47.049845][ T3628] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.067553][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 47.100567][ T3714] team0: Port device team_slave_1 added [ 47.117265][ T3816] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 47.131247][ T3816] netlink: 'syz.4.79': attribute type 2 has an invalid length. [ 47.135995][ T3826] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.79: corrupted inode contents [ 47.150986][ T3826] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.79: mark_inode_dirty error [ 47.165535][ T30] hsr_slave_0: left promiscuous mode [ 47.168236][ T3826] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.79: corrupted inode contents [ 47.201836][ T3816] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.79: corrupted inode contents [ 47.213601][ T30] hsr_slave_1: left promiscuous mode [ 47.221414][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.229741][ T3816] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.79: mark_inode_dirty error [ 47.233357][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.246329][ T3816] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.79: corrupted inode contents [ 47.260133][ T3816] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.79: mark_inode_dirty error [ 47.260278][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.271971][ T3816] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.79: corrupted inode contents [ 47.279279][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.291502][ T3816] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.79: mark_inode_dirty error [ 47.309846][ T3826] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.79: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 47.309846][ T3826] [ 47.330004][ T3826] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.79: corrupted inode contents [ 47.330042][ T30] veth1_macvtap: left promiscuous mode [ 47.347482][ T30] veth0_macvtap: left promiscuous mode [ 47.353103][ T30] veth1_vlan: left promiscuous mode [ 47.358457][ T30] veth0_vlan: left promiscuous mode [ 47.376036][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.455055][ T3835] sctp: [Deprecated]: syz.3.81 (pid 3835) Use of int in max_burst socket option deprecated. [ 47.455055][ T3835] Use struct sctp_assoc_value instead [ 47.456782][ T30] team0 (unregistering): Port device team_slave_1 removed [ 47.482305][ T3835] loop3: detected capacity change from 0 to 128 [ 47.489092][ T30] team0 (unregistering): Port device team_slave_0 removed [ 47.496637][ T3835] msdos: Unknown parameter './file1' [ 47.578118][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.585291][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.601655][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.608861][ T1623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.625950][ T3714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.632996][ T3714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.659857][ T3714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.691230][ T3714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.698402][ T3714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.726295][ T3714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.956894][ T3714] hsr_slave_0: entered promiscuous mode [ 47.964065][ T3714] hsr_slave_1: entered promiscuous mode [ 47.970216][ T3714] debugfs: 'hsr0' already exists in 'hsr' [ 47.978104][ T3714] Cannot create hsr debugfs directory [ 48.043225][ T3628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.164066][ T3867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 48.249998][ T3817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.319175][ T3714] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.335744][ T3817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.347514][ T3714] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.364707][ T3714] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.384004][ T3788] chnl_net:caif_netlink_parms(): no params data found [ 48.416373][ T3817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.442482][ T3884] netlink: 'syz.3.84': attribute type 10 has an invalid length. [ 48.451757][ T3884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'. [ 48.461910][ T3714] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.480835][ T3884] team0: entered promiscuous mode [ 48.492579][ T3884] team_slave_0: entered promiscuous mode [ 48.509308][ T3884] team_slave_1: entered promiscuous mode [ 48.515191][ T3884] team0: entered allmulticast mode [ 48.523765][ T3884] team_slave_0: entered allmulticast mode [ 48.534457][ T3884] team_slave_1: entered allmulticast mode [ 48.541536][ T3884] bridge0: port 3(team0) entered blocking state [ 48.548249][ T3884] bridge0: port 3(team0) entered disabled state [ 48.556302][ T3884] bridge0: port 3(team0) entered blocking state [ 48.562771][ T3884] bridge0: port 3(team0) entered forwarding state [ 48.581914][ T3817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.639538][ T3897] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 48.709898][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.720367][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.725139][ T3924] FAULT_INJECTION: forcing a failure. [ 48.725139][ T3924] name failslab, interval 1, probability 0, space 0, times 0 [ 48.730109][ T3788] bridge_slave_0: entered allmulticast mode [ 48.747730][ T3788] bridge_slave_0: entered promiscuous mode [ 48.759331][ T3924] CPU: 0 UID: 0 PID: 3924 Comm: syz.3.87 Not tainted syzkaller #0 PREEMPT(full) [ 48.759363][ T3924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 48.759375][ T3924] Call Trace: [ 48.759383][ T3924] [ 48.759411][ T3924] __dump_stack+0x1d/0x30 [ 48.759445][ T3924] dump_stack_lvl+0x95/0xd0 [ 48.759510][ T3924] dump_stack+0x15/0x1b [ 48.759537][ T3924] should_fail_ex+0x263/0x280 [ 48.759567][ T3924] should_failslab+0x8c/0xb0 [ 48.759657][ T3924] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 48.759701][ T3924] ? __alloc_skb+0x2d6/0x690 [ 48.759735][ T3924] __alloc_skb+0x2d6/0x690 [ 48.759766][ T3924] ? __alloc_skb+0x200/0x690 [ 48.759803][ T3924] netlink_alloc_large_skb+0xbf/0xf0 [ 48.759836][ T3924] netlink_sendmsg+0x40c/0x6f0 [ 48.759875][ T3924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.759984][ T3924] ____sys_sendmsg+0x563/0x5b0 [ 48.760025][ T3924] ___sys_sendmsg+0x195/0x1e0 [ 48.760079][ T3924] __x64_sys_sendmsg+0xd4/0x160 [ 48.760202][ T3924] x64_sys_call+0x194c/0x3020 [ 48.760229][ T3924] do_syscall_64+0x12c/0x370 [ 48.760250][ T3924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.760273][ T3924] RIP: 0033:0x7f622dfec799 [ 48.760305][ T3924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.760328][ T3924] RSP: 002b:00007f622ca47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.760359][ T3924] RAX: ffffffffffffffda RBX: 00007f622e265fa0 RCX: 00007f622dfec799 [ 48.760377][ T3924] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 48.760442][ T3924] RBP: 00007f622ca47090 R08: 0000000000000000 R09: 0000000000000000 [ 48.760454][ T3924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.760466][ T3924] R13: 00007f622e266038 R14: 00007f622e265fa0 R15: 00007ffc6d76ad88 [ 48.760485][ T3924] [ 48.963105][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.980096][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.987410][ T3788] bridge_slave_1: entered allmulticast mode [ 48.994139][ T3788] bridge_slave_1: entered promiscuous mode [ 49.002798][ T3930] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 49.051831][ T3817] bridge_slave_1: left allmulticast mode [ 49.067200][ T3817] bridge_slave_1: left promiscuous mode [ 49.072945][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.091634][ T3817] bridge_slave_0: left allmulticast mode [ 49.099867][ T3817] bridge_slave_0: left promiscuous mode [ 49.106168][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.236655][ T3952] FAULT_INJECTION: forcing a failure. [ 49.236655][ T3952] name failslab, interval 1, probability 0, space 0, times 0 [ 49.269893][ T3952] CPU: 1 UID: 0 PID: 3952 Comm: syz.4.89 Not tainted syzkaller #0 PREEMPT(full) [ 49.269918][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.269928][ T3952] Call Trace: [ 49.269934][ T3952] [ 49.269940][ T3952] __dump_stack+0x1d/0x30 [ 49.269964][ T3952] dump_stack_lvl+0x95/0xd0 [ 49.270033][ T3952] dump_stack+0x15/0x1b [ 49.270053][ T3952] should_fail_ex+0x263/0x280 [ 49.270129][ T3952] should_failslab+0x8c/0xb0 [ 49.270148][ T3952] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 49.270168][ T3952] ? __alloc_skb+0x2d6/0x690 [ 49.270242][ T3952] __alloc_skb+0x2d6/0x690 [ 49.270262][ T3952] ? __alloc_skb+0x200/0x690 [ 49.270332][ T3952] netlink_alloc_large_skb+0xbf/0xf0 [ 49.270419][ T3952] netlink_sendmsg+0x40c/0x6f0 [ 49.270447][ T3952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.270486][ T3952] ____sys_sendmsg+0x563/0x5b0 [ 49.270526][ T3952] ___sys_sendmsg+0x195/0x1e0 [ 49.270562][ T3952] __x64_sys_sendmsg+0xd4/0x160 [ 49.270665][ T3952] x64_sys_call+0x194c/0x3020 [ 49.270688][ T3952] do_syscall_64+0x12c/0x370 [ 49.270733][ T3952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.270753][ T3952] RIP: 0033:0x7f8bcf91c799 [ 49.270814][ T3952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.270836][ T3952] RSP: 002b:00007f8bce36f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.270863][ T3952] RAX: ffffffffffffffda RBX: 00007f8bcfb95fa0 RCX: 00007f8bcf91c799 [ 49.270875][ T3952] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 49.270924][ T3952] RBP: 00007f8bce36f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.270935][ T3952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.270967][ T3952] R13: 00007f8bcfb96038 R14: 00007f8bcfb95fa0 R15: 00007ffe8c8107f8 [ 49.270991][ T3952] [ 49.487898][ T3817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.497935][ T3817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.507785][ T3817] bond0 (unregistering): Released all slaves [ 49.528616][ T3788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.573147][ T3788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.595466][ T3817] hsr_slave_0: left promiscuous mode [ 49.707236][ T3817] hsr_slave_1: left promiscuous mode [ 49.713004][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.721047][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.804394][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.824120][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.835144][ T3817] veth1_macvtap: left promiscuous mode [ 49.840765][ T3817] veth0_macvtap: left promiscuous mode [ 49.846502][ T3817] veth1_vlan: left promiscuous mode [ 49.851839][ T3817] veth0_vlan: left promiscuous mode [ 49.863146][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 49.863165][ T28] audit: type=1400 audit(1773116902.667:232): avc: denied { ioctl } for pid=3958 comm="syz.4.91" path="socket:[7003]" dev="sockfs" ino=7003 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.931833][ T28] audit: type=1400 audit(1773116902.737:233): avc: denied { kexec_image_load } for pid=3966 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 49.990344][ T3817] team0 (unregistering): Port device team_slave_1 removed [ 50.000440][ T3817] team0 (unregistering): Port device team_slave_0 removed [ 50.071564][ T3965] syzkaller0: entered promiscuous mode [ 50.077188][ T3965] syzkaller0: entered allmulticast mode [ 50.110437][ T3788] team0: Port device team_slave_0 added [ 50.118546][ T3788] team0: Port device team_slave_1 added [ 50.135427][ T3714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.153268][ T3788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.160522][ T3788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.187143][ T3788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.252865][ T28] audit: type=1400 audit(1773116903.057:234): avc: denied { write } for pid=3977 comm="syz.3.94" lport=43337 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 50.276967][ T3628] veth0_vlan: entered promiscuous mode [ 50.283522][ T3982] loop4: detected capacity change from 0 to 1024 [ 50.299449][ T3788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.301458][ T3982] EXT4-fs: Ignoring removed orlov option [ 50.321664][ T3788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.380005][ T3982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.392599][ T3788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.441620][ T3788] hsr_slave_0: entered promiscuous mode [ 50.448087][ T3788] hsr_slave_1: entered promiscuous mode [ 50.464190][ T3628] veth1_vlan: entered promiscuous mode [ 50.491067][ T3714] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.555918][ T28] audit: type=1326 audit(1773116903.357:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf91c799 code=0x7ffc0000 [ 50.579397][ T28] audit: type=1326 audit(1773116903.367:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f8bcf91c799 code=0x7ffc0000 [ 50.606579][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.613695][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.625771][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.632897][ T1623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.640943][ T28] audit: type=1326 audit(1773116903.367:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf91c799 code=0x7ffc0000 [ 50.676551][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.691171][ T3628] veth0_macvtap: entered promiscuous mode [ 50.699071][ T28] audit: type=1326 audit(1773116903.377:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f8bcf91c799 code=0x7ffc0000 [ 50.732948][ T28] audit: type=1326 audit(1773116903.387:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.4.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcf91c799 code=0x7ffc0000 [ 50.778686][ T4000] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 50.787587][ T3817] IPVS: stop unused estimator thread 0... [ 50.798238][ T3628] veth1_macvtap: entered promiscuous mode [ 50.831043][ T3714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.847564][ T3714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.863564][ T3628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.907666][ T3628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.924134][ T4005] loop3: detected capacity change from 0 to 164 [ 50.974688][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.030390][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.077200][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.106819][ T28] audit: type=1400 audit(1773116903.917:240): avc: denied { read } for pid=3999 comm="syz.4.96" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.144394][ T3714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.166390][ T28] audit: type=1400 audit(1773116903.967:241): avc: denied { module_request } for pid=3628 comm="syz-executor" kmod="fs-binder" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.191716][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.269244][ T3788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 51.287892][ T3788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 51.307525][ T3788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 51.317673][ T3788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 51.418236][ T3788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.459082][ T3788] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.480186][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.487381][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.512749][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.520046][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.599283][ T4061] netlink: 52 bytes leftover after parsing attributes in process `syz.5.100'. [ 51.617556][ T3714] veth0_vlan: entered promiscuous mode [ 51.635637][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.642787][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.663002][ T4061] loop5: detected capacity change from 0 to 512 [ 51.669742][ T3714] veth1_vlan: entered promiscuous mode [ 51.683466][ T4061] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 51.713378][ T3714] veth0_macvtap: entered promiscuous mode [ 51.731079][ T4061] EXT4-fs (loop5): orphan file too big: 4294967295 [ 51.737742][ T3714] veth1_macvtap: entered promiscuous mode [ 51.751135][ T3714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.762170][ T3714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.772883][ T3817] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.783319][ T1623] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.786893][ T4061] EXT4-fs (loop5): mount failed [ 51.798898][ T4073] loop4: detected capacity change from 0 to 512 [ 51.815187][ T4073] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 51.830114][ T3817] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.839706][ T3817] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.851565][ T4073] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 51.879524][ T3788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.899662][ T4073] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.101: bad orphan inode 4 [ 51.917660][ T4073] loop4: lost filesystem error report for type 5 error -117 [ 51.917862][ T4073] EXT4-fs (loop4): 1 orphan inode deleted [ 51.925250][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 51.925270][ C1] EXT4-fs (loop4): initial error at time 1773116904: ext4_orphan_get:1417 [ 51.925293][ C1] EXT4-fs (loop4): last error at time 1773116904: ext4_orphan_get:1417 [ 51.957080][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.004946][ T4084] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 52.004946][ T4084] The task syz.5.100 (4084) triggered the difference, watch for