last executing test programs: 18m32.137665743s ago: executing program 32 (id=139): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000200)=""/260, 0x0, 0x104, 0x9}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 18m31.531031928s ago: executing program 33 (id=143): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2'}, 0x29) 18m30.11471321s ago: executing program 34 (id=156): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="f40000000008010300000000000000000900fffc0600024060060000050003008400000006000240000000001c00048008000140000080000800017407841f2308000140000000013400048008000140ffffffc00800014000000400080001400000000808000240fffffffd08000140000000030800024000000100090001"], 0xf4}, 0x1, 0x0, 0x0, 0x200c044}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0xffffff6e, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 18m23.304350728s ago: executing program 35 (id=222): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7b5, &(0x7f0000000540)="$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") creat(0x0, 0x2) 18m21.634572595s ago: executing program 36 (id=244): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000008000000080009000200000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) close(r6) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 18m21.038373781s ago: executing program 37 (id=253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9436, 0x8000}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x3}]}}, 0x0, 0x4e}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4010040) listen(0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, 0x0, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) close_range(r1, 0xffffffffffffffff, 0x0) 18m15.533384302s ago: executing program 38 (id=294): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r5 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfff9, &(0x7f0000000000)='pim6reg\x00', 0x9, 0x0, 0x10}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 17m44.632009754s ago: executing program 39 (id=819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f00000000c0)) 17m35.312301788s ago: executing program 40 (id=954): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 16m46.218071623s ago: executing program 41 (id=1987): tkill(0x0, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) request_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0xfffffffffffffffa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r3, r4+60000000}, 0x0) 16m27.265888589s ago: executing program 42 (id=2054): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x2}}, 0x14) (fail_nth: 2) 16m12.811341772s ago: executing program 43 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010004b1f00000000000000007a000000", @ANYRES32=r0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a0001"], 0x48}, 0x1, 0x0, 0x0, 0x95}, 0x4) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f00000009c0)=0x10001, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="7798a80c7d4b6f65f8fcbf6bdfe3c1544894f30e3ab0b72428caa93298fd8abc078c1be19b26b939bdc6d16bfe0aa78c2d27bed6b64857d8f0ae5e4990d597e00cda5b2c20e21ed29ffaace02c24f23329133aa9a66b966b6e4d21c4e0b8d480882a69991fd6f01080844e61518ce6d4710fa2f1baa5321c96db277469912203b1992a9b29527e7f730d47944be14da44fc801279929bee432f4369542b952055b2b7e4f00b384269a76d72ab472e2a048e0bb2cdaca1e2879908719d9b4186518a2338911de84efa43ef01655efb790b3a986b885d823e0c61f", 0xda}, {&(0x7f0000000400)="40a4e26b757fa80c49917bdee3a48cd0ba5033861f2ace3c950ebb64256a45b46962d5369ac9b520bbeb8f93cd5b7d9de02862a0ab838a291e001e36308644b5de1020a934e836d48dd3a61ff1b7d6d5c77c019f15e170e4b8b0cdfae62154a2d2965f32eb91b7ad2185f56a2206cafc415c4aba737b5696d221c3e14e0b31641426ab52f76916ad95c74b1ca700e85dae3eb1db4400e977658f236aa5f3cdc97567e41e881a72363646692e1c0154dfb67fe7dc5f5b16cf382cfd86", 0xbc}, {&(0x7f00000004c0)="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", 0xfc}], 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB="01002fbd70100402ffff04"], 0x34}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) r11 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(r11, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r11, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) io_setup(0x8b33, &(0x7f0000000080)) 15m50.091719158s ago: executing program 44 (id=3109): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 12m39.859600638s ago: executing program 45 (id=7215): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081) 12m25.61908002s ago: executing program 46 (id=7640): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000700)="7c2f56d66f1b595db8582afd4360a5801073ff2adda41f8e51fcce5ff1031c44cfae4cda119d8545", 0x28}], 0x2, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x20040035) 11m58.093484096s ago: executing program 47 (id=8833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x4018040) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x10000) sendfile(r0, r1, 0x0, 0x7ffff004) 11m55.001899586s ago: executing program 48 (id=8877): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e}, 0x94) 11m49.878147415s ago: executing program 49 (id=8960): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xa504, 0x4}, {0x5, 0x6}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bd52007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x62, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00183afffe8000000000000000000000000000bb150200000000000000000000000000018900907800000000fe880000000000000000000000000001"], 0x0) r4 = dup(r1) r5 = syz_open_dev$vcsu(&(0x7f0000000280), 0x8, 0x400040) r6 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd60cb653e00283afffe800000000000000000000000000007fe8000000000000000000000000000aa8900907800000000ffe6ffffffffff8d"], 0x0) 11m39.768883514s ago: executing program 50 (id=9178): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x1b, 0x301, 0x70bd2a, 0x25dfdbfa, {0x6}}, 0x14}}, 0x20000000) 11m35.04864368s ago: executing program 51 (id=9286): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x8, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m34.325012963s ago: executing program 52 (id=9301): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) 11m34.014873101s ago: executing program 53 (id=9304): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xd53e, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0xfffffffffffffffe) 11m33.441312794s ago: executing program 54 (id=9311): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0x11, "0000000000000002"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x8) 11m23.806647966s ago: executing program 55 (id=9446): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, &(0x7f0000000700)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x1, 0x0, @void}, 0x10) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000020248a310da0000000000000a00e2050a000600482e3234350000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r7 = syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r7, 0x2, 0x0, 0x729e, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback=r1, r4, 0x8, 0x10, 0x0, @void, @value=r4, @void, @void, r10}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) capget(&(0x7f0000000440)={0x20071026, r0}, &(0x7f0000000480)={0xe6, 0xe, 0x0, 0x68a3, 0x8, 0x3}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1ff, 0xffff18b6, 0x4, 0x384, 0x7fffffff, 0x1b}, 0x9c) 11m23.327240304s ago: executing program 56 (id=9463): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x100003) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1]) 11m22.833483603s ago: executing program 57 (id=9469): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x4, 0x4, 0x65, 0x6, 0x4, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x53, 0x1, 0x5, [{@multicast2, 0x4e20ffff}]}, @timestamp_addr={0x44, 0x34, 0xed, 0x1, 0x0, [{@multicast1, 0x4}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast}, {@dev, 0x4}]}]}}}}}}}, 0x0) 10m53.229148771s ago: executing program 58 (id=10242): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) read(r0, &(0x7f0000001040)=""/4096, 0x1000) close(0x3) 10m48.248810721s ago: executing program 59 (id=10312): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) close_range(0xffffffffffffffff, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 10m46.081480647s ago: executing program 60 (id=10361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) 10m38.776246194s ago: executing program 61 (id=10521): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r1, 0xb) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975"], 0x0) 10m38.66990806s ago: executing program 62 (id=10528): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r3], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, r3, 0x25, 0x0, @val=@netkit}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 10m31.148985719s ago: executing program 63 (id=10659): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendto$inet6(r0, &(0x7f00000000c0)="10", 0x13, 0xc80c, &(0x7f0000000300)={0xa, 0x4e21, 0x2a, @loopback, 0x800000c0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000380)={0x2c, 0x0, 0x7, 0x9, 0x5, 0x1, 0x5, 0x3, 0x3, 0x8, 0x7f, 0x6, 0x1, 0x9}, 0xe) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f00000004c0)=""/19, 0x13}, 0x7}], 0x1, 0x40, 0x0) 9m50.033857168s ago: executing program 64 (id=11435): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40) 9m44.363023049s ago: executing program 65 (id=11551): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006000), 0x0, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m43.161868259s ago: executing program 66 (id=11588): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e23, 0x2, @mcast1, 0x80000001}, 0x1c, 0x0, 0x0, &(0x7f0000000080), 0x7}, 0x20000084) 9m40.790644587s ago: executing program 67 (id=11617): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0x0, 0x0}, 0x10) 9m27.978057525s ago: executing program 68 (id=11709): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40, 0xe}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x5, 0x9, 0x1, 0xffffffff, 0x2}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r3, 0x0, r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9m18.80409351s ago: executing program 69 (id=11860): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x0) 5m56.224334233s ago: executing program 70 (id=18093): r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000080)=""/86) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1015) 4m6.293025394s ago: executing program 71 (id=20042): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$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") lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)) (fail_nth: 3) 2m47.916069902s ago: executing program 72 (id=21110): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000009400)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4d6e28d8, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r3, 0x2}, {r3, 0x2005}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2m46.174458574s ago: executing program 73 (id=21126): syz_io_uring_setup(0x74fe, &(0x7f0000000340)={0x0, 0x10006f55, 0x3800, 0x8003, 0x187}, &(0x7f0000003400), &(0x7f0000000240)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="0f", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x9, 0x1b) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f0000000180)) 2m9.94441506s ago: executing program 74 (id=21674): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ppoll(&(0x7f0000000180)=[{r2, 0x2}, {r2, 0x2005}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1m1.772735002s ago: executing program 1 (id=22561): ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000500)=ANY=[]) 1m1.666467608s ago: executing program 1 (id=22563): rename(0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x728, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x698, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @mcast2, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x171}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @mcast1, 0x2}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x90, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0xd}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @local, 0x3459}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xca}]}, 0x728}, 0x1, 0x0, 0x0, 0x48048}, 0x24090000) 1m1.602862602s ago: executing program 1 (id=22567): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[]) 1m1.573793504s ago: executing program 1 (id=22568): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x0, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x400000000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xe, 0x2) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) pwrite64(r0, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1696, 0x7c18, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) 1m1.318173579s ago: executing program 1 (id=22574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x28, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 1m1.194362446s ago: executing program 5 (id=22576): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd14, 0xc0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xf206, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x123c40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001cff7f00"/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000380000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000001c0)={0xffffffffffffffff, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m0.870948815s ago: executing program 5 (id=22580): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1m0.852440916s ago: executing program 5 (id=22581): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd14, 0xc0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xf206, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x123c40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001cff7f00"/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000380000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000001c0)={0xffffffffffffffff, 0x4}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r5, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m0.767051751s ago: executing program 5 (id=22585): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[]) 1m0.516030695s ago: executing program 5 (id=22588): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000340), 0x8}, 0x928, 0x80000001, 0x40000000, 0x7, 0x200000000000002, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xb, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010020000df2500000000fdbb52e50b9586129a985afb17f1afc987b359184345c4ce5d2fbe002df700696afc42897d8065e1d6213ed53811", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x7fffffff, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 59.662737606s ago: executing program 5 (id=22604): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd14, 0xc0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xf206, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x123c40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001cff7f00"/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000380000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000001c0)={0xffffffffffffffff, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 