misbehavior. [ 52.121993][ T4094] loop3: detected capacity change from 0 to 164 [ 52.182594][ T4094] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.201770][ T4094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.102'. [ 52.310743][ T4108] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 52.320503][ T4108] SELinux: failed to load policy [ 52.364852][ T3788] veth0_vlan: entered promiscuous mode [ 52.393095][ T3788] veth1_vlan: entered promiscuous mode [ 52.408056][ T4114] loop6: detected capacity change from 0 to 512 [ 52.452166][ T4108] syz.3.102 uses obsolete (PF_INET,SOCK_PACKET) [ 52.469612][ T4114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.485514][ T3788] veth0_macvtap: entered promiscuous mode [ 52.495363][ T4114] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.506349][ T3788] veth1_macvtap: entered promiscuous mode [ 52.518071][ T3788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.530551][ T3788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.547555][ T4114] EXT4-fs (loop6): shut down requested (2) [ 52.606193][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.620209][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.629230][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.653213][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.672786][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.685550][ T4128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 53.010055][ T4155] loop5: detected capacity change from 0 to 256 [ 53.074562][ T4160] FAULT_INJECTION: forcing a failure. [ 53.074562][ T4160] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 53.087806][ T4160] CPU: 1 UID: 0 PID: 4160 Comm: syz.7.112 Not tainted syzkaller #0 PREEMPT(full) [ 53.087838][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.087853][ T4160] Call Trace: [ 53.087861][ T4160] [ 53.087871][ T4160] __dump_stack+0x1d/0x30 [ 53.087932][ T4160] dump_stack_lvl+0x95/0xd0 [ 53.087979][ T4160] dump_stack+0x15/0x1b [ 53.088009][ T4160] should_fail_ex+0x263/0x280 [ 53.088034][ T4160] should_fail+0xb/0x20 [ 53.088155][ T4160] should_fail_usercopy+0x1a/0x20 [ 53.088181][ T4160] strncpy_from_user+0x27/0x250 [ 53.088233][ T4160] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 53.088259][ T4160] do_getname+0x59/0x1c0 [ 53.088282][ T4160] getname_flags+0x1d/0x30 [ 53.088305][ T4160] do_sys_openat2+0x60/0x130 [ 53.088343][ T4160] __x64_sys_openat+0xf2/0x120 [ 53.088372][ T4160] x64_sys_call+0x1e39/0x3020 [ 53.088447][ T4160] do_syscall_64+0x12c/0x370 [ 53.088469][ T4160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.088492][ T4160] RIP: 0033:0x7ff8cc3ec799 [ 53.088514][ T4160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.088532][ T4160] RSP: 002b:00007ff8cae05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.088589][ T4160] RAX: ffffffffffffffda RBX: 00007ff8cc666180 RCX: 00007ff8cc3ec799 [ 53.088603][ T4160] RDX: 0000000000002182 RSI: 0000200000001840 RDI: ffffffffffffff9c [ 53.088617][ T4160] RBP: 00007ff8cae05090 R08: 0000000000000000 R09: 0000000000000000 [ 53.088630][ T4160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.088642][ T4160] R13: 00007ff8cc666218 R14: 00007ff8cc666180 R15: 00007ffeff9d0ea8 [ 53.088661][ T4160] [ 53.555457][ T4076] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 53.736818][ T4170] loop5: detected capacity change from 0 to 512 [ 53.755671][ T4170] EXT4-fs: Ignoring removed nobh option [ 53.776086][ T4170] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.793060][ T4170] EXT4-fs (loop5): 1 truncate cleaned up [ 53.799633][ T4170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.048279][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.068231][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.080162][ T4184] hsr0: entered promiscuous mode [ 54.201744][ T4193] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 54.373671][ T4200] FAULT_INJECTION: forcing a failure. [ 54.373671][ T4200] name failslab, interval 1, probability 0, space 0, times 0 [ 54.386401][ T4200] CPU: 0 UID: 0 PID: 4200 Comm: syz.4.121 Not tainted syzkaller #0 PREEMPT(full) [ 54.386430][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.386442][ T4200] Call Trace: [ 54.386448][ T4200] [ 54.386455][ T4200] __dump_stack+0x1d/0x30 [ 54.386481][ T4200] dump_stack_lvl+0x95/0xd0 [ 54.386586][ T4200] dump_stack+0x15/0x1b [ 54.386607][ T4200] should_fail_ex+0x263/0x280 [ 54.386630][ T4200] should_failslab+0x8c/0xb0 [ 54.386651][ T4200] __kmalloc_cache_node_noprof+0x6b/0x480 [ 54.386739][ T4200] ? __get_vm_area_node+0x106/0x1d0 [ 54.386771][ T4200] __get_vm_area_node+0x106/0x1d0 [ 54.386795][ T4200] __vmalloc_node_range_noprof+0x291/0x12b0 [ 54.386882][ T4200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.386900][ T4200] ? selinux_file_open+0x2e6/0x330 [ 54.386925][ T4200] ? __rcu_read_unlock+0x4e/0x70 [ 54.386951][ T4200] ? avc_has_perm_noaudit+0xab/0x130 [ 54.387055][ T4200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.387074][ T4200] __vmalloc_noprof+0xa4/0xf0 [ 54.387103][ T4200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.387202][ T4200] bpf_prog_alloc_no_stats+0x47/0x390 [ 54.387220][ T4200] ? bpf_prog_alloc+0x2a/0x150 [ 54.387237][ T4200] bpf_prog_alloc+0x3c/0x150 [ 54.387254][ T4200] bpf_prog_load+0x506/0x1140 [ 54.387297][ T4200] ? security_bpf+0x2b/0x90 [ 54.387409][ T4200] __sys_bpf+0x505/0x7e0 [ 54.387442][ T4200] __x64_sys_bpf+0x41/0x50 [ 54.387640][ T4200] x64_sys_call+0x10cb/0x3020 [ 54.387665][ T4200] do_syscall_64+0x12c/0x370 [ 54.387713][ T4200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.387800][ T4200] RIP: 0033:0x7f8bcf91c799 [ 54.387816][ T4200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.387886][ T4200] RSP: 002b:00007f8bce32d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.387905][ T4200] RAX: ffffffffffffffda RBX: 00007f8bcfb96180 RCX: 00007f8bcf91c799 [ 54.387992][ T4200] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 54.388005][ T4200] RBP: 00007f8bce32d090 R08: 0000000000000000 R09: 0000000000000000 [ 54.388052][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.388071][ T4200] R13: 00007f8bcfb96218 R14: 00007f8bcfb96180 R15: 00007ffe8c8107f8 [ 54.388090][ T4200] [ 54.388097][ T4200] syz.4.121: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 54.635649][ T4200] CPU: 0 UID: 0 PID: 4200 Comm: syz.4.121 Not tainted syzkaller #0 PREEMPT(full) [ 54.635681][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.635693][ T4200] Call Trace: [ 54.635700][ T4200] [ 54.635708][ T4200] __dump_stack+0x1d/0x30 [ 54.635784][ T4200] dump_stack_lvl+0x95/0xd0 [ 54.635814][ T4200] dump_stack+0x15/0x1b [ 54.635870][ T4200] warn_alloc+0x145/0x1c0 [ 54.636017][ T4200] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 54.636047][ T4200] ? selinux_file_open+0x2e6/0x330 [ 54.636078][ T4200] ? __rcu_read_unlock+0x4e/0x70 [ 54.636141][ T4200] ? avc_has_perm_noaudit+0xab/0x130 [ 54.636175][ T4200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.636276][ T4200] __vmalloc_noprof+0xa4/0xf0 [ 54.636308][ T4200] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 54.636333][ T4200] bpf_prog_alloc_no_stats+0x47/0x390 [ 54.636351][ T4200] ? bpf_prog_alloc+0x2a/0x150 [ 54.636399][ T4200] bpf_prog_alloc+0x3c/0x150 [ 54.636422][ T4200] bpf_prog_load+0x506/0x1140 [ 54.636528][ T4200] ? security_bpf+0x2b/0x90 [ 54.636638][ T4200] __sys_bpf+0x505/0x7e0 [ 54.636665][ T4200] __x64_sys_bpf+0x41/0x50 [ 54.636776][ T4200] x64_sys_call+0x10cb/0x3020 [ 54.636869][ T4200] do_syscall_64+0x12c/0x370 [ 54.636958][ T4200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.636979][ T4200] RIP: 0033:0x7f8bcf91c799 [ 54.636994][ T4200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.637013][ T4200] RSP: 002b:00007f8bce32d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.637036][ T4200] RAX: ffffffffffffffda RBX: 00007f8bcfb96180 RCX: 00007f8bcf91c799 [ 54.637063][ T4200] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 54.637078][ T4200] RBP: 00007f8bce32d090 R08: 0000000000000000 R09: 0000000000000000 [ 54.637093][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.637106][ T4200] R13: 00007f8bcfb96218 R14: 00007f8bcfb96180 R15: 00007ffe8c8107f8 [ 54.637125][ T4200] [ 54.637146][ T4200] Mem-Info: [ 54.844945][ T4200] active_anon:13549 inactive_anon:1 isolated_anon:0 [ 54.844945][ T4200] active_file:9254 inactive_file:2313 isolated_file:0 [ 54.844945][ T4200] unevictable:0 dirty:1826 writeback:0 [ 54.844945][ T4200] slab_reclaimable:3368 slab_unreclaimable:15820 [ 54.844945][ T4200] mapped:35666 shmem:6100 pagetables:3240 [ 54.844945][ T4200] sec_pagetables:0 bounce:0 [ 54.844945][ T4200] kernel_misc_reclaimable:0 [ 54.844945][ T4200] free:1889010 free_pcp:4329 free_cma:0 [ 54.890275][ T4200] Node 0 active_anon:54196kB inactive_anon:4kB active_file:37016kB inactive_file:9252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142664kB dirty:7304kB writeback:0kB shmem:24400kB kernel_stack:3696kB pagetables:12960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 54.917811][ T4200] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.947502][ T4200] lowmem_reserve[]: 0 2879 7857 7857 [ 54.952897][ T4200] Node 0 DMA32 free:2944560kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948188kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 54.984253][ T4200] lowmem_reserve[]: 0 0 4978 4978 [ 54.989419][ T4200] Node 0 Normal free:4596120kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54196kB inactive_anon:4kB active_file:37016kB inactive_file:9252kB unevictable:0kB writepending:7304kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:13688kB local_pcp:4912kB free_cma:0kB [ 55.022477][ T4200] lowmem_reserve[]: 0 0 0 0 [ 55.027517][ T4200] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 55.040358][ T4200] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944560kB [ 55.056627][ T4200] Node 0 Normal: 1*4kB (E) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 0*64kB 2*128kB (UM) 0*256kB 2*512kB (U) 1*1024kB (U) 3*2048kB (UME) 1120*4096kB (M) = 4596060kB [ 55.072724][ T4200] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 55.082070][ T4200] 17658 total pagecache pages [ 55.086781][ T4200] 1 pages in swap cache [ 55.090958][ T4200] Free swap = 124992kB [ 55.095247][ T4200] Total swap = 124996kB [ 55.099426][ T4200] 2097051 pages RAM [ 55.103334][ T4200] 0 pages HighMem/MovableOnly [ 55.108048][ T4200] 81604 pages reserved [ 55.339119][ T4192] loop3: detected capacity change from 0 to 512 [ 55.370533][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 55.370572][ T28] audit: type=1400 audit(1773116908.177:274): avc: denied { mount } for pid=4191 comm="syz.5.124" name="/" dev="rpc_pipefs" ino=7768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 55.629498][ T28] audit: type=1400 audit(1773116908.437:275): avc: denied { write } for pid=4217 comm="syz.4.127" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.690488][ T28] audit: type=1400 audit(1773116908.467:276): avc: denied { accept } for pid=4221 comm="syz.6.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.737423][ T4192] ------------[ cut here ]------------ [ 55.743572][ T4192] EA inode 11 i_nlink=2 [ 55.748398][ T4192] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.123/4192 [ 55.764127][ T28] audit: type=1400 audit(1773116908.517:277): avc: denied { append } for pid=4221 comm="syz.6.129" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.769229][ T4192] Modules linked in: [ 55.796922][ T4192] CPU: 1 UID: 0 PID: 4192 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT(full) [ 55.808581][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.819391][ T4192] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 55.827172][ T4192] Code: b4 45 99 ff 4c 8d 2d fd bd 5d 05 49 8d 7e 40 e8 54 df b5 ff 49 8b 6e 40 4c 89 e7 e8 88 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 9f 57 dd 03 66 66 66 66 66 66 2e [ 55.847983][ T4192] RSP: 0000:ffffc900012e7778 EFLAGS: 00010246 [ 55.854962][ T4192] RAX: ffff888104901b78 RBX: ffff88810638d328 RCX: ffffffff81c007f8 [ 55.863861][ T4192] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc5e0 [ 55.870815][ T4224] loop7: detected capacity change from 0 to 512 [ 55.872511][ T4192] RBP: 000000000000000b R08: 000188810638d2db R09: 0000000000000000 [ 55.872613][ T4192] R10: ffffc900012e76a8 R11: 0001c900012e76a8 R12: ffff88810638d2d8 [ 55.899052][ T4192] R13: ffffffff871dc5e0 R14: ffff88810638d290 R15: 0000000000000001 [ 55.908572][ T4192] FS: 00007f622ca476c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 55.918500][ T4192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.925755][ T4192] CR2: 0000000034747865 CR3: 000000011c69c000 CR4: 00000000003506f0 [ 55.935491][ T4192] Call Trace: [ 55.939960][ T4192] [ 55.943660][ T4192] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 55.950801][ T4192] ? errseq_check+0x2c/0x50 [ 55.955919][ T4192] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 55.961942][ T4192] ? ext4_truncate+0x92b/0xb00 [ 55.971094][ T4192] ext4_evict_inode+0xa1f/0xd60 [ 55.981113][ T4192] ? __pfx_ext4_evict_inode+0x10/0x10 [ 55.987240][ T4192] evict+0x2af/0x510 [ 55.991789][ T4192] ? __pfx_ext4_drop_inode+0x10/0x10 [ 55.997857][ T4192] ? iput+0x210/0x580 [ 56.002370][ T4192] iput+0x41a/0x580 [ 56.006663][ T4192] ext4_process_orphan+0x1a9/0x1c0 [ 56.012473][ T4192] ext4_orphan_cleanup+0x6a8/0xa00 [ 56.018470][ T4192] ext4_fill_super+0x3408/0x37c0 [ 56.024231][ T4192] ? set_blocksize+0x14c/0x270 [ 56.030021][ T4192] ? setup_bdev_super+0x30e/0x370 [ 56.035963][ T4192] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.042071][ T4192] get_tree_bdev_flags+0x291/0x300 [ 56.044779][ T4224] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 56.047933][ T4192] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.047993][ T4192] get_tree_bdev+0x1f/0x30 [ 56.048201][ T4192] ext4_get_tree+0x1c/0x30 [ 56.048421][ T4192] vfs_get_tree+0x57/0x1d0 [ 56.048580][ T4192] do_new_mount+0x288/0x8d0 [ 56.048692][ T4192] path_mount+0x4d0/0xbc0 [ 56.048913][ T4192] __se_sys_mount+0x28c/0x2e0 [ 56.049201][ T4192] __x64_sys_mount+0x67/0x80 [ 56.049350][ T4192] x64_sys_call+0x2d61/0x3020 [ 56.049462][ T4192] do_syscall_64+0x12c/0x370 [ 56.049681][ T4192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.049772][ T4192] RIP: 0033:0x7f622dfeda0a [ 56.049823][ T4192] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.049959][ T4192] RSP: 002b:00007f622ca46e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.050122][ T4192] RAX: ffffffffffffffda RBX: 00007f622ca46ee0 RCX: 00007f622dfeda0a [ 56.050201][ T4192] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f622ca46ea0 [ 56.050400][ T4192] RBP: 00002000000009c0 R08: 00007f622ca46ee0 R09: 0000000000800718 [ 56.050418][ T4192] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 56.050488][ T4192] R13: 00007f622ca46ea0 R14: 000000000000048d R15: 0000200000000200 [ 56.050613][ T4192] [ 56.050700][ T4192] ---[ end trace 0000000000000000 ]--- [ 56.063442][ T4192] EXT4-fs (loop3): 1 orphan inode deleted [ 56.153458][ T4224] EXT4-fs (loop7): 1 orphan inode deleted [ 56.239970][ T4224] EXT4-fs (loop7): 1 truncate cleaned up [ 56.301997][ T4192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.314588][ T4224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.343230][ T4224] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 7: comm syz.7.128: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 56.380191][ T4242] loop4: detected capacity change from 0 to 512 [ 56.399124][ T4242] EXT4-fs: Ignoring removed nobh option [ 56.417095][ T28] audit: type=1400 audit(1773116909.227:278): avc: denied { tracepoint } for pid=4243 comm="syz.5.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.454604][ T4224] EXT4-fs (loop7): Remounting filesystem read-only [ 56.465081][ T4242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.499693][ T4242] EXT4-fs (loop4): 1 truncate cleaned up [ 56.505840][ T4242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.535549][ T28] audit: type=1326 audit(1773116909.337:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19507ec799 code=0x7ffc0000 [ 56.559465][ T4244] Cannot find add_set index 0 as target [ 56.588675][ T4253] netlink: 48 bytes leftover after parsing attributes in process `syz.6.137'. [ 56.598535][ T3788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.621668][ T4244] SET target dimension over the limit! [ 56.637981][ T28] audit: type=1326 audit(1773116909.337:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19507ec799 code=0x7ffc0000 [ 56.668286][ T28] audit: type=1326 audit(1773116909.337:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f19507ec799 code=0x7ffc0000 [ 56.761528][ T28] audit: type=1326 audit(1773116909.337:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19507ec799 code=0x7ffc0000 [ 56.785593][ T28] audit: type=1326 audit(1773116909.337:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4243 comm="syz.5.