59.187930863s ago: executing program 1 (id=22613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(0xffffffffffffffff, 0xbcd, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x5509, &(0x7f0000000100)=0xb) write$tun(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000001803030300ffffc4"], 0xe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) dup(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 59.146517126s ago: executing program 75 (id=22613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x20003214, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(0xffffffffffffffff, 0xbcd, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x5509, &(0x7f0000000100)=0xb) write$tun(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000001803030300ffffc4"], 0xe4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) dup(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 54.898977044s ago: executing program 4 (id=22661): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[]) 54.816296079s ago: executing program 4 (id=22662): r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) listen(r2, 0x7fff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2, 0x0) write$UHID_DESTROY(r4, &(0x7f0000002f00), 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00060006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xf862}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c8, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x4}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x9, 0xd190]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000200)=[r4, r2, r4], 0x3) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000080)=0x1d, 0x4) 54.752814912s ago: executing program 4 (id=22663): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 54.729780993s ago: executing program 4 (id=22664): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x0, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x400000000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xe, 0x2) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) pwrite64(r0, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1696, 0x7c18, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) 54.27523392s ago: executing program 4 (id=22665): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0xfffffffa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x800) 52.209542491s ago: executing program 4 (id=22686): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) 52.132258326s ago: executing program 76 (id=22686): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60b}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) 44.646229923s ago: executing program 77 (id=22604): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd14, 0xc0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xf206, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x123c40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001cff7f00"/28], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000380000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000001c0)={0xffffffffffffffff, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 29.637567389s ago: executing program 2 (id=22936): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 3) 29.165627677s ago: executing program 2 (id=22940): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) fcntl$getown(r0, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) r4 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0xc130, 0x32, 0x0, 0x7, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 28.950369059s ago: executing program 2 (id=22942): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) 28.881003024s ago: executing program 2 (id=22943): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x0, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x400000000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xe, 0x2) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) pwrite64(r0, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1696, 0x7c18, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 28.453908528s ago: executing program 2 (id=22946): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x9, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x1, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003b8fd02000c000280050001000000000014000280080001000000000008000200ac14140008000540000000000900010073797a310000"], 0x58}}, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$key(0xf, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 28.004322715s ago: executing program 0 (id=22952): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) fcntl$getown(r0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0xc130, 0x32, 0x0, 0x7, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 27.712917411s ago: executing program 0 (id=22953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {0xffe0}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24080) 27.57567279s ago: executing program 0 (id=22954): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd14, 0xc0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xf206, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x123c40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 27.372433772s ago: executing program 0 (id=22955): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x0, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x400000000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xe, 0x2) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) pwrite64(r0, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1696, 0x7c18, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 26.803172505s ago: executing program 0 (id=22960): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x443, 0x0) fchown(r0, 0x0, 0xee01) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee00) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fremovexattr(r5, &(0x7f0000000140)=@known='user.syz\x00') r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000002340), 0x1}, 0x12008, 0x0, 0x5a, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x400000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000002200)=[{{&(0x7f00000003c0), 0x80, &(0x7f0000000440)=[{&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000340)=""/44, 0x2c}], 0x3}, 0x3}, {{&(0x7f0000000600)=@sco, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000680)=""/21, 0x15}, {&(0x7f0000000900)=""/46, 0x2e}], 0x4, &(0x7f0000000980)=""/6, 0x6}, 0x6}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/231, 0xe7}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=""/140, 0x8c}, 0x5c1}, {{&(0x7f0000000b00)=@generic, 0x80, &(0x7f0000002140)=[{&(0x7f0000001cc0)=""/45, 0x2d}, {&(0x7f0000001d00)=""/162, 0xa2}, {&(0x7f0000001dc0)=""/228, 0xe4}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/232, 0xe8}, {&(0x7f0000002040)=""/223, 0xdf}], 0x6, &(0x7f00000021c0)=""/12, 0xc}, 0xfffffffa}], 0x4, 0x40000000, &(0x7f0000002300)={0x0, 0x3938700}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='\x00') r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa000, 0x0) ioctl$TIOCSPTLCK(r9, 0x40045431, &(0x7f0000000000)) r10 = ioctl$TIOCGPTPEER(r9, 0x5441, 0x1) write(r10, &(0x7f00000002c0)="7be32c0a3fef93b5a7b0e99e1522b47963703551b482f7e43f2f78b5a24dfe951aa1a51097b76b19b8eaa0ec91cba490414d549340c5e93de8780d", 0x3b) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000200)=0x369, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 26.341236932s ago: executing program 2 (id=22965): r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x54001203, &(0x7f0000ffa000/0x3000)=nil) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x7, 0x0, 0xfffffffc}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x515, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) shmctl$IPC_RMID(r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1d, &(0x7f0000000180)=@raw=[@generic={0xc3, 0x5, 0x8, 0xc000, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @tail_call, @ldst={0x0, 0x1, 0x1, 0x3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x4, 0x1, 0xa, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000100)='syzkaller\x00', 0x80, 0xb, &(0x7f0000000280)=""/11, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x800, 0xb13}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x1, 0x5, 0x3}, {0x2, 0x4, 0x5, 0x2}, {0x3, 0x3, 0x3, 0x8}], 0x10, 0x8}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f00000000c0)='./file0\x00', r4}, 0x18) sendmmsg$inet6(r3, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x6, @remote, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="99", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000080)="1f", 0x1}], 0x1}}], 0x2, 0x4048054) 26.309982244s ago: executing program 78 (id=22965): r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x54001203, &(0x7f0000ffa000/0x3000)=nil) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x7, 0x0, 0xfffffffc}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x515, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="61157c000000000061134c0000000000bfa000000000000007000000080000002d03010000000000870500000000000069163e0000000000bf07000000000000550607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3897f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45d4e3b9e41c74a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8e545dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f020000361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d0000002100000000000020fbce0e69cc9c4e6b2816a5f31f0000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34a3c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000020000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c69396289549e7806e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f3b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a294ccba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4dc70667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000020000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a66700000000d5559a5bfd8035e0df99b775a2a49e648dc63b496680bfa8e6979f3e2d9c31083ac3af4e5eff4e8a4e4b6d3855939fbe54014e2e367cfd3872ed8831e709538ed1e61be4778839864f88faa8f4453046eb59b6eea0d1538ccbd86cdfd389ef5bb6d49a66ed8b8915eb8e4315437c54f88eac0c74981dfe8c1239af27e714497f475ead5933f66b7f66b15663adbd804c07a4a10d5283a2fd3a0f50c9d1c0b69aa4911b409b6dda3421dbab8302ff09338f815331e3f3dbf7c119cca600b2248e530fe46f66bd8daec3ac4120ca9e23e1bbbfca76c146397b2006c7186da1065746e1641a44c8d9577617bb9f1bc769861624824565774ea1c0e5c75acb7255bc3b6ebf7beba910830877ddc82be039d33dc3742bef24c290e52af147ce4665e9d23caeceb297c3957335103f6fc2fae34f7e12864311a898ead68e5f8238103301acb7bdd9972359aaa4c3cc3021507e79df0dd0183eb1f2f2379451f556bbd4e695f481a7de7659ade66efb5b09b13c6da24dffd88a0162528ea4962ecea6fe6ad61f64606eb79f87ce8bd3834bafc0cb43f3387a7cd63a84bc7915e63b24ee4388607ba11f80b5100f4c74d0f0f34f22b765ba1fd700e0056a1c48cd53f901e006cb078fb56fc0e293b341a3f61310e85e99527ef084025f058b45d271de774905bb20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) shmctl$IPC_RMID(r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1d, &(0x7f0000000180)=@raw=[@generic={0xc3, 0x5, 0x8, 0xc000, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @tail_call, @ldst={0x0, 0x1, 0x1, 0x3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x4, 0x1, 0xa, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000100)='syzkaller\x00', 0x80, 0xb, &(0x7f0000000280)=""/11, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x800, 0xb13}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x1, 0x5, 0x3}, {0x2, 0x4, 0x5, 0x2}, {0x3, 0x3, 0x3, 0x8}], 0x10, 0x8}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f00000000c0)='./file0\x00', r4}, 0x18) sendmmsg$inet6(r3, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x6, @remote, 0x1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="99", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000080)="1f", 0x1}], 0x1}}], 0x2, 0x4048054) 24.382696816s ago: executing program 0 (id=22979): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) read(r0, &(0x7f00000002c0)=""/30, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000002e80)=""/102400, 0x10e38, 0x40000000400) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x78, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x11041b7d}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c845) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000080)={'bridge0\x00'}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000800)="d9dc3363a247165a", 0x8}], 0x2}, 0x20008890) 24.381697066s ago: executing program 79 (id=22979): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) read(r0, &(0x7f00000002c0)=""/30, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000002e80)=""/102400, 0x10e38, 0x40000000400) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x78, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x11}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x11041b7d}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c845) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000080)={'bridge0\x00'}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000800)="d9dc3363a247165a", 0x8}], 0x2}, 0x20008890) 4.652764159s ago: executing program 6 (id=23251): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000002000000020000", 0x1c) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 4.597458682s ago: executing program 6 (id=23253): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd7c7}, 0x10}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) 4.568393804s ago: executing program 6 (id=23254): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x9, 0x7ff, 0x3, 0x9c, 0x4, 0x2}, 0x9c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1}, 0x20003ff0}], 0x1, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000240)={@private0, 0x0}, &(0x7f0000000740)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0x10}, {0x0, 0x1}, {0x9, 0xfff1}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001180)=[@rdma_args={0x48, 0x114, 0x1, {{0xc, 0x8}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x8, 0x200}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x2}, {0x0}, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/223, 0xdf}, {&(0x7f0000000140)=""/64, 0x40}], 0x2, 0x4, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0xeb}, {0x0}, 0x0, 0x0, 0x4, 0x401}}], 0xd8, 0x14810}, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)={0x2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x36}}, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000400)={0x2, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1, 0x5, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @local}}]}, 0x310) 3.637073458s ago: executing program 6 (id=23274): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8844) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@empty, @random="cc254b0df20f", @void, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0x0, 'gE', "8a8136", 