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19507ec799 code=0x7ffc0000 [ 56.817141][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.835997][ T4260] loop6: detected capacity change from 0 to 1024 [ 56.863509][ T4260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.906897][ T4264] syzkaller0: entered promiscuous mode [ 56.919282][ T4258] loop7: detected capacity change from 0 to 512 [ 56.932991][ T4264] syzkaller0: entered allmulticast mode [ 56.949166][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.142'. [ 56.961012][ T4260] netlink: 272 bytes leftover after parsing attributes in process `syz.6.139'. [ 56.988189][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.037708][ T4266] xt_policy: output policy not valid in PREROUTING and INPUT [ 57.059815][ T4258] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 57.110195][ T4269] loop6: detected capacity change from 0 to 1024 [ 57.200492][ T4269] EXT4-fs: Ignoring removed orlov option [ 57.233232][ T4258] EXT4-fs (loop7): 1 orphan inode deleted [ 57.242847][ T4276] loop4: detected capacity change from 0 to 512 [ 57.262462][ T4258] EXT4-fs (loop7): 1 truncate cleaned up [ 57.279738][ T4269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.284659][ T4258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.320320][ T4276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.360505][ T4258] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 7: comm syz.7.140: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 57.381288][ T4276] EXT4-fs (loop4): 1 truncate cleaned up [ 57.393428][ T4276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.498510][ T4276] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.146: invalid fast symlink length 39 [ 57.515701][ T4258] EXT4-fs (loop7): Remounting filesystem read-only [ 57.532571][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.571080][ T4283] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.146: invalid fast symlink length 39 [ 57.652840][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.665529][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.715881][ T4289] netlink: 48 bytes leftover after parsing attributes in process `syz.3.149'. [ 57.739511][ T4287] loop6: detected capacity change from 0 to 512 [ 57.782977][ T4287] EXT4-fs: Ignoring removed nobh option [ 57.795995][ T4287] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 57.868793][ T4287] EXT4-fs (loop6): 1 truncate cleaned up [ 57.891339][ T4287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.016691][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.069629][ T4266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.273822][ T50] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.303652][ T50] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.333429][ T50] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.342400][ T50] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.368842][ T4297] netlink: 'syz.5.152': attribute type 1 has an invalid length. [ 58.416255][ T4282] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.432938][ T3714] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.441791][ T4302] vlan2: entered promiscuous mode [ 58.447134][ T4302] team0: entered promiscuous mode [ 58.452472][ T4302] team_slave_0: entered promiscuous mode [ 58.458384][ T4302] team_slave_1: entered promiscuous mode [ 58.483215][ T4304] FAULT_INJECTION: forcing a failure. [ 58.483215][ T4304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.500570][ T4304] CPU: 1 UID: 0 PID: 4304 Comm: syz.6.155 Tainted: G W syzkaller #0 PREEMPT(full) [ 58.500610][ T4304] Tainted: [W]=WARN [ 58.500619][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.500634][ T4304] Call Trace: [ 58.500641][ T4304] [ 58.500651][ T4304] __dump_stack+0x1d/0x30 [ 58.500737][ T4304] dump_stack_lvl+0x95/0xd0 [ 58.500763][ T4304] dump_stack+0x15/0x1b [ 58.500812][ T4304] should_fail_ex+0x263/0x280 [ 58.500835][ T4304] should_fail+0xb/0x20 [ 58.500926][ T4304] should_fail_usercopy+0x1a/0x20 [ 58.500959][ T4304] _copy_from_user+0x1c/0xb0 [ 58.500997][ T4304] __sys_bpf+0x183/0x7e0 [ 58.501130][ T4304] __x64_sys_bpf+0x41/0x50 [ 58.501163][ T4304] x64_sys_call+0x10cb/0x3020 [ 58.501211][ T4304] do_syscall_64+0x12c/0x370 [ 58.501238][ T4304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.501265][ T4304] RIP: 0033:0x7f3fb82dc799 [ 58.501310][ T4304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.501331][ T4304] RSP: 002b:00007f3fb6d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.501428][ T4304] RAX: ffffffffffffffda RBX: 00007f3fb8555fa0 RCX: 00007f3fb82dc799 [ 58.501442][ T4304] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 58.501454][ T4304] RBP: 00007f3fb6d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.501466][ T4304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.501478][ T4304] R13: 00007f3fb8556038 R14: 00007f3fb8555fa0 R15: 00007ffcffb06288 [ 58.501499][ T4304] [ 58.503830][ T1623] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.583170][ T4300] SET target dimension over the limit! [ 58.779584][ T1623] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.811768][ T4311] netlink: 'syz.4.158': attribute type 9 has an invalid length. [ 58.946498][ T4321] Zero length message leads to an empty skb [ 58.990969][ T1623] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.055906][ T4349] netlink: 48 bytes leftover after parsing attributes in process `syz.4.163'. [ 59.131784][ T1623] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.142823][ T4358] netlink: 'syz.6.164': attribute type 1 has an invalid length. [ 59.194501][ T4359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 59.214285][ T4359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 59.320922][ T4374] loop4: detected capacity change from 0 to 1024 [ 59.328867][ T4374] EXT4-fs: Ignoring removed orlov option [ 59.360149][ T4373] dummy0: entered allmulticast mode [ 59.370378][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.399236][ T4373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.167'. [ 59.419212][ T1623] bridge_slave_1: left allmulticast mode [ 59.447301][ T1623] bridge_slave_1: left promiscuous mode [ 59.473186][ T4388] 9p: Bad value for 'rfdno' [ 59.486483][ T1623] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.504973][ T1623] bridge_slave_0: left allmulticast mode [ 59.518519][ T1623] bridge_slave_0: left promiscuous mode [ 59.524381][ T1623] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.549559][ T4383] nfs4: Unknown parameter '' [ 59.618150][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.629298][ T4401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'. [ 59.682272][ T1623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.694784][ T1623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.703636][ T4409] loop4: detected capacity change from 0 to 1024 [ 59.711171][ T1623] bond0 (unregistering): Released all slaves [ 59.719447][ T4409] EXT4-fs: Ignoring removed orlov option [ 59.733587][ T4401] geneve2: entered promiscuous mode [ 59.745646][ T4312] chnl_net:caif_netlink_parms(): no params data found [ 59.762525][ T4409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.839945][ T1623] hsr_slave_0: left promiscuous mode [ 59.850091][ T1623] hsr_slave_1: left promiscuous mode [ 59.866295][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.876225][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.884474][ T1623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.892416][ T1623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.903933][ T1623] veth1_macvtap: left promiscuous mode [ 59.909650][ T1623] veth0_macvtap: left promiscuous mode [ 59.915443][ T1623] veth1_vlan: left promiscuous mode [ 59.920907][ T1623] veth0_vlan: left promiscuous mode [ 59.927705][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.157182][ T1623] team0 (unregistering): Port device team_slave_1 removed [ 60.229357][ T1623] team0 (unregistering): Port device team_slave_0 removed [ 60.309658][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.319048][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.328750][ T4312] bridge_slave_0: entered allmulticast mode [ 60.336434][ T4312] bridge_slave_0: entered promiscuous mode [ 60.356914][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.364366][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.373039][ T4312] bridge_slave_1: entered allmulticast mode [ 60.380887][ T4312] bridge_slave_1: entered promiscuous mode [ 60.426412][ T4372] dummy0: left allmulticast mode [ 60.512555][ T4312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.525124][ T4312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.555619][ T4437] netlink: 'syz.6.177': attribute type 1 has an invalid length. [ 60.576611][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 60.576629][ T28] audit: type=1400 audit(1773116913.387:370): avc: denied { name_bind } for pid=4424 comm="syz.4.176" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.577674][ T4312] team0: Port device team_slave_0 added [ 60.627957][ T4428] syzkaller0: entered promiscuous mode [ 60.633582][ T4428] syzkaller0: entered allmulticast mode [ 60.643767][ T4312] team0: Port device team_slave_1 added [ 60.692695][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.719554][ T28] audit: type=1400 audit(1773116913.527:371): avc: denied { read } for pid=4432 comm="syz.3.178" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.757851][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.784372][ T4312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.797654][ T4312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.804675][ T4312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.871241][ T4312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.875778][ T4456] FAULT_INJECTION: forcing a failure. [ 60.875778][ T4456] name failslab, interval 1, probability 0, space 0, times 0 [ 60.912385][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.912943][ T28] audit: type=1400 audit(1773116913.707:372): avc: denied { ioctl } for pid=4432 comm="syz.3.178" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.969389][ T4312] hsr_slave_0: entered promiscuous mode [ 60.975721][ T4312] hsr_slave_1: entered promiscuous mode [ 60.984494][ T4456] CPU: 1 UID: 0 PID: 4456 Comm: syz.4.181 Tainted: G W syzkaller #0 PREEMPT(full) [ 60.984533][ T4456] Tainted: [W]=WARN [ 60.984542][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.984585][ T4456] Call Trace: [ 60.984591][ T4456] [ 60.984598][ T4456] __dump_stack+0x1d/0x30 [ 60.984626][ T4456] dump_stack_lvl+0x95/0xd0 [ 60.984716][ T4456] dump_stack+0x15/0x1b [ 60.984741][ T4456] should_fail_ex+0x263/0x280 [ 60.984766][ T4456] should_failslab+0x8c/0xb0 [ 60.984787][ T4456] __kmalloc_cache_node_noprof+0x6b/0x480 [ 60.984828][ T4456] ? __get_vm_area_node+0x106/0x1d0 [ 60.984860][ T4456] __get_vm_area_node+0x106/0x1d0 [ 60.984890][ T4456] __vmalloc_node_range_noprof+0x291/0x12b0 [ 60.984919][ T4456] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 60.984955][ T4456] ? selinux_file_open+0x2e6/0x330 [ 60.984985][ T4456] ? __rcu_read_unlock+0x4e/0x70 [ 60.985012][ T4456] ? avc_has_perm_noaudit+0xab/0x130 [ 60.985101][ T4456] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 60.985122][ T4456] __vmalloc_noprof+0xa4/0xf0 [ 60.985180][ T4456] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 60.985204][ T4456] bpf_prog_alloc_no_stats+0x47/0x390 [ 60.985227][ T4456] ? bpf_prog_alloc+0x2a/0x150 [ 60.985251][ T4456] bpf_prog_alloc+0x3c/0x150 [ 60.985275][ T4456] bpf_prog_load+0x506/0x1140 [ 60.985322][ T4456] ? security_bpf+0x2b/0x90 [ 60.985364][ T4456] __sys_bpf+0x505/0x7e0 [ 60.985410][ T4456] __x64_sys_bpf+0x41/0x50 [ 60.985441][ T4456] x64_sys_call+0x10cb/0x3020 [ 60.985540][ T4456] do_syscall_64+0x12c/0x370 [ 60.985565][ T4456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.985587][ T4456] RIP: 0033:0x7f8bcf91c799 [ 60.985605][ T4456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.985637][ T4456] RSP: 002b:00007f8bce36f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.985719][ T4456] RAX: ffffffffffffffda RBX: 00007f8bcfb95fa0 RCX: 00007f8bcf91c799 [ 60.985732][ T4456] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 60.985746][ T4456] RBP: 00007f8bce36f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.985761][ T4456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.985775][ T4456] R13: 00007f8bcfb96038 R14: 00007f8bcfb95fa0 R15: 00007ffe8c8107f8 [ 60.985830][ T4456] [ 61.221557][ T4457] loop6: detected capacity change from 0 to 512 [ 61.233113][ T4457] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.245129][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.260177][ T4457] EXT4-fs (loop6): 1 orphan inode deleted [ 61.307702][ T4457] EXT4-fs (loop6): 1 truncate cleaned up [ 61.315677][ T4457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.347150][ T4457] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #12: block 7: comm syz.6.180: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 61.381366][ T4457] EXT4-fs (loop6): Remounting filesystem read-only [ 61.388486][ T4470] syzkaller0: entered promiscuous mode [ 61.405436][ T4470] syzkaller0: entered allmulticast mode [ 61.483443][ T4312] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 61.501499][ T4312] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 61.508336][ T28] audit: type=1400 audit(1773116914.307:373): avc: denied { remove_name } for pid=3714 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.549476][ T4312] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 61.573329][ T28] audit: type=1400 audit(1773116914.307:374): avc: denied { rmdir } for pid=3714 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.598137][ T4312] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 61.628536][ T4493] dummy0: entered promiscuous mode [ 61.635616][ T4493] dummy0: left promiscuous mode [ 61.737116][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.754236][ T4312] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.786761][ T4482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.828305][ T1623] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.835463][ T1623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.854735][ T1623] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.861977][ T1623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.903753][ T4519] loop3: detected capacity change from 0 to 2048 [ 61.967059][ T3817] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.989144][ T4519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.016498][ T28] audit: type=1400 audit(1773116914.827:375): avc: denied { add_name } for pid=4518 comm="syz.3.192" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.086449][ T4312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.096926][ T4312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.117687][ T3817] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.138866][ T4519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.192: bg 0: block 234: padding at end of block bitmap is not set [ 62.150872][ T28] audit: type=1400 audit(1773116914.947:376): avc: denied { map } for pid=4518 comm="syz.3.192" path="/39/file0/hugetlb.2MB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.185769][ T28] audit: type=1400 audit(1773116914.947:377): avc: denied { write } for pid=4518 comm="syz.3.192" path="/39/file0/hugetlb.2MB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.197844][ T4519] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 480 with error 28 [ 62.267553][ T4519] EXT4-fs (loop3): This should not happen!! Data will be lost [ 62.267553][ T4519] [ 62.293569][ T3817] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.309734][ T4519] EXT4-fs (loop3): Total free blocks count 0 [ 62.316335][ T4519] EXT4-fs (loop3): Free/Dirty block details [ 62.356068][ T4519] EXT4-fs (loop3): free_blocks=0 [ 62.363791][ T3817] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.379635][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.401591][ T4519] EXT4-fs (loop3): dirty_blocks=496 [ 62.425827][ T4519] EXT4-fs (loop3): Block reservation details [ 62.454201][ T4519] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 62.495028][ T4539] FAULT_INJECTION: forcing a failure. [ 62.495028][ T4539] name failslab, interval 1, probability 0, space 0, times 0 [ 62.532680][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.3.192 Tainted: G W syzkaller #0 PREEMPT(full) [ 62.532718][ T4539] Tainted: [W]=WARN [ 62.532778][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.532794][ T4539] Call Trace: [ 62.532803][ T4539] [ 62.532813][ T4539] __dump_stack+0x1d/0x30 [ 62.532922][ T4539] dump_stack_lvl+0x95/0xd0 [ 62.532952][ T4539] dump_stack+0x15/0x1b [ 62.532981][ T4539] should_fail_ex+0x263/0x280 [ 62.533006][ T4539] should_failslab+0x8c/0xb0 [ 62.533027][ T4539] __kmalloc_noprof+0xb8/0x4e0 [ 62.533050][ T4539] ? ext4_find_extent+0x17a/0x790 [ 62.533084][ T4539] ext4_find_extent+0x17a/0x790 [ 62.533135][ T4539] ext4_ext_map_blocks+0x10d/0x2fb0 [ 62.533240][ T4539] ? __rcu_read_unlock+0x4e/0x70 [ 62.533267][ T4539] ? __account_obj_stock+0x2d6/0x350 [ 62.533297][ T4539] ? __account_obj_stock+0x211/0x350 [ 62.533324][ T4539] ? __rcu_read_unlock+0x4e/0x70 [ 62.533344][ T4539] ext4_map_query_blocks+0xb2/0x550 [ 62.533418][ T4539] ? ext4_es_lookup_extent+0x3ae/0x570 [ 62.533477][ T4539] ext4_da_get_block_prep+0x2d2/0xcc0 [ 62.533586][ T4539] ? alloc_buffer_head+0x1c3/0x1f0 [ 62.533625][ T4539] ? folio_alloc_buffers+0x2e3/0x310 [ 62.533658][ T4539] __block_write_begin_int+0x400/0xf90 [ 62.533698][ T4539] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 62.533818][ T4539] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 62.533855][ T4539] block_page_mkwrite+0x1a8/0x3c0 [ 62.533927][ T4539] ext4_page_mkwrite+0x859/0xb90 [ 62.533960][ T4539] do_wp_page+0xa81/0x2590 [ 62.533995][ T4539] ? selinux_file_open+0x2e6/0x330 [ 62.534017][ T4539] ? __rcu_read_lock+0x36/0x50 [ 62.534036][ T4539] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 62.534131][ T4539] handle_mm_fault+0x8c7/0x3020 [ 62.534175][ T4539] ? mt_find+0x291/0x3d0 [ 62.534211][ T4539] do_user_addr_fault+0x3fd/0x1050 [ 62.534248][ T4539] exc_page_fault+0x62/0xa0 [ 62.534313][ T4539] asm_exc_page_fault+0x26/0x30 [ 62.534334][ T4539] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 62.534360][ T4539] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 62.534380][ T4539] RSP: 0018:ffffc90000ec3df8 EFLAGS: 00050212 [ 62.534401][ T4539] RAX: 0000000000007ab3 RBX: 0000000000000010 RCX: 0000000000000010 [ 62.534417][ T4539] RDX: 0000000000000000 RSI: ffffc90000ec3e80 RDI: 0000200000000000 [ 62.534481][ T4539] RBP: ffff888101d38028 R08: 00000000000003ea R09: 0000000000000000 [ 62.534496][ T4539] R10: 0001c90000ec3e80 R11: 0001c90000ec3e8f R12: 0000200000000010 [ 62.534513][ T4539] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffffc90000ec3e80 [ 62.534532][ T4539] _copy_to_user+0x7c/0xa0 [ 62.534750][ T4539] __se_sys_prlimit64+0x4c2/0x5a0 [ 62.534857][ T4539] __x64_sys_prlimit64+0x55/0x70 [ 62.534917][ T4539] x64_sys_call+0x2920/0x3020 [ 62.534949][ T4539] do_syscall_64+0x12c/0x370 [ 62.534972][ T4539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.535033][ T4539] RIP: 0033:0x7f622dfec799 [ 62.535063][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.535085][ T4539] RSP: 002b:00007f622ca26028 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 62.535110][ T4539] RAX: ffffffffffffffda RBX: 00007f622e266090 RCX: 00007f622dfec799 [ 62.535128][ T4539] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 62.535142][ T4539] RBP: 00007f622ca26090 R08: 0000000000000000 R09: 0000000000000000 [ 62.535154][ T4539] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.535255][ T4539] R13: 00007f622e266128 R14: 00007f622e266090 R15: 00007ffc6d76ad88 [ 62.535280][ T4539] [ 62.939095][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.955816][ T3817] bridge_slave_1: left allmulticast mode [ 62.961585][ T3817] bridge_slave_1: left promiscuous mode [ 62.967429][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.988124][ T3817] bridge_slave_0: left allmulticast mode [ 62.997244][ T3817] bridge_slave_0: left promiscuous mode [ 63.030754][ T4589] loop3: detected capacity change from 0 to 1024 [ 63.037897][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.041255][ T4589] EXT4-fs: Ignoring removed orlov option [ 63.066640][ T4589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.113096][ T28] audit: type=1326 audit(1773116915.917:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622dfec799 code=0x7ffc0000 [ 63.137224][ T28] audit: type=1326 audit(1773116915.947:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.3.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f622dfec799 code=0x7ffc0000 [ 63.168526][ T3817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.178962][ T3817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.188846][ T3817] bond0 (unregistering): Released all slaves [ 63.199729][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.254979][ T4596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.203'. [ 63.279428][ T4594] loop4: detected capacity change from 0 to 1024 [ 63.290077][ T3817] hsr_slave_0: left promiscuous mode [ 63.306568][ T3817] hsr_slave_1: left promiscuous mode [ 63.312506][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.314705][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.335536][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.357978][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.375514][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.394190][ T3817] veth1_macvtap: left promiscuous mode [ 63.401411][ T3817] veth0_macvtap: left promiscuous mode [ 63.408869][ T3817] veth1_vlan: left promiscuous mode [ 63.414215][ T3817] veth0_vlan: left promiscuous mode [ 63.417913][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.492426][ T4614] netlink: 4276 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.501847][ T4614] netlink: 4276 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.512005][ T4614] netlink: 452 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.570583][ T3817] team0 (unregistering): Port device team_slave_1 removed [ 63.581394][ T3817] team0 (unregistering): Port device team_slave_0 removed [ 63.660733][ T4616] syzkaller0: entered promiscuous mode [ 63.666646][ T4616] syzkaller0: entered allmulticast mode [ 63.688393][ T4628] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 63.741813][ T4529] chnl_net:caif_netlink_parms(): no params data found [ 63.809323][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.823630][ T4636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.962278][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.977621][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.984947][ T4529] bridge_slave_0: entered allmulticast mode [ 63.993142][ T4529] bridge_slave_0: entered promiscuous mode [ 64.000010][ T4312] veth0_vlan: entered promiscuous mode [ 64.006821][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.015314][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.022624][ T4529] bridge_slave_1: entered allmulticast mode [ 64.029762][ T4529] bridge_slave_1: entered promiscuous mode [ 64.056784][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.076061][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.088671][ T4312] veth1_vlan: entered promiscuous mode [ 64.124781][ T4529] team0: Port device team_slave_0 added [ 64.146702][ T4312] veth0_macvtap: entered promiscuous mode [ 64.156210][ T4529] team0: Port device team_slave_1 added [ 64.163452][ T4312] veth1_macvtap: entered promiscuous mode [ 64.190193][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.202588][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.241053][ T4670] netlink: 88 bytes leftover after parsing attributes in process `syz.5.213'. [ 64.253578][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.265552][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.272530][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.299415][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.300985][ T4671] loop5: detected capacity change from 0 to 512 [ 64.330561][ T4671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.344371][ T4671] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.357341][ T4529] hsr_slave_0: entered promiscuous mode [ 64.363628][ T4529] hsr_slave_1: entered promiscuous mode [ 64.369939][ T4529] debugfs: 'hsr0' already exists in 'hsr' [ 64.376018][ T4529] Cannot create hsr debugfs directory [ 64.398624][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.407660][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.414399][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.457886][ T130] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.470004][ T130] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.498179][ T130] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.507633][ T130] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.560910][ T4685] netlink: 4276 bytes leftover after parsing attributes in process `syz.4.217'. [ 64.570418][ T4685] netlink: 4276 bytes leftover after parsing attributes in process `syz.4.217'. [ 64.579791][ T4685] netlink: 452 bytes leftover after parsing attributes in process `syz.4.217'. [ 64.680223][ T4529] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 64.739603][ T4704] netlink: 4276 bytes leftover after parsing attributes in process `syz.4.218'. [ 64.753374][ T4704] netlink: 4276 bytes leftover after parsing attributes in process `syz.4.218'. [ 64.774845][ T4529] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 64.846383][ T4529] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 64.862815][ T4696] ªªªªªª: renamed from vlan0 (while UP) [ 64.879608][ T4529] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 64.979890][ T4717] syzkaller0: entered promiscuous mode [ 64.994036][ T4717] syzkaller0: entered allmulticast mode [ 65.174133][ T4747] syzkaller0: entered promiscuous mode [ 65.180112][ T4747] syzkaller0: entered allmulticast mode [ 65.226815][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.266743][ T4529] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.074967][ T4763] FAULT_INJECTION: forcing a failure. [ 66.074967][ T4763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.088118][ T4763] CPU: 1 UID: 0 PID: 4763 Comm: syz.3.229 Tainted: G W syzkaller #0 PREEMPT(full) [ 66.088147][ T4763] Tainted: [W]=WARN [ 66.088154][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.088170][ T4763] Call Trace: [ 66.088178][ T4763] [ 66.088188][ T4763] __dump_stack+0x1d/0x30 [ 66.088229][ T4763] dump_stack_lvl+0x95/0xd0 [ 66.088254][ T4763] dump_stack+0x15/0x1b [ 66.088346][ T4763] should_fail_ex+0x263/0x280 [ 66.088375][ T4763] should_fail+0xb/0x20 [ 66.088394][ T4763] should_fail_usercopy+0x1a/0x20 [ 66.088493][ T4763] strncpy_from_user+0x27/0x250 [ 66.088595][ T4763] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 66.088619][ T4763] do_getname+0x59/0x1c0 [ 66.088642][ T4763] getname_flags+0x1d/0x30 [ 66.088722][ T4763] do_sys_openat2+0x60/0x130 [ 66.088750][ T4763] __x64_sys_openat+0xf2/0x120 [ 66.088780][ T4763] x64_sys_call+0x1e39/0x3020 [ 66.088806][ T4763] do_syscall_64+0x12c/0x370 [ 66.088826][ T4763] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 66.088924][ T4763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.088944][ T4763] RIP: 0033:0x7f622dfec799 [ 66.088958][ T4763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.088987][ T4763] RSP: 002b:00007f622ca05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.089004][ T4763] RAX: ffffffffffffffda RBX: 00007f622e266180 RCX: 00007f622dfec799 [ 66.089021][ T4763] RDX: 0000000000002182 RSI: 0000200000001840 RDI: ffffffffffffff9c [ 66.089033][ T4763] RBP: 00007f622ca05090 R08: 0000000000000000 R09: 0000000000000000 [ 66.089044][ T4763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.089055][ T4763] R13: 00007f622e266218 R14: 00007f622e266180 R15: 00007ffc6d76ad88 [ 66.089134][ T4763] [ 66.283193][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.290340][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.301231][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.308330][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.577797][ T4779] loop5: detected capacity change from 0 to 1024 [ 66.613084][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.631045][ T4779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.655622][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 66.655638][ T28] audit: type=1400 audit(1773116919.467:398): avc: denied { add_name } for pid=4778 comm="syz.5.234" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 66.696242][ T28] audit: type=1400 audit(1773116919.507:399): avc: denied { remove_name } for pid=4778 comm="syz.5.234" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 66.719780][ T28] audit: type=1400 audit(1773116919.507:400): avc: denied { rmdir } for pid=4778 comm="syz.5.234" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 66.741856][ T28] audit: type=1400 audit(1773116919.527:401): avc: denied { read append } for pid=4778 comm="syz.5.234" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.776193][ T28] audit: type=1400 audit(1773116919.527:402): avc: denied { open } for pid=4778 comm="syz.5.234" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.801268][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.841098][ T4807] loop8: detected capacity change from 0 to 1024 [ 66.847591][ T28] audit: type=1400 audit(1773116919.527:403): avc: denied { map } for pid=4778 comm="syz.5.234" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.847627][ T28] audit: type=1400 audit(1773116919.527:404): avc: denied { write execute } for pid=4778 comm="syz.5.234" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.847722][ T28] audit: type=1400 audit(1773116919.637:405): avc: denied { create } for pid=4803 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.847750][ T28] audit: type=1400 audit(1773116919.647:406): avc: denied { sys_admin } for pid=4803 comm="syz.3.238" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.975376][ T4815] loop3: detected capacity change from 0 to 1024 [ 66.994570][ T4815] EXT4-fs: Ignoring removed orlov option [ 67.019059][ T4815] EXT4-fs: Ignoring removed nobh option [ 67.044649][ T4807] EXT4-fs: Ignoring removed oldalloc option [ 67.051331][ T4807] EXT4-fs: Ignoring removed bh option [ 67.060029][ T4825] ªªªªªª: renamed from vlan0 [ 67.062035][ T4815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.106042][ T4807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.133449][ T28] audit: type=1400 audit(1773116919.927:407): avc: denied { allowed } for pid=4824 comm="syz.5.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.283794][ T4529] veth0_vlan: entered promiscuous mode [ 67.323402][ T4529] veth1_vlan: entered promiscuous mode [ 67.349321][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.397430][ T4529] veth0_macvtap: entered promiscuous mode [ 67.411483][ T4844] ================================================================== [ 67.419633][ T4844] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 67.427668][ T4844] [ 67.430031][ T4844] write to 0xffff888107628b4c of 4 bytes by task 4807 on cpu 0: [ 67.437694][ T4844] xas_set_mark+0x12b/0x140 [ 67.442262][ T4844] __folio_start_writeback+0x17b/0x370 [ 67.447780][ T4844] ext4_bio_write_folio+0x5ad/0x9f0 [ 67.453019][ T4844] mpage_process_page_bufs+0x4a1/0x620 [ 67.458500][ T4844] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 67.464333][ T4844] ext4_do_writepages+0xa07/0x2840 [ 67.469488][ T4844] ext4_writepages+0x18f/0x320 [ 67.474280][ T4844] do_writepages+0x1c6/0x310 [ 67.478899][ T4844] file_write_and_wait_range+0x178/0x2f0 [ 67.484553][ T4844] generic_buffers_fsync_noflush+0x45/0x130 [ 67.490473][ T4844] ext4_sync_file+0x1aa/0x6b0 [ 67.495178][ T4844] vfs_fsync_range+0xc5/0xe0 [ 67.499799][ T4844] ext4_buffered_write_iter+0x34f/0x3c0 [ 67.505405][ T4844] ext4_file_write_iter+0x380/0xfa0 [ 67.510636][ T4844] iter_file_splice_write+0x6c4/0xa80 [ 67.516035][ T4844] direct_splice_actor+0x156/0x2a0 [ 67.521167][ T4844] splice_direct_to_actor+0x311/0x670 [ 67.526561][ T4844] do_splice_direct+0x119/0x1a0 [ 67.531438][ T4844] do_sendfile+0x382/0x650 [ 67.535884][ T4844] __x64_sys_sendfile64+0x105/0x150 [ 67.541121][ T4844] x64_sys_call+0x2dc4/0x3020 [ 67.545835][ T4844] do_syscall_64+0x12c/0x370 [ 67.550452][ T4844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.556381][ T4844] [ 67.558731][ T4844] read to 0xffff888107628b4c of 4 bytes by task 4844 on cpu 1: [ 67.566298][ T4844] file_write_and_wait_range+0x130/0x2f0 [ 67.571955][ T4844] generic_buffers_fsync_noflush+0x45/0x130 [ 67.577873][ T4844] ext4_sync_file+0x1aa/0x6b0 [ 67.582633][ T4844] vfs_fsync_range+0xc5/0xe0 [ 67.587270][ T4844] ext4_buffered_write_iter+0x34f/0x3c0 [ 67.592835][ T4844] ext4_file_write_iter+0x380/0xfa0 [ 67.598057][ T4844] iter_file_splice_write+0x6c4/0xa80 [ 67.603453][ T4844] direct_splice_actor+0x156/0x2a0 [ 67.608592][ T4844] splice_direct_to_actor+0x311/0x670 [ 67.613987][ T4844] do_splice_direct+0x119/0x1a0 [ 67.618862][ T4844] do_sendfile+0x382/0x650 [ 67.623305][ T4844] __x64_sys_sendfile64+0x105/0x150 [ 67.628537][ T4844] x64_sys_call+0x2dc4/0x3020 [ 67.633255][ T4844] do_syscall_64+0x12c/0x370 [ 67.637866][ T4844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.643786][ T4844] [ 67.646128][ T4844] value changed: 0x0a000021 -> 0x04000021 [ 67.651871][ T4844] [ 67.654208][ T4844] Reported by Kernel Concurrency Sanitizer on: [ 67.660412][ T4844] CPU: 1 UID: 0 PID: 4844 Comm: syz.8.237 Tainted: G W syzkaller #0 PREEMPT(full) [ 67.671213][ T4844] Tainted: [W]=WARN [ 67.675031][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.685115][ T4844] ================================================================== [ 67.707018][ T4529] veth1_macvtap: entered promiscuous mode [ 67.718009][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.727072][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.742551][ T3818] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.760357][ T4863] FAULT_INJECTION: forcing a failure. [ 67.760357][ T4863] name failslab, interval 1, probability 0, space 0, times 0 [ 67.773181][ T4863] CPU: 1 UID: 0 PID: 4863 Comm: syz.5.246 Tainted: G W syzkaller #0 PREEMPT(full) [ 67.773291][ T4863] Tainted: [W]=WARN [ 67.773300][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.773315][ T4863] Call Trace: [ 67.773387][ T4863] [ 67.773402][ T4863] __dump_stack+0x1d/0x30 [ 67.773429][ T4863] dump_stack_lvl+0x95/0xd0 [ 67.773456][ T4863] dump_stack+0x15/0x1b [ 67.773501][ T4863] should_fail_ex+0x263/0x280 [ 67.773548][ T4863] should_failslab+0x8c/0xb0 [ 67.773569][ T4863] __kmalloc_noprof+0xb8/0x4e0 [ 67.773637][ T4863] ? iovec_from_user+0x84/0x200 [ 67.773673][ T4863] iovec_from_user+0x84/0x200 [ 67.773701][ T4863] __import_iovec+0xf3/0x530 [ 67.773786][ T4863] ? _parse_integer_limit+0x170/0x190 [ 67.773880][ T4863] import_iovec+0x60/0x80 [ 67.774008][ T4863] ___sys_sendmsg+0x160/0x1e0 [ 67.774138][ T4863] __x64_sys_sendmsg+0xd4/0x160 [ 67.774186][ T4863] x64_sys_call+0x194c/0x3020 [ 67.774226][ T4863] do_syscall_64+0x12c/0x370 [ 67.774253][ T4863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.774275][ T4863] RIP: 0033:0x7f19507ec799 [ 67.774295][ T4863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.774314][ T4863] RSP: 002b:00007f194f23f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.774412][ T4863] RAX: ffffffffffffffda RBX: 00007f1950a65fa0 RCX: 00007f19507ec799 [ 67.774429][ T4863] RDX: 00000000000400c0 RSI: 0000200000000580 RDI: 0000000000000003 [ 67.774446][ T4863] RBP: 00007f194f23f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.774459][ T4863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.774540][ T4863] R13: 00007f1950a66038 R14: 00007f1950a65fa0 R15: 00007ffcff3a0ee8 [ 67.774564][ T4863] [ 67.775726][ T3818] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.003626][ T3818] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.015424][ T3818] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.061379][ T4312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.