0x15, "aa08a93bd97970fc79995761a78905b971a230f418f670faab0083ec075f38981cc60939db7432a9e4640ef6ed3068700f71379536b1aec32f4cf4213c5dae2c7ccb2fd8f65db9977388bc5a8375fe05877cc3"}}}}}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, r0, &(0x7f0000001740)=""/132, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff01000000000000000000000000000100000000000000000200010000000000000007fd0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200"], 0x98}, 0x1, 0x7}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = fspick(r3, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000c40)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf08412", 0x15}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.723129042s ago: executing program 7 (id=23291): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x2000000000000216, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) r3 = gettid() setuid(0xee01) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f0000000080)=""/27, &(0x7f0000000100)=0x1b) ustat(0x60, 0x0) ustat(0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2000000000000216, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000000714100028bd7000ffdbdf250900020073797a320000000005005400000000000800010001000000050054000100000008000100020000006e0c33a31d979502b486ee2c1710ae5a1caeaa18d20b131a9a34af9e8c76469973debc1aa9b46df21fbc0ab3534b7c90737d89cb12155310cbdefd344410d9b9003d7addde4a795ebcd48295323d2a15aa36406b8ee5928abf3c9d6023005d10ccc157f32990b406a18990b109b0c6d5941da48ed0584f0538a0521db48e95ba414cd10535b4c6d32fc067dcefcae9754bc212f9ad42ab50f81b57b43bbe65f9433aeec5be7a"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.340394844s ago: executing program 7 (id=23297): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x558002, 0xa) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) close_range(r2, 0xffffffffffffffff, 0x400000000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000000) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x8080) syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), r1) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x1bd, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0xb8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x28}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x70}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40044) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.085946099s ago: executing program 8 (id=23305): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000080)={[{@minixdf}, {@nobarrier}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) socket$unix(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") openat$rfkill(0xffffffffffffff9c, 0x0, 0x20000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r2, &(0x7f0000001800)=[{&(0x7f0000000240)='=@', 0x2}], 0x1, 0x4) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="137c03002b1a07002c0012800e00010069703667726574617000000018000280140007000000000000000000000000000000000108000d00000000ff"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000000100000000000000"], 0x170}}, 0x0) 1.965660486s ago: executing program 7 (id=23306): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x109) (fail_nth: 8) 1.55710776s ago: executing program 3 (id=23308): fsmount(0xffffffffffffffff, 0x0, 0x70) openat(0xffffffffffffff9c, 0x0, 0x2c040, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100fefffffffdc9df25fe880000000000000000000000000001ac141417000000000000000000000000000107344e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c000000e0000002000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000020ffffffffffffffff2a000000000000001f00000000000000b80700000000000007000000fcffffffbcffffff2abd700000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002"], 0x140}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) (fail_nth: 4) 1.508709262s ago: executing program 6 (id=23310): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="5c257f0ed6097361df802bc884f7", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="5c257f0ed6097361df802bc884f7", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 1.508496163s ago: executing program 3 (id=23311): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 1.224910369s ago: executing program 7 (id=23312): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.21039699s ago: executing program 3 (id=23313): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x0, 0x439, &(0x7f0000002380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x400000000) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1696, 0x7c18, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) 1.21016832s ago: executing program 6 (id=23314): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.116890705s ago: executing program 8 (id=23315): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x891a, 0x0) 1.115954775s ago: executing program 7 (id=23316): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x11}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0x200, 0x8, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="10810000000000002c00128009000100626f6e64000000001c00028005000c0005"], 0x4c}}, 0x20004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000240021"], 0x1c}}, 0x0) recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000300)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/192, 0xc0}], 0x2, &(0x7f00000004c0)=""/192, 0xc0}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000000)={0x7d2db87392ee6199, 0x3, "bf3cd4"}) 1.092431307s ago: executing program 8 (id=23317): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000a6f000/0xe000)=nil, 0xe000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) r5 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) r6 = socket(0xa, 0x5, 0x0) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r7, &(0x7f0000000140)="3703c70f70e244b7878fedf0d0286e72651d1af212c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e35646b37f83f3bb3e4f02ec50ea98886238588d3026c58accd40e86c0e0b35299466ff4c52b90eb253246bef399fe728ad37550bcdb1a75a9207a18", 0x9f, 0x200000000000d) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x2185) fcntl$setstatus(r9, 0x4, 0x102800) close_range(r6, 0xffffffffffffffff, 0x0) getdents(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsetxattr$security_ima(r10, &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x11, 0x1) close_range(r2, r11, 0x0) 940.236385ms ago: executing program 8 (id=23318): unshare(0x8040480) r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@noinit_itable}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") pivot_root(0x0, 0x0) mknod(0x0, 0x6000, 0x77b) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@errors_continue}, {@quota}, {@delalloc}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {}]}, 0x1, 0x5d2, &(0x7f0000001a40)="$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") r2 = socket$xdp(0x2c, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000040)="7dfbf5c4ea8a") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x1, 0x4) 880.050489ms ago: executing program 3 (id=23319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}, 0x1, 0xd, 0x0, 0x4000000}, 0x20004000) 819.738633ms ago: executing program 9 (id=23320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000181ca3d919e00000d758b5d32e557be4f7dc1301c100f80862940f3287fb72cdfaee10300417655e6986152d8e0b9c33c5b05a44a630ce19de471e36a95b3662b2e34ac72aa3ca1bf4f69e665685e05fa6d3", @ANYRES16=r2, @ANYBLOB="00012bbd7000fbdbdf252600000008000300", @ANYRES32=r3, @ANYBLOB="0c009900060000003900000008004200000000000a0006003f7c6b9dc9f200003000f200f0ba5d6eca6e5f57db6914b68ddcecaa86eceb3205801b6ad06239b5a859406cf9e77a4770403813040d1d2c"], 0x6c}, 0x1, 0x0, 0x0, 0x4842}, 0x40) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002f009703000000000000000003"], 0x14}}, 0x0) 700.636299ms ago: executing program 3 (id=23321): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x200ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@acl}, {}]}, 0x0, 0x473, &(0x7f0000000740)="$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") prlimit64(0x0, 0x7, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) setrlimit(0xb, &(0x7f0000000000)={0x10001, 0x3ff}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./bus\x00', 0x201c08c, &(0x7f0000001180)=ANY=[], 0x25, 0x352, &(0x7f0000000c80)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) (async) sendmsg$nl_route(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000005f0001"], 0x18}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) 699.26264ms ago: executing program 7 (id=23322): socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='./bus\x00', 0x81) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) (async) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 606.049705ms ago: executing program 8 (id=23323): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 572.365697ms ago: executing program 9 (id=23324): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 424.668956ms ago: executing program 9 (id=23325): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xd63b, 0x6, 0x1, 0x9, 0x1, 0x3ff}) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, @in6={0xa, 0x4e22, 0x6, @private1, 0x2}], 0x3c) 356.79396ms ago: executing program 8 (id=23326): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 353.72087ms ago: executing program 9 (id=23327): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 304.583843ms ago: executing program 3 (id=23328): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x2, 0x11, 0x7, 0x9}, {0x16, 0x0, 0x0, 0x66a}]}) socket(0x40000000015, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000440)='syzkaller\x00', 0xfd, 0x0, 0x0, 0x41000, 0x4}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800480000340002000000059061ac1e00010a0101f343bc06038903c6890200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c000e0290780000"], 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4004}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x4100}, {}], 0x7, &(0x7f00000005c0)={r0, r1+10000000}, &(0x7f0000000600)={[0xd65a]}, 0x8) getsockopt(0xffffffffffffffff, 0x4, 0x6, &(0x7f0000000380)=""/84, &(0x7f0000000400)=0x54) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"851ae9f147e4bfd9cb4cce58f277d1d4", 0x0, 0x0, {0x7ff, 0x9}, {0x7, 0xffffff14}, 0xb84b, [0x5, 0x9, 0x3, 0x8, 0x1, 0x6, 0x6, 0x7, 0x7, 0x7fff, 0xfff, 0x5, 0x8, 0x2, 0x7, 0x8]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000ac0)={0x0, 0xf8d, 0x2}) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="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", 0xfc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @local, 0x3}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200649078"], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") stat(&(0x7f0000000040)='./file0\x00', 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) 303.942773ms ago: executing program 9 (id=23329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0xa10e, 0xa88, 0x8406, 0x7, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000050000000500010007"], 0x1c}}, 0x40) (fail_nth: 1) 0s ago: executing program 9 (id=23330): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_STATUS_MASK={0x8}, @CTA_TUPLE_REPLY={0x4}]}, 0x20}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): COUNT), order=0, oom_score_adj=1000 [ 1134.336565][ T6268] loop7: p214 size 14876672 extends beyond EOD, [ 1134.347433][ T7413] CPU: 0 UID: 0 PID: 7413 Comm: syz.3.22975 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1134.347465][ T7413] Tainted: [W]=WARN [ 1134.347472][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1134.347485][ T7413] Call Trace: [ 1134.347491][ T7413] [ 1134.347499][ T7413] __dump_stack+0x1d/0x30 [ 1134.347625][ T7413] dump_stack_lvl+0x95/0xd0 [ 1134.347747][ T7413] dump_stack+0x15/0x1b [ 1134.347795][ T7413] dump_header+0x80/0x240 [ 1134.347817][ T7413] oom_kill_process+0x295/0x350 [ 1134.347843][ T7413] out_of_memory+0x97d/0xb80 [ 1134.347925][ T7413] try_charge_memcg+0x62e/0xa10 [ 1134.347954][ T7413] obj_cgroup_charge_pages+0x23/0xc0 [ 1134.347982][ T7413] __memcg_kmem_charge_page+0x9e/0x170 [ 1134.348050][ T7413] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1134.348084][ T7413] alloc_pages_mpol+0xb3/0x260 [ 1134.348160][ T7413] alloc_pages_noprof+0x8f/0x130 [ 1134.348191][ T7413] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1134.348232][ T7413] __kvmalloc_node_noprof+0x471/0x680 [ 1134.348280][ T7413] ? ip_set_alloc+0x24/0x30 [ 1134.348343][ T7413] ? ip_set_alloc+0x24/0x30 [ 1134.348372][ T7413] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 1134.348401][ T7413] ip_set_alloc+0x24/0x30 [ 1134.348537][ T7413] hash_netiface_create+0x282/0x740 [ 1134.348570][ T7413] ? __pfx_hash_netiface_create+0x10/0x10 [ 1134.348643][ T7413] ip_set_create+0x3cf/0x970 [ 1134.348685][ T7413] ? __nla_parse+0x40/0x60 [ 1134.348707][ T7413] nfnetlink_rcv_msg+0x509/0x5d0 [ 1134.348752][ T7413] netlink_rcv_skb+0x123/0x220 [ 1134.348841][ T7413] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1134.348876][ T7413] nfnetlink_rcv+0x167/0x1720 [ 1134.349079][ T7413] ? __kfree_skb+0x109/0x150 [ 1134.349149][ T7413] ? nlmon_xmit+0x4f/0x60 [ 1134.349187][ T7413] ? consume_skb+0x49/0x140 [ 1134.349247][ T7413] ? nlmon_xmit+0x4f/0x60 [ 1134.349340][ T7413] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 1134.349375][ T7413] ? __dev_queue_xmit+0x139a/0x1f20 [ 1134.349434][ T7413] ? __dev_queue_xmit+0x148/0x1f20 [ 1134.349467][ T7413] ? ref_tracker_free+0x37d/0x3e0 [ 1134.349529][ T7413] ? __netlink_deliver_tap+0x4dc/0x500 [ 1134.349587][ T7413] netlink_unicast+0x5c0/0x690 [ 1134.349621][ T7413] netlink_sendmsg+0x5c8/0x6f0 [ 1134.349643][ T7413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.349731][ T7413] ____sys_sendmsg+0x5af/0x600 [ 1134.349755][ T7413] ___sys_sendmsg+0x195/0x1e0 [ 1134.349821][ T7413] __x64_sys_sendmsg+0xd4/0x160 [ 1134.349844][ T7413] x64_sys_call+0x17ba/0x3000 [ 1134.349870][ T7413] do_syscall_64+0xc0/0x2a0 [ 1134.349967][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.349991][ T7413] RIP: 0033:0x7f97fe10aeb9 [ 1134.350009][ T7413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.350028][ T7413] RSP: 002b:00007f97fcb5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.350129][ T7413] RAX: ffffffffffffffda RBX: 00007f97fe385fa0 RCX: 00007f97fe10aeb9 [ 1134.350144][ T7413] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000008 [ 1134.350159][ T7413] RBP: 00007f97fe178c1f R08: 0000000000000000 R09: 0000000000000000 [ 1134.350174][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.350188][ T7413] R13: 00007f97fe386038 R14: 00007f97fe385fa0 R15: 00007ffd83807498 [ 1134.350208][ T7413] [ 1134.350989][ T7413] memory: usage 307200kB, limit 307200kB, failcnt 1192 [ 1134.353920][ T6268] truncated [ 1134.365174][ T7413] memory+swap: usage 307216kB, limit 9007199254740988kB, failcnt 0 [ 1134.365192][ T7413] kmem: usage 306136kB, limit 9007199254740988kB, failcnt 0 [ 1134.365205][ T7413] Memory cgroup stats for /syz3: [ 1134.380631][ T7413] cache 303104 [ 1134.418556][ T6268] loop7: p215 start 100663296 is beyond EOD, [ 1134.423120][ T7413] rss 729088 [ 1134.428580][ T6268] truncated [ 1134.434379][ T7413] shmem 0 [ 1134.439134][ T6268] loop7: p216 size 134217732 extends beyond EOD, [ 1134.444792][ T7413] mapped_file 303104 [ 1134.450008][ T6268] truncated [ 1134.454068][ T6268] loop7: p217 size 14876672 extends beyond EOD, [ 1134.455458][ T7413] dirty 36864 [ 1134.459977][ T6268] truncated [ 1134.514497][ T7496] EXT4-fs: Ignoring removed nobh option [ 1134.516718][ T7413] writeback 0 [ 1134.516728][ T7413] workingset_refault_anon 81 [ 1134.516737][ T7413] workingset_refault_file 611 [ 1134.516746][ T7413] swap 16384 [ 1134.617608][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.632123][ T7413] swapcached 0 [ 1134.640211][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.657854][ T7232] bridge_slave_0: entered allmulticast mode [ 1134.665055][ T7413] pgpgin 587995 [ 1134.682701][ T7232] bridge_slave_0: entered promiscuous mode [ 1134.683595][ T7413] pgpgout 587729 [ 1134.683605][ T7413] pgfault 379896 [ 1134.683613][ T7413] pgmajfault 76 [ 1134.691568][ T6268] loop7: p218 start 100663296 is beyond EOD, [ 1134.694232][ T7413] inactive_anon 196608 [ 1134.702232][ T6268] truncated [ 1134.702240][ T6268] loop7: p219 size 134217732 extends beyond EOD, [ 1134.709521][ T7413] active_anon 532480 [ 1134.709533][ T7413] inactive_file 0 [ 1134.714506][ T6268] truncated [ 1134.726551][ T6268] loop7: p220 size 14876672 extends beyond EOD, [ 1134.727957][ T7413] active_file 360448 [ 1134.727968][ T7413] unevictable 0 [ 1134.731140][ T6268] truncated [ 1134.733784][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1134.734173][ T7413] hierarchical_memory_limit 314572800 [ 1134.741290][ T6268] loop7: p221 start 100663296 is beyond EOD, [ 1134.744464][ T7413] hierarchical_memsw_limit 9223372036854771712 [ 1134.747573][ T6268] truncated [ 1134.747581][ T6268] loop7: p222 size 134217732 extends beyond EOD, [ 1134.754641][ T7413] total_cache 303104 [ 1134.757182][ T6268] truncated [ 1134.759117][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.760325][ T7413] total_rss 729088 [ 1134.765859][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.769106][ T7413] total_shmem 0 [ 1134.774768][ T7232] bridge_slave_1: entered allmulticast mode [ 1134.778383][ T7413] total_mapped_file 303104 [ 1134.785535][ T7232] bridge_slave_1: entered promiscuous mode [ 1134.789297][ T7413] total_dirty 36864 [ 1134.789309][ T7413] total_writeback 0 [ 1134.809088][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.815560][ T7413] total_workingset_refault_anon 81 [ 1134.820284][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.822049][ T7413] total_workingset_refault_file 611 [ 1134.840704][ T6268] loop7: p223 size 14876672 extends beyond EOD, [ 1134.845939][ T7413] total_swap 16384 [ 1134.849251][ T6268] truncated [ 1134.850857][ T6268] loop7: p224 start 100663296 is beyond EOD, [ 1134.852878][ T7413] total_swapcached 0 [ 1134.855993][ T6268] truncated [ 1134.862331][ T7413] total_pgpgin 587995 [ 1134.862341][ T7413] total_pgpgout 587729 [ 1134.862349][ T7413] total_pgfault 379896 [ 1134.862356][ T7413] total_pgmajfault 76 [ 1134.866233][ T6268] loop7: p225 size 134217732 extends beyond EOD, [ 1134.870362][ T7413] total_inactive_anon 196608 [ 1134.872816][ T6268] truncated [ 1134.876418][ T7232] team0: Port device team_slave_0 added [ 1134.879123][ T7413] total_active_anon 532480 [ 1134.886047][ T7232] team0: Port device team_slave_1 added [ 1134.890640][ T7413] total_inactive_file 0 [ 1134.890652][ T7413] total_active_file 360448 [ 1134.890660][ T7413] total_unevictable 0 [ 1134.890670][ T7413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg= [ 1134.902032][ T6268] loop7: p226 size 14876672 extends beyond EOD, [ 1134.907081][ T7413] /syz3,task_memcg=/syz3,task=syz.3.22975,pid=7412,uid=0 [ 1134.907119][ T7413] Memory cgroup out of memory: Killed process 7412 (syz.3.22975) total-vm:94012kB, anon-rss:1320kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1135.043394][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.045404][ T6268] truncated [ 1135.049740][ T6268] loop7: p227 start 100663296 is beyond EOD, [ 1135.051685][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.055364][ T6268] truncated [ 1135.055372][ T6268] loop7: p228 size 134217732 extends beyond EOD, [ 1135.060972][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.070057][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.073599][ T6268] truncated [ 1135.086490][ T6268] loop7: p229 size 14876672 extends beyond EOD, [ 1135.090894][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.097905][ T6268] truncated [ 1135.115682][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.123110][ T6268] loop7: p230 start 100663296 is beyond EOD, truncated [ 1135.233412][ T6268] loop7: p231 size 134217732 extends beyond EOD, truncated [ 1135.255735][ T6268] loop7: p232 size 14876672 extends beyond EOD, truncated [ 1135.264393][ T6268] loop7: p233 start 100663296 is beyond EOD, truncated [ 1135.264416][ T6268] loop7: p234 size 134217732 extends beyond EOD, truncated [ 1135.269729][ T6268] loop7: p235 size 14876672 extends beyond EOD, truncated [ 1135.270209][ T6268] loop7: p236 start 100663296 is beyond EOD, truncated [ 1135.270229][ T6268] loop7: p237 size 134217732 extends beyond EOD, truncated [ 1135.270771][ T6268] loop7: p238 size 14876672 extends beyond EOD, truncated [ 1135.271141][ T6268] loop7: p239 start 100663296 is beyond EOD, truncated [ 1135.271162][ T6268] loop7: p240 size 134217732 extends beyond EOD, truncated [ 1135.271592][ T6268] loop7: p241 size 14876672 extends beyond EOD, truncated [ 1135.273091][ T6268] loop7: p242 start 100663296 is beyond EOD, truncated [ 1135.273111][ T6268] loop7: p243 size 134217732 extends beyond EOD, truncated [ 1135.273790][ T6268] loop7: p244 size 14876672 extends beyond EOD, truncated [ 1135.274184][ T6268] loop7: p245 start 100663296 is beyond EOD, truncated [ 1135.274211][ T6268] loop7: p246 size 134217732 extends beyond EOD, truncated [ 1135.274921][ T6268] loop7: p247 size 14876672 extends beyond EOD, truncated [ 1135.275448][ T6268] loop7: p248 start 100663296 is beyond EOD, truncated [ 1135.275465][ T6268] loop7: p249 size 134217732 extends beyond EOD, truncated [ 1135.276198][ T6268] loop7: p250 size 14876672 extends beyond EOD, truncated [ 1135.276813][ T6268] loop7: p251 start 100663296 is beyond EOD, truncated [ 1135.276834][ T6268] loop7: p252 size 134217732 extends beyond EOD, truncated [ 1135.277348][ T6268] loop7: p253 size 14876672 extends beyond EOD, truncated [ 1135.277762][ T6268] loop7: p254 start 100663296 is beyond EOD, truncated [ 1135.277781][ T6268] loop7: p255 size 134217732 extends beyond EOD, truncated [ 1135.292743][ T7232] hsr_slave_0: entered promiscuous mode [ 1135.471433][ T7666] set_capacity_and_notify: 1 callbacks suppressed [ 1135.471450][ T7666] loop3: detected capacity change from 0 to 164 [ 1135.478585][ T7232] hsr_slave_1: entered promiscuous mode [ 1135.493410][ T7232] debugfs: 'hsr0' already exists in 'hsr' [ 1135.499161][ T7232] Cannot create hsr debugfs directory [ 1135.710471][ T777] IPVS: stop unused estimator thread 0... [ 1135.716883][ T7510] lo speed is unknown, defaulting to 1000 [ 1135.967068][ T777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.977569][ T777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.073888][ T777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.084308][ T777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.159841][ T7956] loop7: detected capacity change from 0 to 164 [ 1136.181864][ T777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.192254][ T777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.300631][ T777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.311004][ T777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.360103][ T3945] udevd[3945]: inotify_add_watch(7, /dev/loop7p60, 10) failed: No such file or directory [ 1136.365148][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop7p58, 10) failed: No such file or directory [ 1136.370664][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p69, 10) failed: No such file or directory [ 1136.383921][T25006] udevd[25006]: inotify_add_watch(7, /dev/loop7p51, 10) failed: No such file or directory [ 1136.401127][T25003] udevd[25003]: inotify_add_watch(7, /dev/loop7p66, 10) failed: No such file or directory [ 1136.401961][ T7895] udevd[7895]: inotify_add_watch(7, /dev/loop7p55, 10) failed: No such file or directory [ 1136.413504][ T7894] udevd[7894]: inotify_add_watch(7, /dev/loop7p48, 10) failed: No such file or directory [ 1136.424380][ T3945] udevd[3945]: inotify_add_watch(7, /dev/loop7p70, 10) failed: No such file or directory [ 1136.433994][ T7894] udevd[7894]: inotify_add_watch(7, /dev/loop7p79, 10) failed: No such file or directory [ 1136.450718][T25003] udevd[25003]: inotify_add_watch(7, /dev/loop7p76, 10) failed: No such file or directory [ 1136.463726][ T7232] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.474115][ T7232] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.582902][ T7232] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.593240][ T7232] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.609573][T15983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1136.628518][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 1136.707040][ T8004] loop8: detected capacity change from 0 to 1024 [ 1136.733447][ T8004] ext4: Unknown parameter 'smackfsroot' [ 1136.744936][ T7232] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.755390][ T7232] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.871024][ T7232] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.881438][ T7232] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.915427][ T8040] loop8: detected capacity change from 0 to 512 [ 1136.947889][ T777] bridge_slave_1: left allmulticast mode [ 1136.953712][ T777] bridge_slave_1: left promiscuous mode [ 1136.960149][ T777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.970517][ T777] bridge_slave_0: left allmulticast mode [ 1136.976212][ T777] bridge_slave_0: left promiscuous mode [ 1136.982148][ T777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.062517][ T777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.073135][ T777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.084746][ T777] bond0 (unregistering): Released all slaves [ 1137.125104][ T7666] lo speed is unknown, defaulting to 1000 [ 1137.177814][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.184964][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.204509][ T7510] bridge_slave_0: entered allmulticast mode [ 1137.211296][ T7510] bridge_slave_0: entered promiscuous mode [ 1137.218520][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.226742][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.234229][ T7510] bridge_slave_1: entered allmulticast mode [ 1137.242505][ T7510] bridge_slave_1: entered promiscuous mode [ 1137.249071][ T7232] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1137.270064][ T7232] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1137.283525][ T7232] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1137.305345][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.315339][ T7232] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1137.338544][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.385574][ T7510] team0: Port device team_slave_0 added [ 1137.409869][ T7510] team0: Port device team_slave_1 added [ 1137.416818][ T7956] lo speed is unknown, defaulting to 1000 [ 1137.496172][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.503184][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.529194][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.544939][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.558184][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.578748][ T7232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1137.589857][ T7232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.655269][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1137.655284][ T29] audit: type=1326 audit(1770382616.192:29195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.690984][ T777] hsr_slave_0: left promiscuous mode [ 1137.691538][ T8176] siw: device registration error -23 [ 1137.697551][ T29] audit: type=1326 audit(1770382616.232:29196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.725861][ T29] audit: type=1326 audit(1770382616.232:29197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.725891][ T29] audit: type=1326 audit(1770382616.232:29198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.725917][ T29] audit: type=1326 audit(1770382616.232:29199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.725997][ T29] audit: type=1326 audit(1770382616.232:29200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.726075][ T29] audit: type=1326 audit(1770382616.232:29201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.728163][ T29] audit: type=1326 audit(1770382616.252:29202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.750919][ T777] hsr_slave_1: left promiscuous mode [ 1137.773455][ T29] audit: type=1326 audit(1770382616.252:29203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.832553][ T8176] loop8: detected capacity change from 0 to 1024 [ 1137.844325][ T29] audit: type=1326 audit(1770382616.252:29204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.8.22985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1137.927100][ T777] veth1_macvtap: left promiscuous mode [ 1137.933741][ T777] veth0_macvtap: left promiscuous mode [ 1137.939373][ T777] veth1_vlan: left promiscuous mode [ 1137.944643][ T777] veth0_vlan: left promiscuous mode [ 1138.035337][ T777] team0 (unregistering): Port device team_slave_1 removed [ 1138.046716][ T777] team0 (unregistering): Port device team_slave_0 removed [ 1138.098748][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.106247][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.132996][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.152684][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.159827][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.169811][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.176900][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.288527][ T7510] hsr_slave_0: entered promiscuous mode [ 1138.295607][ T7510] hsr_slave_1: entered promiscuous mode [ 1138.301535][ T7510] debugfs: 'hsr0' already exists in 'hsr' [ 1138.307270][ T7510] Cannot create hsr debugfs directory [ 1138.558313][ T8287] usb usb9: usbfs: process 8287 (syz.3.22991) did not claim interface 24 before use [ 1138.580585][ T777] IPVS: stop unused estimator thread 0... [ 1138.616329][ T8287] FAULT_INJECTION: forcing a failure. [ 1138.616329][ T8287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.618229][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.630212][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.3.22991 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1138.630270][ T8287] Tainted: [W]=WARN [ 1138.630277][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1138.630290][ T8287] Call Trace: [ 1138.630298][ T8287] [ 1138.630308][ T8287] __dump_stack+0x1d/0x30 [ 1138.630334][ T8287] dump_stack_lvl+0x95/0xd0 [ 1138.630363][ T8287] dump_stack+0x15/0x1b [ 1138.630421][ T8287] should_fail_ex+0x263/0x280 [ 1138.630451][ T8287] should_fail+0xb/0x20 [ 1138.630477][ T8287] should_fail_usercopy+0x1a/0x20 [ 1138.630558][ T8287] _copy_to_user+0x20/0xa0 [ 1138.630659][ T8287] simple_read_from_buffer+0xb5/0x130 [ 1138.630694][ T8287] proc_fail_nth_read+0x10e/0x150 [ 1138.630723][ T8287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1138.630827][ T8287] vfs_read+0x1ab/0x7f0 [ 1138.630888][ T8287] ? __schedule+0x82d/0xc90 [ 1138.630907][ T8287] ? __rcu_read_unlock+0x4e/0x70 [ 1138.630938][ T8287] ? __fget_files+0x184/0x1c0 [ 1138.630963][ T8287] ? mutex_lock+0x57/0x90 [ 1138.630987][ T8287] ksys_read+0xdc/0x1a0 [ 1138.631032][ T8287] __x64_sys_read+0x40/0x50 [ 1138.631052][ T8287] x64_sys_call+0x2889/0x3000 [ 1138.631084][ T8287] do_syscall_64+0xc0/0x2a0 [ 1138.631115][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.631137][ T8287] RIP: 0033:0x7f97fe0cb78e [ 1138.631207][ T8287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1138.631225][ T8287] RSP: 002b:00007f97fcb5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1138.631246][ T8287] RAX: ffffffffffffffda RBX: 00007f97fcb5f6c0 RCX: 00007f97fe0cb78e [ 1138.631261][ T8287] RDX: 000000000000000f RSI: 00007f97fcb5f0a0 RDI: 0000000000000004 [ 1138.631311][ T8287] RBP: 00007f97fcb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.631325][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.631339][ T8287] R13: 00007f97fe386038 R14: 00007f97fe385fa0 R15: 00007ffd83807498 [ 1138.631359][ T8287] [ 1138.882778][ T8315] loop3: detected capacity change from 0 to 512 [ 1138.897636][ T8315] EXT4-fs: Ignoring removed nobh option [ 1138.936984][ T8315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1138.963096][ T8315] EXT4-fs (loop3): 1 truncate cleaned up [ 1138.978678][ T8335] team0: Port device gtp0 added [ 1138.990791][ T8315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.008359][ T42] Bluetooth: hci0: Frame reassembly failed (-84) [ 1139.052868][ T8371] gre0: entered promiscuous mode [ 1139.274695][ T7510] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1139.287123][ T7232] veth0_vlan: entered promiscuous mode [ 1139.293918][ T7510] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1139.305051][ T7510] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1139.316031][ T7510] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1139.328435][ T7232] veth1_vlan: entered promiscuous mode [ 1139.389815][ T7232] veth0_macvtap: entered promiscuous mode [ 1139.423870][ T7232] veth1_macvtap: entered promiscuous mode [ 1139.430988][ T8442] loop7: detected capacity change from 0 to 164 [ 1139.457585][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.503921][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.516880][ T5216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.556594][ T5216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.624570][ T5216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.645133][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.672168][ T5216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.717463][ T7510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.746049][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.753201][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.785766][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.792854][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.880223][ T8493] loop8: detected capacity change from 0 to 1024 [ 1139.902394][ T8493] ext4: Unknown parameter 'smackfsroot' [ 1139.990508][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.035038][ T8521] netlink: 'syz.6.23005': attribute type 4 has an invalid length. [ 1140.043018][ T8521] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.23005'. [ 1140.096298][ T8530] FAULT_INJECTION: forcing a failure. [ 1140.096298][ T8530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.109534][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.6.23006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1140.109619][ T8530] Tainted: [W]=WARN [ 1140.109626][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1140.109638][ T8530] Call Trace: [ 1140.109644][ T8530] [ 1140.109651][ T8530] __dump_stack+0x1d/0x30 [ 1140.109676][ T8530] dump_stack_lvl+0x95/0xd0 [ 1140.109697][ T8530] dump_stack+0x15/0x1b [ 1140.109794][ T8530] should_fail_ex+0x263/0x280 [ 1140.109891][ T8530] should_fail+0xb/0x20 [ 1140.109920][ T8530] should_fail_usercopy+0x1a/0x20 [ 1140.109954][ T8530] _copy_to_user+0x20/0xa0 [ 1140.109976][ T8530] simple_read_from_buffer+0xb5/0x130 [ 1140.110080][ T8530] proc_fail_nth_read+0x10e/0x150 [ 1140.110108][ T8530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1140.110133][ T8530] vfs_read+0x1ab/0x7f0 [ 1140.110154][ T8530] ? __rcu_read_unlock+0x4e/0x70 [ 1140.110315][ T8530] ? __fget_files+0x184/0x1c0 [ 1140.110424][ T8530] ? mutex_lock+0x57/0x90 [ 1140.110448][ T8530] ksys_read+0xdc/0x1a0 [ 1140.110470][ T8530] __x64_sys_read+0x40/0x50 [ 1140.110490][ T8530] x64_sys_call+0x2889/0x3000 [ 1140.110533][ T8530] do_syscall_64+0xc0/0x2a0 [ 1140.110617][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.110642][ T8530] RIP: 0033:0x7fd1babfb78e [ 1140.110660][ T8530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1140.110679][ T8530] RSP: 002b:00007fd1b9696fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1140.110767][ T8530] RAX: ffffffffffffffda RBX: 00007fd1b96976c0 RCX: 00007fd1babfb78e [ 1140.110783][ T8530] RDX: 000000000000000f RSI: 00007fd1b96970a0 RDI: 0000000000000005 [ 1140.110798][ T8530] RBP: 00007fd1b9697090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.110813][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.110828][ T8530] R13: 00007fd1baeb6038 R14: 00007fd1baeb5fa0 R15: 00007ffe9f2e6908 [ 1140.110850][ T8530] [ 1140.336022][ T8442] lo speed is unknown, defaulting to 1000 [ 1140.532565][ T8572] loop8: detected capacity change from 0 to 512 [ 1140.612186][ T7510] veth0_vlan: entered promiscuous mode [ 1140.628032][ T7510] veth1_vlan: entered promiscuous mode [ 1140.693048][ T7510] veth0_macvtap: entered promiscuous mode [ 1140.714207][ T7510] veth1_macvtap: entered promiscuous mode [ 1140.740815][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.753970][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.779104][ T773] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.819090][ T773] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.846364][ T773] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.875652][ T773] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.902580][ T8619] loop9: detected capacity change from 0 to 1024 [ 1140.919823][ T8619] EXT4-fs: Ignoring removed orlov option [ 1140.960743][ T8619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.983352][ T8619] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 1141.009261][T17937] Bluetooth: hci0: command 0x1003 tx timeout [ 1141.015503][T15983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1141.025955][ T8633] netlink: 'syz.8.23012': attribute type 1 has an invalid length. [ 1141.033863][ T8633] netlink: 'syz.8.23012': attribute type 2 has an invalid length. [ 1141.042248][ T7510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.042282][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23012'. [ 1141.087197][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.229838][ T8659] netlink: 300 bytes leftover after parsing attributes in process `syz.9.23015'. [ 1141.447390][T25003] udevd[25003]: symlink '../../loop9' '/dev/disk/by-diskseq/3725.tmp-b7:9' failed: Read-only file system [ 1141.492674][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.23020'. [ 1141.533691][T25003] udevd[25003]: symlink '../../loop7' '/dev/disk/by-diskseq/3727.tmp-b7:7' failed: Read-only file system [ 1141.552396][ T7888] udevd[7888]: symlink '../../loop3' '/dev/disk/by-diskseq/3726.tmp-b7:3' failed: Read-only file system [ 1141.567824][T25006] udevd[25006]: symlink '../../loop6' '/dev/disk/by-diskseq/3718.tmp-b7:6' failed: Read-only file system [ 1141.594285][ T8700] loop3: detected capacity change from 0 to 1024 [ 1141.599428][ T8706] netlink: 'syz.6.23023': attribute type 4 has an invalid length. [ 1141.618022][ T8702] loop7: detected capacity change from 0 to 512 [ 1141.619911][T25003] udevd[25003]: symlink '../../loop9' '/dev/disk/by-diskseq/3725.tmp-b7:9' failed: Read-only file system [ 1141.642264][ T8700] ext4: Unknown parameter 'smackfsroot' [ 1141.648674][ T8702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1141.664226][ T7894] udevd[7894]: symlink '../../loop3' '/dev/disk/by-diskseq/3728.tmp-b7:3' failed: Read-only file system [ 1141.682684][ T7888] udevd[7888]: symlink '../../loop7' '/dev/disk/by-diskseq/3729.tmp-b7:7' failed: Read-only file system [ 1141.694963][ T8702] EXT4-fs: Mount option(s) incompatible with ext3 [ 1141.712330][ T8711] loop9: detected capacity change from 0 to 1024 [ 1141.722867][ T7888] udevd[7888]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1141.724598][ T7894] udevd[7894]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:3' failed: Read-only file system [ 1141.769936][ T8711] EXT4-fs: Ignoring removed orlov option [ 1141.802857][ T7888] udevd[7888]: symlink '../../loop9' '/dev/disk/by-diskseq/3730.tmp-b7:9' failed: Read-only file system [ 1141.823563][ T8711] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.908720][ T8736] loop3: detected capacity change from 0 to 512 [ 1141.929699][ T8711] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 1141.955106][ T8736] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1142.055522][ T7510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.089451][ T8752] loop8: detected capacity change from 0 to 512 [ 1142.107602][ T8752] EXT4-fs: Ignoring removed nobh option [ 1142.161276][ T7075] Bluetooth: hci0: Frame reassembly failed (-84) [ 1142.354562][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23031'. [ 1142.384293][ T8802] loop9: detected capacity change from 0 to 512 [ 1142.411894][ T8802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1142.455470][ T8802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.486435][ T8802] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.539989][ T8819] loop7: detected capacity change from 0 to 1024 [ 1142.546827][ T8819] ext4: Unknown parameter 'journa' [ 1142.607214][ T7510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.646959][ T8831] loop7: detected capacity change from 0 to 128 [ 1142.660663][ T8839] netlink: 'syz.3.23036': attribute type 29 has an invalid length. [ 1142.668617][ T8839] netlink: 'syz.3.23036': attribute type 3 has an invalid length. [ 1142.676575][ T8839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23036'. [ 1142.694444][ T8831] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1142.754901][ T8831] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1142.779662][ T8839] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1142.789448][ T8839] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1142.827881][ T8839] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1142.859152][ T8839] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #5: comm syz.3.23036: unexpected bad inode w/o EXT4_IGET_BAD [ 1142.872872][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23037'. [ 1142.882504][ T8831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8831 comm=syz.7.23037 [ 1142.909415][ T8839] EXT4-fs (loop3): no journal found [ 1142.914645][ T8839] EXT4-fs (loop3): can't get journal size [ 1142.943150][ T8839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1142.955942][ T8874] netlink: 'syz.7.23037': attribute type 4 has an invalid length. [ 1143.019555][ T8839] EXT4-fs error (device loop3): __ext4_iget:5426: inode #15: block 1803188595: comm syz.3.23036: invalid block [ 1143.174456][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.238588][ T8897] FAULT_INJECTION: forcing a failure. [ 1143.238588][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.251765][ T8897] CPU: 1 UID: 0 PID: 8897 Comm: syz.3.23042 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1143.251796][ T8897] Tainted: [W]=WARN [ 1143.251802][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1143.251814][ T8897] Call Trace: [ 1143.251821][ T8897] [ 1143.251830][ T8897] __dump_stack+0x1d/0x30 [ 1143.251856][ T8897] dump_stack_lvl+0x95/0xd0 [ 1143.251918][ T8897] dump_stack+0x15/0x1b [ 1143.251939][ T8897] should_fail_ex+0x263/0x280 [ 1143.251969][ T8897] should_fail+0xb/0x20 [ 1143.252035][ T8897] should_fail_usercopy+0x1a/0x20 [ 1143.252061][ T8897] _copy_from_user+0x1c/0xb0 [ 1143.252080][ T8897] sctp_setsockopt+0x164/0xea0 [ 1143.252103][ T8897] sock_common_setsockopt+0x69/0x80 [ 1143.252130][ T8897] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1143.252193][ T8897] __sys_setsockopt+0x184/0x200 [ 1143.252228][ T8897] __x64_sys_setsockopt+0x64/0x80 [ 1143.252262][ T8897] x64_sys_call+0x21d5/0x3000 [ 1143.252288][ T8897] do_syscall_64+0xc0/0x2a0 [ 1143.252366][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.252386][ T8897] RIP: 0033:0x7f97fe10aeb9 [ 1143.252404][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.252430][ T8897] RSP: 002b:00007f97fcb5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1143.252466][ T8897] RAX: ffffffffffffffda RBX: 00007f97fe385fa0 RCX: 00007f97fe10aeb9 [ 1143.252482][ T8897] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 1143.252540][ T8897] RBP: 00007f97fcb5f090 R08: 000000000000001c R09: 0000000000000000 [ 1143.252581][ T8897] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1143.252668][ T8897] R13: 00007f97fe386038 R14: 00007f97fe385fa0 R15: 00007ffd83807498 [ 1143.252686][ T8897] [ 1143.490695][ T8900] FAULT_INJECTION: forcing a failure. [ 1143.490695][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.503832][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.7.23044 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1143.503890][ T8900] Tainted: [W]=WARN [ 1143.503897][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1143.503908][ T8900] Call Trace: [ 1143.503915][ T8900] [ 1143.503922][ T8900] __dump_stack+0x1d/0x30 [ 1143.504020][ T8900] dump_stack_lvl+0x95/0xd0 [ 1143.504044][ T8900] dump_stack+0x15/0x1b [ 1143.504086][ T8900] should_fail_ex+0x263/0x280 [ 1143.504116][ T8900] should_fail+0xb/0x20 [ 1143.504145][ T8900] should_fail_usercopy+0x1a/0x20 [ 1143.504186][ T8900] strncpy_from_user+0x27/0x250 [ 1143.504216][ T8900] getname_flags+0xad/0x3b0 [ 1143.504241][ T8900] io_openat_prep+0x12b/0x2c0 [ 1143.504260][ T8900] io_submit_sqes+0x70e/0x11b0 [ 1143.504293][ T8900] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 1143.504379][ T8900] ? __rcu_read_unlock+0x4e/0x70 [ 1143.504473][ T8900] ? get_pid_task+0x96/0xd0 [ 1143.504497][ T8900] ? proc_fail_nth_write+0x13b/0x160 [ 1143.504521][ T8900] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1143.504596][ T8900] ? vfs_write+0x86e/0x9f0 [ 1143.504617][ T8900] ? __rcu_read_unlock+0x4e/0x70 [ 1143.504705][ T8900] ? __fget_files+0x184/0x1c0 [ 1143.504726][ T8900] ? mutex_lock+0x57/0x90 [ 1143.504746][ T8900] ? mutex_unlock+0x4e/0x90 [ 1143.504766][ T8900] ? fput+0x8f/0xc0 [ 1143.504797][ T8900] __x64_sys_io_uring_enter+0x78/0x90 [ 1143.504841][ T8900] x64_sys_call+0x27e4/0x3000 [ 1143.504867][ T8900] do_syscall_64+0xc0/0x2a0 [ 1143.504959][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.504984][ T8900] RIP: 0033:0x7fc6b05baeb9 [ 1143.505000][ T8900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.505020][ T8900] RSP: 002b:00007fc6af017028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1143.505067][ T8900] RAX: ffffffffffffffda RBX: 00007fc6b0835fa0 RCX: 00007fc6b05baeb9 [ 1143.505083][ T8900] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1143.505099][ T8900] RBP: 00007fc6af017090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.505114][ T8900] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1143.505128][ T8900] R13: 00007fc6b0836038 R14: 00007fc6b0835fa0 R15: 00007fff039efd38 [ 1143.505146][ T8900] [ 1143.758368][ T8907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1143.777105][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.9.23047'. [ 1143.807826][ T8907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1143.824798][ T8907] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1143.870659][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.882738][ T8927] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1143.898095][ T8927] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1143.945849][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23051'. [ 1143.955891][ T8927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8927 comm=syz.9.23051 [ 1143.971592][ T8927] batman_adv: batadv0: Adding interface: dummy0 [ 1143.977900][ T8927] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.017156][ T8927] batman_adv: batadv0: Interface activated: dummy0 [ 1144.040013][ T8952] netlink: 96 bytes leftover after parsing attributes in process `syz.7.23054'. [ 1144.049913][ T8953] netlink: 'syz.6.23055': attribute type 4 has an invalid length. [ 1144.079764][ T8942] lo speed is unknown, defaulting to 1000 [ 1144.112901][ T8954] batadv0: mtu less than device minimum [ 1144.119125][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.129877][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.141007][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.152087][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.162964][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.173909][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.174505][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 1144.174545][ T29] audit: type=1400 audit(1770382622.712:29345): avc: denied { write } for pid=8939 comm="syz.3.23053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1144.184774][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.185327][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.231603][ T8954] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1144.248844][T15983] Bluetooth: hci0: command 0x1003 tx timeout [ 1144.254960][T17937] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1144.266367][ T8927] netlink: 'syz.9.23051': attribute type 4 has an invalid length. [ 1144.302939][ T8983] FAULT_INJECTION: forcing a failure. [ 1144.302939][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.316120][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.6.23056 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1144.316187][ T8983] Tainted: [W]=WARN [ 1144.316268][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1144.316281][ T8983] Call Trace: [ 1144.316289][ T8983] [ 1144.316297][ T8983] __dump_stack+0x1d/0x30 [ 1144.316406][ T8983] dump_stack_lvl+0x95/0xd0 [ 1144.316426][ T8983] dump_stack+0x15/0x1b [ 1144.316516][ T8983] should_fail_ex+0x263/0x280 [ 1144.316544][ T8983] should_fail+0xb/0x20 [ 1144.316648][ T8983] should_fail_usercopy+0x1a/0x20 [ 1144.316679][ T8983] _copy_from_user+0x1c/0xb0 [ 1144.316702][ T8983] bpf_test_init+0xb9/0x130 [ 1144.316791][ T8983] bpf_prog_test_run_xdp+0x306/0xa10 [ 1144.316827][ T8983] ? __rcu_read_unlock+0x4e/0x70 [ 1144.316877][ T8983] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1144.316909][ T8983] bpf_prog_test_run+0x204/0x340 [ 1144.316940][ T8983] __sys_bpf+0x4c0/0x7b0 [ 1144.316990][ T8983] __x64_sys_bpf+0x41/0x50 [ 1144.317012][ T8983] x64_sys_call+0x28e1/0x3000 [ 1144.317094][ T8983] do_syscall_64+0xc0/0x2a0 [ 1144.317125][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.317147][ T8983] RIP: 0033:0x7fd1bac3aeb9 [ 1144.317203][ T8983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.317222][ T8983] RSP: 002b:00007fd1b9697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1144.317245][ T8983] RAX: ffffffffffffffda RBX: 00007fd1baeb5fa0 RCX: 00007fd1bac3aeb9 [ 1144.317260][ T8983] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1144.317275][ T8983] RBP: 00007fd1b9697090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.317290][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.317368][ T8983] R13: 00007fd1baeb6038 R14: 00007fd1baeb5fa0 R15: 00007ffe9f2e6908 [ 1144.317395][ T8983] [ 1144.604877][ T8986] bond1 (unregistering): Released all slaves [ 1144.650487][ T9035] netlink: 'syz.3.23061': attribute type 4 has an invalid length. [ 1144.699762][ T9078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1144.733923][ T9078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1144.739648][ T8997] ip6gre1: entered promiscuous mode [ 1144.752478][ T8997] ip6gre1: entered allmulticast mode [ 1144.759410][ T9078] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.787585][ T9027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1144.831124][ T7510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.860740][ T9100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1144.911950][ T9169] FAULT_INJECTION: forcing a failure. [ 1144.911950][ T9169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.925864][ T9169] CPU: 0 UID: 0 PID: 9169 Comm: syz.9.23066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1144.925923][ T9169] Tainted: [W]=WARN [ 1144.925931][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1144.925946][ T9169] Call Trace: [ 1144.925954][ T9169] [ 1144.925964][ T9169] __dump_stack+0x1d/0x30 [ 1144.925992][ T9169] dump_stack_lvl+0x95/0xd0 [ 1144.926064][ T9169] dump_stack+0x15/0x1b [ 1144.926086][ T9169] should_fail_ex+0x263/0x280 [ 1144.926121][ T9169] should_fail+0xb/0x20 [ 1144.926151][ T9169] should_fail_usercopy+0x1a/0x20 [ 1144.926225][ T9169] _copy_from_iter+0xcf/0xea0 [ 1144.926274][ T9169] ? __alloc_skb+0x397/0x4b0 [ 1144.926300][ T9169] ? __alloc_skb+0x219/0x4b0 [ 1144.926336][ T9169] netlink_sendmsg+0x4ae/0x6f0 [ 1144.926395][ T9169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1144.926412][ T9169] ____sys_sendmsg+0x5af/0x600 [ 1144.926436][ T9169] ___sys_sendmsg+0x195/0x1e0 [ 1144.926470][ T9169] __x64_sys_sendmsg+0xd4/0x160 [ 1144.926551][ T9169] x64_sys_call+0x17ba/0x3000 [ 1144.926574][ T9169] do_syscall_64+0xc0/0x2a0 [ 1144.926601][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.926637][ T9169] RIP: 0033:0x7f623d82aeb9 [ 1144.926654][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.926724][ T9169] RSP: 002b:00007f623c287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1144.926747][ T9169] RAX: ffffffffffffffda RBX: 00007f623daa5fa0 RCX: 00007f623d82aeb9 [ 1144.926763][ T9169] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1144.926852][ T9169] RBP: 00007f623c287090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.926866][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.926880][ T9169] R13: 00007f623daa6038 R14: 00007f623daa5fa0 R15: 00007ffef83724d8 [ 1144.926902][ T9169] [ 1145.121812][ T9084] bond3 (unregistering): Released all slaves [ 1145.178644][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.201210][ T9243] __nla_validate_parse: 6 callbacks suppressed [ 1145.201227][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23070'. [ 1145.219262][ T9148] netlink: 'syz.8.23068': attribute type 12 has an invalid length. [ 1145.228953][T10177] lo speed is unknown, defaulting to 1000 [ 1145.235561][T10177] syz2: Port: 1 Link DOWN [ 1145.239521][ T9247] gtp0: entered promiscuous mode [ 1145.244871][ T9247] gtp0: entered allmulticast mode [ 1145.359088][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.366221][ T9100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.373545][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.380719][ T9100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.389131][ T10] IPVS: starting estimator thread 0... [ 1145.471078][ T9100] bridge0: left allmulticast mode [ 1145.488214][ T9100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.499350][ T9269] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1145.518746][ T9280] netlink: 'syz.8.23078': attribute type 12 has an invalid length. [ 1145.593832][ T9288] netlink: 'syz.7.23079': attribute type 4 has an invalid length. [ 1145.630184][ T9297] FAULT_INJECTION: forcing a failure. [ 1145.630184][ T9297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.643376][ T9297] CPU: 0 UID: 0 PID: 9297 Comm: syz.8.23082 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1145.643414][ T9297] Tainted: [W]=WARN [ 1145.643422][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1145.643445][ T9297] Call Trace: [ 1145.643454][ T9297] [ 1145.643464][ T9297] __dump_stack+0x1d/0x30 [ 1145.643520][ T9297] dump_stack_lvl+0x95/0xd0 [ 1145.643542][ T9297] dump_stack+0x15/0x1b [ 1145.643564][ T9297] should_fail_ex+0x263/0x280 [ 1145.643596][ T9297] should_fail+0xb/0x20 [ 1145.643691][ T9297] should_fail_usercopy+0x1a/0x20 [ 1145.643725][ T9297] _copy_to_iter+0x251/0xea0 [ 1145.643759][ T9297] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1145.643790][ T9297] __skb_datagram_iter+0xc6/0x680 [ 1145.643827][ T9297] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1145.643851][ T9297] skb_copy_datagram_iter+0x3d/0x100 [ 1145.643903][ T9297] netlink_recvmsg+0x1a8/0x550 [ 1145.643924][ T9297] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1145.643942][ T9297] sock_recvmsg+0x139/0x160 [ 1145.644000][ T9297] ____sys_recvmsg+0xf5/0x280 [ 1145.644090][ T9297] ___sys_recvmsg+0x11f/0x3b0 [ 1145.644133][ T9297] __x64_sys_recvmsg+0xd1/0x160 [ 1145.644155][ T9297] x64_sys_call+0x2cbf/0x3000 [ 1145.644177][ T9297] do_syscall_64+0xc0/0x2a0 [ 1145.644211][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.644236][ T9297] RIP: 0033:0x7f477df9aeb9 [ 1145.644323][ T9297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.644385][ T9297] RSP: 002b:00007f477c9f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1145.644405][ T9297] RAX: ffffffffffffffda RBX: 00007f477e215fa0 RCX: 00007f477df9aeb9 [ 1145.644421][ T9297] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1145.644437][ T9297] RBP: 00007f477c9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.644453][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.644533][ T9297] R13: 00007f477e216038 R14: 00007f477e215fa0 R15: 00007ffce9ae1b08 [ 1145.644556][ T9297] [ 1145.858857][ T9295] set_capacity_and_notify: 7 callbacks suppressed [ 1145.858933][ T9295] loop3: detected capacity change from 0 to 1024 [ 1145.881499][ T9302] loop7: detected capacity change from 0 to 128 [ 1145.888383][ T9302] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1145.902543][ T9302] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1145.925499][ T9295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1145.947753][ T9312] syzkaller0: entered promiscuous mode [ 1145.953423][ T9312] syzkaller0: entered allmulticast mode [ 1145.967847][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23083'. [ 1145.985619][ T9302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9302 comm=syz.7.23083 [ 1146.015470][ T9302] netlink: 'syz.7.23083': attribute type 4 has an invalid length. [ 1146.016108][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.050121][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23086'. [ 1146.084732][ T9331] netlink: 'syz.3.23085': attribute type 12 has an invalid length. [ 1146.133835][ T9343] loop8: detected capacity change from 0 to 128 [ 1146.176939][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23091'. [ 1146.186695][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23091'. [ 1146.264472][ T9362] FAULT_INJECTION: forcing a failure. [ 1146.264472][ T9362] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.268791][ T9372] loop7: detected capacity change from 0 to 512 [ 1146.277221][ T9362] CPU: 1 UID: 0 PID: 9362 Comm: syz.8.23094 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1146.277314][ T9362] Tainted: [W]=WARN [ 1146.277377][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1146.277390][ T9362] Call Trace: [ 1146.277399][ T9362] [ 1146.277407][ T9362] __dump_stack+0x1d/0x30 [ 1146.277472][ T9362] dump_stack_lvl+0x95/0xd0 [ 1146.277558][ T9362] dump_stack+0x15/0x1b [ 1146.277577][ T9362] should_fail_ex+0x263/0x280 [ 1146.277612][ T9362] should_failslab+0x8c/0xb0 [ 1146.277716][ T9362] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 1146.277754][ T9362] ? __d_alloc+0x37/0x340 [ 1146.277780][ T9362] __d_alloc+0x37/0x340 [ 1146.277834][ T9362] d_alloc+0x2e/0x100 [ 1146.277861][ T9362] lookup_one_qstr_excl+0x99/0x250 [ 1146.277947][ T9362] filename_create+0x155/0x220 [ 1146.278035][ T9362] start_creating_user_path+0x39/0x130 [ 1146.278068][ T9362] bpf_obj_pin_user+0xe0/0x260 [ 1146.278172][ T9362] bpf_obj_pin+0xac/0xd0 [ 1146.278207][ T9362] __sys_bpf+0x6d6/0x7b0 [ 1146.278239][ T9362] __x64_sys_bpf+0x41/0x50 [ 1146.278264][ T9362] x64_sys_call+0x28e1/0x3000 [ 1146.278304][ T9362] do_syscall_64+0xc0/0x2a0 [ 1146.278336][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.278405][ T9362] RIP: 0033:0x7f477df9aeb9 [ 1146.278423][ T9362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.278453][ T9362] RSP: 002b:00007f477c9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1146.278473][ T9362] RAX: ffffffffffffffda RBX: 00007f477e215fa0 RCX: 00007f477df9aeb9 [ 1146.278486][ T9362] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1146.278498][ T9362] RBP: 00007f477c9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.278510][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.278523][ T9362] R13: 00007f477e216038 R14: 00007f477e215fa0 R15: 00007ffce9ae1b08 [ 1146.278544][ T9362] [ 1146.343033][ T9375] netlink: 'syz.9.23098': attribute type 29 has an invalid length. [ 1146.392317][ T9372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.505352][ T9372] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.518275][ T9386] netlink: 484 bytes leftover after parsing attributes in process `syz.9.23098'. [ 1146.519489][ T9385] netlink: 'syz.9.23098': attribute type 29 has an invalid length. [ 1146.604962][ T29] audit: type=1326 audit(1770382625.142:29346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.644728][T25003] udevd[25003]: symlink '../../loop3' '/dev/disk/by-diskseq/3760.tmp-b7:3' failed: Read-only file system [ 1146.660744][ T7888] udevd[7888]: symlink '../../loop8' '/dev/disk/by-diskseq/3763.tmp-b7:8' failed: Read-only file system [ 1146.673911][T25006] udevd[25006]: symlink '../../loop9' '/dev/disk/by-diskseq/3753.tmp-b7:9' failed: Read-only file system [ 1146.680534][ T29] audit: type=1326 audit(1770382625.142:29347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.709471][ T29] audit: type=1326 audit(1770382625.142:29348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.767074][ T29] audit: type=1326 audit(1770382625.252:29349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.772269][ T9412] loop8: detected capacity change from 0 to 1024 [ 1146.791591][ T29] audit: type=1326 audit(1770382625.252:29350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.808446][ T9412] EXT4-fs: Ignoring removed orlov option [ 1146.821770][ T29] audit: type=1326 audit(1770382625.252:29351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.840837][T25006] udevd[25006]: symlink '../../loop9' '/dev/disk/by-diskseq/3753.tmp-b7:9' failed: Read-only file system [ 1146.850795][ T29] audit: type=1326 audit(1770382625.252:29352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.885093][ T29] audit: type=1326 audit(1770382625.252:29353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.892326][ T7888] udevd[7888]: symlink '../../loop8' '/dev/disk/by-diskseq/3765.tmp-b7:8' failed: Read-only file system [ 1146.909461][ T29] audit: type=1326 audit(1770382625.252:29354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9401 comm="syz.3.23101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97fe10aeb9 code=0x7ffc0000 [ 1146.944663][ T7888] udevd[7888]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1146.946301][T25003] udevd[25003]: symlink '../../loop3' '/dev/disk/by-diskseq/3760.tmp-b7:3' failed: Read-only file system [ 1146.986118][T25003] udevd[25003]: symlink '../../loop3' '/dev/disk/by-diskseq/3760.tmp-b7:3' failed: Read-only file system [ 1147.003382][ T7888] udevd[7888]: symlink '../../loop9' '/dev/disk/by-diskseq/3753.tmp-b7:9' failed: Read-only file system [ 1147.025377][T25006] udevd[25006]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1147.030846][ T9412] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 1147.061424][ T2937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.114774][ T9443] netlink: 'syz.7.23109': attribute type 4 has an invalid length. [ 1147.138585][ T9447] loop8: detected capacity change from 0 to 1024 [ 1147.146073][ T9447] EXT4-fs: Ignoring removed mblk_io_submit option [ 1147.183971][ T9444] team0: Port device macvlan1 added [ 1147.246251][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23114'. [ 1147.274727][ T9467] loop3: detected capacity change from 0 to 4096 [ 1147.305909][ T9465] loop8: detected capacity change from 0 to 512 [ 1147.340672][ T9467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.398933][ T9467] program syz.3.23113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1147.462457][ T9487] program syz.3.23113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1147.479454][ T9489] FAULT_INJECTION: forcing a failure. [ 1147.479454][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.492667][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.8.23119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1147.492746][ T9489] Tainted: [W]=WARN [ 1147.492755][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1147.492770][ T9489] Call Trace: [ 1147.492778][ T9489] [ 1147.492787][ T9489] __dump_stack+0x1d/0x30 [ 1147.492814][ T9489] dump_stack_lvl+0x95/0xd0 [ 1147.492846][ T9489] dump_stack+0x15/0x1b [ 1147.492909][ T9489] should_fail_ex+0x263/0x280 [ 1147.492942][ T9489] should_fail+0xb/0x20 [ 1147.492984][ T9489] should_fail_usercopy+0x1a/0x20 [ 1147.493016][ T9489] _copy_from_iter+0x21c/0xea0 [ 1147.493034][ T9489] ? __build_skb_around+0x164/0x1c0 [ 1147.493083][ T9489] ? __alloc_skb+0x397/0x4b0 [ 1147.493110][ T9489] ? _copy_from_iter+0x46b/0xea0 [ 1147.493131][ T9489] skb_copy_datagram_from_iter+0xb2/0x480 [ 1147.493154][ T9489] ? __netdev_alloc_frag_align+0x94/0xe0 [ 1147.493248][ T9489] tun_get_user+0x90b/0x27c0 [ 1147.493279][ T9489] ? ref_tracker_alloc+0x1f2/0x2f0 [ 1147.493316][ T9489] tun_chr_write_iter+0x15e/0x210 [ 1147.493341][ T9489] do_iter_readv_writev+0x4fd/0x5a0 [ 1147.493412][ T9489] vfs_writev+0x2e1/0x900 [ 1147.493448][ T9489] do_writev+0xe9/0x210 [ 1147.493513][ T9489] __x64_sys_writev+0x45/0x50 [ 1147.493533][ T9489] x64_sys_call+0x1ba5/0x3000 [ 1147.493556][ T9489] do_syscall_64+0xc0/0x2a0 [ 1147.493584][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.493665][ T9489] RIP: 0033:0x7f477df9aeb9 [ 1147.493684][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.493703][ T9489] RSP: 002b:00007f477c9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1147.493745][ T9489] RAX: ffffffffffffffda RBX: 00007f477e215fa0 RCX: 00007f477df9aeb9 [ 1147.493761][ T9489] RDX: 0000000000000004 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1147.493776][ T9489] RBP: 00007f477c9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.493791][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.493805][ T9489] R13: 00007f477e216038 R14: 00007f477e215fa0 R15: 00007ffce9ae1b08 [ 1147.493827][ T9489] [ 1147.494612][ T9487] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1147.508393][ T9496] FAULT_INJECTION: forcing a failure. [ 1147.508393][ T9496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.733651][ T9496] CPU: 0 UID: 0 PID: 9496 Comm: syz.9.23120 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1147.733688][ T9496] Tainted: [W]=WARN [ 1147.733694][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1147.733705][ T9496] Call Trace: [ 1147.733713][ T9496] [ 1147.733765][ T9496] __dump_stack+0x1d/0x30 [ 1147.733792][ T9496] dump_stack_lvl+0x95/0xd0 [ 1147.733872][ T9496] dump_stack+0x15/0x1b [ 1147.733901][ T9496] should_fail_ex+0x263/0x280 [ 1147.733941][ T9496] should_fail+0xb/0x20 [ 1147.734023][ T9496] should_fail_usercopy+0x1a/0x20 [ 1147.734056][ T9496] _copy_from_user+0x1c/0xb0 [ 1147.734075][ T9496] ___sys_sendmsg+0xc1/0x1e0 [ 1147.734158][ T9496] __x64_sys_sendmsg+0xd4/0x160 [ 1147.734209][ T9496] x64_sys_call+0x17ba/0x3000 [ 1147.734233][ T9496] do_syscall_64+0xc0/0x2a0 [ 1147.734271][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.734353][ T9496] RIP: 0033:0x7f623d82aeb9 [ 1147.734370][ T9496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.734387][ T9496] RSP: 002b:00007f623c287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.734441][ T9496] RAX: ffffffffffffffda RBX: 00007f623daa5fa0 RCX: 00007f623d82aeb9 [ 1147.734449][ T9496] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 1147.734457][ T9496] RBP: 00007f623c287090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.734465][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.734473][ T9496] R13: 00007f623daa6038 R14: 00007f623daa5fa0 R15: 00007ffef83724d8 [ 1147.734492][ T9496] [ 1147.980064][ T9526] pim6reg: entered allmulticast mode [ 1147.987306][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.001038][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.020763][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.8.23126'. [ 1148.021480][ T9526] pim6reg: left allmulticast mode [ 1148.091813][ T9555] loop8: detected capacity change from 0 to 512 [ 1148.108223][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.171208][ T9574] siw: device registration error -23 [ 1148.270841][ T9596] random: crng reseeded on system resumption [ 1148.295819][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.304522][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.315549][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.333955][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.353000][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.368610][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.377856][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.394414][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.412771][ T9619] FAULT_INJECTION: forcing a failure. [ 1148.412771][ T9619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.426707][ T9619] CPU: 0 UID: 0 PID: 9619 Comm: syz.3.23142 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1148.426743][ T9619] Tainted: [W]=WARN [ 1148.426751][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1148.426765][ T9619] Call Trace: [ 1148.426773][ T9619] [ 1148.426782][ T9619] __dump_stack+0x1d/0x30 [ 1148.426873][ T9619] dump_stack_lvl+0x95/0xd0 [ 1148.426897][ T9619] dump_stack+0x15/0x1b [ 1148.426934][ T9619] should_fail_ex+0x263/0x280 [ 1148.426968][ T9619] should_fail+0xb/0x20 [ 1148.426996][ T9619] should_fail_usercopy+0x1a/0x20 [ 1148.427149][ T9619] _copy_from_user+0x1c/0xb0 [ 1148.427169][ T9619] ____sys_sendmsg+0x1e2/0x600 [ 1148.427195][ T9619] ___sys_sendmsg+0x195/0x1e0 [ 1148.427228][ T9619] __sys_sendmmsg+0x185/0x320 [ 1148.427260][ T9619] __x64_sys_sendmmsg+0x57/0x70 [ 1148.427308][ T9619] x64_sys_call+0x1e28/0x3000 [ 1148.427370][ T9619] do_syscall_64+0xc0/0x2a0 [ 1148.427421][ T9619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.427441][ T9619] RIP: 0033:0x7f97fe10aeb9 [ 1148.427494][ T9619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.427512][ T9619] RSP: 002b:00007f97fcb5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1148.427551][ T9619] RAX: ffffffffffffffda RBX: 00007f97fe385fa0 RCX: 00007f97fe10aeb9 [ 1148.427566][ T9619] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1148.427580][ T9619] RBP: 00007f97fcb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.427595][ T9619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.427672][ T9619] R13: 00007f97fe386038 R14: 00007f97fe385fa0 R15: 00007ffd83807498 [ 1148.427695][ T9619] [ 1148.433619][ T9597] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.457190][ T9620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9620 comm=syz.9.23141 [ 1148.464905][ T9622] loop3: detected capacity change from 0 to 512 [ 1148.519107][ T9627] siw: device registration error -23 [ 1148.565926][ T9622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1148.623524][ T9632] netlink: 'syz.6.23145': attribute type 1 has an invalid length. [ 1148.660108][ T9622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.660588][ T9632] netlink: 224 bytes leftover after parsing attributes in process `syz.6.23145'. [ 1148.673608][ T9622] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.729472][ T9645] netlink: 'syz.9.23146': attribute type 4 has an invalid length. [ 1148.737328][ T9645] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.23146'. [ 1148.784582][ T9597] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.807832][ T9648] FAULT_INJECTION: forcing a failure. [ 1148.807832][ T9648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.821697][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.6.23147 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1148.821732][ T9648] Tainted: [W]=WARN [ 1148.821739][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1148.821757][ T9648] Call Trace: [ 1148.821762][ T9648] [ 1148.821770][ T9648] __dump_stack+0x1d/0x30 [ 1148.821792][ T9648] dump_stack_lvl+0x95/0xd0 [ 1148.821849][ T9648] dump_stack+0x15/0x1b [ 1148.821937][ T9648] should_fail_ex+0x263/0x280 [ 1148.822019][ T9648] should_fail+0xb/0x20 [ 1148.822047][ T9648] should_fail_usercopy+0x1a/0x20 [ 1148.822136][ T9648] _copy_from_iter+0xcf/0xea0 [ 1148.822154][ T9648] ? __alloc_skb+0x397/0x4b0 [ 1148.822180][ T9648] ? __alloc_skb+0x219/0x4b0 [ 1148.822218][ T9648] netlink_sendmsg+0x4ae/0x6f0 [ 1148.822239][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.822269][ T9648] ____sys_sendmsg+0x5af/0x600 [ 1148.822294][ T9648] ___sys_sendmsg+0x195/0x1e0 [ 1148.822345][ T9648] __x64_sys_sendmsg+0xd4/0x160 [ 1148.822368][ T9648] x64_sys_call+0x17ba/0x3000 [ 1148.822392][ T9648] do_syscall_64+0xc0/0x2a0 [ 1148.822432][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.822456][ T9648] RIP: 0033:0x7fd1bac3aeb9 [ 1148.822474][ T9648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.822492][ T9648] RSP: 002b:00007fd1b9697028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.822536][ T9648] RAX: ffffffffffffffda RBX: 00007fd1baeb5fa0 RCX: 00007fd1bac3aeb9 [ 1148.822553][ T9648] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 000000000000000b [ 1148.822571][ T9648] RBP: 00007fd1b9697090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.822585][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.822600][ T9648] R13: 00007fd1baeb6038 R14: 00007fd1baeb5fa0 R15: 00007ffe9f2e6908 [ 1148.822621][ T9648] [ 1149.082084][ T9597] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.097269][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.160152][ T9597] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.180401][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1149.180458][ T29] audit: type=1326 audit(1770382627.722:29407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.235045][ T29] audit: type=1326 audit(1770382627.752:29408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.259424][ T29] audit: type=1326 audit(1770382627.752:29409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.283218][ T29] audit: type=1326 audit(1770382627.752:29410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.307081][ T29] audit: type=1326 audit(1770382627.752:29411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.331382][ T29] audit: type=1326 audit(1770382627.752:29412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.355030][ T29] audit: type=1326 audit(1770382627.752:29413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.379310][ T29] audit: type=1326 audit(1770382627.752:29414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.403017][ T29] audit: type=1326 audit(1770382627.752:29415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.427654][ T29] audit: type=1326 audit(1770382627.752:29416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.7.23152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b05baeb9 code=0x7ffc0000 [ 1149.485221][ T777] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.494861][ T777] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.520569][ T9709] siw: device registration error -23 [ 1149.546533][ T773] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.559887][ T773] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.615625][ T9729] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615' [ 1149.652010][ T9740] FAULT_INJECTION: forcing a failure. [ 1149.652010][ T9740] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.664774][ T9740] CPU: 1 UID: 0 PID: 9740 Comm: syz.9.23163 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1149.664809][ T9740] Tainted: [W]=WARN [ 1149.664818][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1149.664834][ T9740] Call Trace: [ 1149.664842][ T9740] [ 1149.664851][ T9740] __dump_stack+0x1d/0x30 [ 1149.664919][ T9740] dump_stack_lvl+0x95/0xd0 [ 1149.665006][ T9740] dump_stack+0x15/0x1b [ 1149.665028][ T9740] should_fail_ex+0x263/0x280 [ 1149.665060][ T9740] should_failslab+0x8c/0xb0 [ 1149.665156][ T9740] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 1149.665184][ T9740] ? __alloc_skb+0x2f0/0x4b0 [ 1149.665217][ T9740] __alloc_skb+0x2f0/0x4b0 [ 1149.665321][ T9740] ? __alloc_skb+0x219/0x4b0 [ 1149.665415][ T9740] netlink_alloc_large_skb+0xbf/0xf0 [ 1149.665448][ T9740] netlink_sendmsg+0x40c/0x6f0 [ 1149.665472][ T9740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1149.665494][ T9740] ____sys_sendmsg+0x5af/0x600 [ 1149.665557][ T9740] ___sys_sendmsg+0x195/0x1e0 [ 1149.665661][ T9740] __x64_sys_sendmsg+0xd4/0x160 [ 1149.665685][ T9740] x64_sys_call+0x17ba/0x3000 [ 1149.665719][ T9740] do_syscall_64+0xc0/0x2a0 [ 1149.665751][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.665785][ T9740] RIP: 0033:0x7f623d82aeb9 [ 1149.665803][ T9740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.665821][ T9740] RSP: 002b:00007f623c287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.665844][ T9740] RAX: ffffffffffffffda RBX: 00007f623daa5fa0 RCX: 00007f623d82aeb9 [ 1149.665860][ T9740] RDX: 0000000020048040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1149.665875][ T9740] RBP: 00007f623c287090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.665952][ T9740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.665966][ T9740] R13: 00007f623daa6038 R14: 00007f623daa5fa0 R15: 00007ffef83724d8 [ 1149.665987][ T9740] [ 1149.863156][ T9729] EXT4-fs: Ignoring removed oldalloc option [ 1150.026441][ T9768] FAULT_INJECTION: forcing a failure. [ 1150.026441][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.039401][ T9768] CPU: 1 UID: 0 PID: 9768 Comm: syz.7.23169 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1150.039490][ T9768] Tainted: [W]=WARN [ 1150.039498][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1150.039509][ T9768] Call Trace: [ 1150.039516][ T9768] [ 1150.039524][ T9768] __dump_stack+0x1d/0x30 [ 1150.039628][ T9768] dump_stack_lvl+0x95/0xd0 [ 1150.039650][ T9768] dump_stack+0x15/0x1b [ 1150.039696][ T9768] should_fail_ex+0x263/0x280 [ 1150.039721][ T9768] should_failslab+0x8c/0xb0 [ 1150.039741][ T9768] __kmalloc_cache_noprof+0x64/0x4a0 [ 1150.039773][ T9768] ? __se_sys_mount+0xef/0x2e0 [ 1150.039790][ T9768] ? memdup_user+0x99/0xd0 [ 1150.039809][ T9768] __se_sys_mount+0xef/0x2e0 [ 1150.039825][ T9768] ? fput+0x8f/0xc0 [ 1150.039902][ T9768] ? ksys_write+0x194/0x1a0 [ 1150.039921][ T9768] __x64_sys_mount+0x67/0x80 [ 1150.039960][ T9768] x64_sys_call+0x2cca/0x3000 [ 1150.039981][ T9768] do_syscall_64+0xc0/0x2a0 [ 1150.040007][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.040027][ T9768] RIP: 0033:0x7fc6b05baeb9 [ 1150.040041][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.040109][ T9768] RSP: 002b:00007fc6af017028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1150.040126][ T9768] RAX: ffffffffffffffda RBX: 00007fc6b0835fa0 RCX: 00007fc6b05baeb9 [ 1150.040157][ T9768] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 1150.040185][ T9768] RBP: 00007fc6af017090 R08: 0000200000000280 R09: 0000000000000000 [ 1150.040197][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.040208][ T9768] R13: 00007fc6b0836038 R14: 00007fc6b0835fa0 R15: 00007fff039efd38 [ 1150.040255][ T9768] [ 1150.273404][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23172'. [ 1150.282584][ T9778] netlink: 312 bytes leftover after parsing attributes in process `syz.7.23172'. [ 1150.453906][ T9803] EXT4-fs: Ignoring removed oldalloc option [ 1150.495733][ T9807] bond3 (unregistering): Released all slaves [ 1150.531712][ T9863] program syz.9.23180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1150.553660][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23181'. [ 1150.563450][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23181'. [ 1150.711595][ T9889] net_ratelimit: 12 callbacks suppressed [ 1150.711607][ T9889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1150.786439][ T9902] syzkaller0: entered promiscuous mode [ 1150.792080][ T9902] syzkaller0: entered allmulticast mode [ 1150.930541][ T9923] netlink: 'syz.3.23191': attribute type 19 has an invalid length. [ 1150.938690][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23191'. [ 1151.043378][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23195'. [ 1151.068645][ T9925] set_capacity_and_notify: 5 callbacks suppressed [ 1151.068659][ T9925] loop8: detected capacity change from 0 to 2048 [ 1151.078340][ T9948] Unsupported ieee802154 address type: 0 [ 1151.109982][ T9888] random: crng reseeded on system resumption [ 1151.183567][ T9962] siw: device registration error -23 [ 1151.217169][ T9962] loop7: detected capacity change from 0 to 1024 [ 1151.252735][ T9973] syzkaller0: entered promiscuous mode [ 1151.258237][ T9973] syzkaller0: entered allmulticast mode [ 1151.296609][ T9975] netlink: 'syz.8.23199': attribute type 2 has an invalid length. [ 1151.304639][ T9975] netlink: 'syz.8.23199': attribute type 1 has an invalid length. [ 1151.412990][T10001] bond1 (unregistering): Released all slaves [ 1151.445528][T10070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1151.472513][T10070] bond0: (slave syz_tun): Releasing backup interface [ 1151.482415][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.489589][T10070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.496981][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.504055][T10070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.518298][T10106] FAULT_INJECTION: forcing a failure. [ 1151.518298][T10106] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.531664][T10106] CPU: 0 UID: 0 PID: 10106 Comm: syz.9.23204 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1151.531694][T10106] Tainted: [W]=WARN [ 1151.531700][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1151.531711][T10106] Call Trace: [ 1151.531719][T10106] [ 1151.531799][T10106] __dump_stack+0x1d/0x30 [ 1151.531825][T10106] dump_stack_lvl+0x95/0xd0 [ 1151.531845][T10106] dump_stack+0x15/0x1b [ 1151.531943][T10106] should_fail_ex+0x263/0x280 [ 1151.531975][T10106] should_failslab+0x8c/0xb0 [ 1151.532001][T10106] __kmalloc_cache_noprof+0x64/0x4a0 [ 1151.532031][T10106] ? v9fs_init_fs_context+0x34/0x220 [ 1151.532063][T10106] v9fs_init_fs_context+0x34/0x220 [ 1151.532117][T10106] alloc_fs_context+0x4a3/0x590 [ 1151.532138][T10106] fs_context_for_mount+0x22/0x30 [ 1151.532157][T10106] do_new_mount+0xea/0x700 [ 1151.532175][T10106] ? security_capable+0x7b/0x90 [ 1151.532238][T10106] path_mount+0x4d0/0xbc0 [ 1151.532295][T10106] ? user_path_at+0xbf/0x130 [ 1151.532420][T10106] __se_sys_mount+0x28c/0x2e0 [ 1151.532466][T10106] ? fput+0x8f/0xc0 [ 1151.532496][T10106] __x64_sys_mount+0x67/0x80 [ 1151.532520][T10106] x64_sys_call+0x2cca/0x3000 [ 1151.532547][T10106] do_syscall_64+0xc0/0x2a0 [ 1151.532605][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.532629][T10106] RIP: 0033:0x7f623d82aeb9 [ 1151.532666][T10106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.532724][T10106] RSP: 002b:00007f623c266028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1151.532743][T10106] RAX: ffffffffffffffda RBX: 00007f623daa6090 RCX: 00007f623d82aeb9 [ 1151.532757][T10106] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 1151.532770][T10106] RBP: 00007f623c266090 R08: 0000200000000540 R09: 0000000000000000 [ 1151.532788][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.532800][T10106] R13: 00007f623daa6128 R14: 00007f623daa6090 R15: 00007ffef83724d8 [ 1151.532818][T10106] [ 1151.553227][T10070] bridge0: left allmulticast mode [ 1151.578435][T10110] loop8: detected capacity change from 0 to 512 [ 1151.768531][T10070] bond0: (slave team0): Releasing backup interface [ 1151.788977][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3792.tmp-b7:8' failed: Read-only file system [ 1151.804125][T10070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1151.819738][T27431] lo speed is unknown, defaulting to 1000 [ 1151.825543][T27431] syz2: Port: 1 Link ACTIVE [ 1151.834585][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3792.tmp-b7:8' failed: Read-only file system [ 1151.864362][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3792.tmp-b7:8' failed: Read-only file system [ 1151.881097][ T7888] udevd[7888]: symlink '../../loop6' '/dev/disk/by-diskseq/3750.tmp-b7:6' failed: Read-only file system [ 1151.898096][T25006] udevd[25006]: symlink '../../loop3' '/dev/disk/by-diskseq/3787.tmp-b7:3' failed: Read-only file system [ 1151.918686][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3792.tmp-b7:8' failed: Read-only file system [ 1151.948360][T10144] netlink: 'syz.8.23212': attribute type 4 has an invalid length. [ 1151.963468][T10142] batman_adv: batadv0: Adding interface: dummy0 [ 1151.965055][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3793.tmp-b7:8' failed: Read-only file system [ 1151.969945][T10142] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.981795][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.7.23205'. [ 1152.016723][T10142] batman_adv: batadv0: Interface activated: dummy0 [ 1152.042188][T25003] udevd[25003]: symlink '../../loop3' '/dev/disk/by-diskseq/3787.tmp-b7:3' failed: Read-only file system [ 1152.082804][T10146] netlink: 'syz.6.23211': attribute type 4 has an invalid length. [ 1152.106257][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3793.tmp-b7:8' failed: Read-only file system [ 1152.124848][ T7888] udevd[7888]: symlink '../../loop7' '/dev/disk/by-diskseq/3791.tmp-b7:7' failed: Read-only file system [ 1152.195375][T10168] FAULT_INJECTION: forcing a failure. [ 1152.195375][T10168] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.208131][T10168] CPU: 1 UID: 0 PID: 10168 Comm: syz.6.23218 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1152.208183][T10168] Tainted: [W]=WARN [ 1152.208189][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1152.208203][T10168] Call Trace: [ 1152.208210][T10168] [ 1152.208277][T10168] __dump_stack+0x1d/0x30 [ 1152.208349][T10168] dump_stack_lvl+0x95/0xd0 [ 1152.208368][T10168] dump_stack+0x15/0x1b [ 1152.208385][T10168] should_fail_ex+0x263/0x280 [ 1152.208412][T10168] should_failslab+0x8c/0xb0 [ 1152.208471][T10168] __kmalloc_cache_noprof+0x64/0x4a0 [ 1152.208493][T10168] ? audit_log_d_path+0x8d/0x150 [ 1152.208596][T10168] audit_log_d_path+0x8d/0x150 [ 1152.208688][T10168] audit_log_d_path_exe+0x42/0x70 [ 1152.208713][T10168] audit_log_task+0x1e8/0x250 [ 1152.208735][T10168] ? kstrtouint+0x76/0xc0 [ 1152.208758][T10168] audit_seccomp+0x60/0x100 [ 1152.208792][T10168] ? __seccomp_filter+0x8db/0x1350 [ 1152.208810][T10168] __seccomp_filter+0x8ec/0x1350 [ 1152.208829][T10168] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1152.208883][T10168] ? vfs_write+0x86e/0x9f0 [ 1152.208957][T10168] __secure_computing+0x81/0x150 [ 1152.209034][T10168] syscall_trace_enter+0xce/0x1e0 [ 1152.209062][T10168] do_syscall_64+0x9a/0x2a0 [ 1152.209087][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.209145][T10168] RIP: 0033:0x7fd1bac3aeb9 [ 1152.209164][T10168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.209195][T10168] RSP: 002b:00007fd1b9697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1152.209277][T10168] RAX: ffffffffffffffda RBX: 00007fd1baeb5fa0 RCX: 00007fd1bac3aeb9 [ 1152.209292][T10168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1152.209332][T10168] RBP: 00007fd1b9697090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.209348][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.209362][T10168] R13: 00007fd1baeb6038 R14: 00007fd1baeb5fa0 R15: 00007ffe9f2e6908 [ 1152.209382][T10168] [ 1152.490665][T10179] bond3 (unregistering): Released all slaves [ 1152.534226][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23222'. [ 1152.543369][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23222'. [ 1152.587928][T10229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.608306][T10229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1152.675455][T10256] netlink: 'syz.6.23225': attribute type 4 has an invalid length. [ 1152.731212][T10262] bond1 (unregistering): Released all slaves [ 1152.761997][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23226'. [ 1152.859062][T10314] FAULT_INJECTION: forcing a failure. [ 1152.859062][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.872285][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.6.23230 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1152.872316][T10314] Tainted: [W]=WARN [ 1152.872323][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1152.872334][T10314] Call Trace: [ 1152.872342][T10314] [ 1152.872349][T10314] __dump_stack+0x1d/0x30 [ 1152.872399][T10314] dump_stack_lvl+0x95/0xd0 [ 1152.872420][T10314] dump_stack+0x15/0x1b [ 1152.872442][T10314] should_fail_ex+0x263/0x280 [ 1152.872521][T10314] should_fail+0xb/0x20 [ 1152.872546][T10314] should_fail_usercopy+0x1a/0x20 [ 1152.872574][T10314] _copy_to_user+0x20/0xa0 [ 1152.872650][T10314] simple_read_from_buffer+0xb5/0x130 [ 1152.872759][T10314] proc_fail_nth_read+0x10e/0x150 [ 1152.872788][T10314] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1152.872829][T10314] vfs_read+0x1ab/0x7f0 [ 1152.872850][T10314] ? __rcu_read_unlock+0x4e/0x70 [ 1152.872954][T10314] ? __fget_files+0x184/0x1c0 [ 1152.872979][T10314] ? mutex_lock+0x57/0x90 [ 1152.873005][T10314] ksys_read+0xdc/0x1a0 [ 1152.873025][T10314] __x64_sys_read+0x40/0x50 [ 1152.873057][T10314] x64_sys_call+0x2889/0x3000 [ 1152.873080][T10314] do_syscall_64+0xc0/0x2a0 [ 1152.873175][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.873196][T10314] RIP: 0033:0x7fd1babfb78e [ 1152.873212][T10314] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1152.873228][T10314] RSP: 002b:00007fd1b9696fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1152.873247][T10314] RAX: ffffffffffffffda RBX: 00007fd1b96976c0 RCX: 00007fd1babfb78e [ 1152.873270][T10314] RDX: 000000000000000f RSI: 00007fd1b96970a0 RDI: 0000000000000004 [ 1152.873282][T10314] RBP: 00007fd1b9697090 R08: 0000000000000000 R09: 0000000000000000 [ 1152.873295][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.873386][T10314] R13: 00007fd1baeb6038 R14: 00007fd1baeb5fa0 R15: 00007ffe9f2e6908 [ 1152.873404][T10314] [ 1153.002103][T10303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.105087][T10303] batman_adv: batadv0: Interface deactivated: dummy0 [ 1153.112569][T10303] batman_adv: batadv0: Removing interface: dummy0 [ 1153.121657][T10303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1153.236249][T10365] siw: device registration error -23 [ 1153.248204][T10353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10353 comm=syz.6.23231 [ 1153.271282][T10363] FAULT_INJECTION: forcing a failure. [ 1153.271282][T10363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1153.284715][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.3.23232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1153.284796][T10363] Tainted: [W]=WARN [ 1153.284802][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1153.284813][T10363] Call Trace: [ 1153.284820][T10363] [ 1153.284876][T10363] __dump_stack+0x1d/0x30 [ 1153.284904][T10363] dump_stack_lvl+0x95/0xd0 [ 1153.284927][T10363] dump_stack+0x15/0x1b [ 1153.284946][T10363] should_fail_ex+0x263/0x280 [ 1153.285157][T10363] should_fail_alloc_page+0xf2/0x100 [ 1153.285185][T10363] __alloc_frozen_pages_noprof+0x108/0x350 [ 1153.285221][T10363] alloc_pages_mpol+0xb3/0x260 [ 1153.285295][T10363] alloc_pages_noprof+0x8f/0x130 [ 1153.285346][T10363] pte_alloc_one+0x1e/0xd0 [ 1153.285409][T10363] __do_fault+0x7b/0x200 [ 1153.285431][T10363] handle_mm_fault+0xfa1/0x3030 [ 1153.285522][T10363] ? __rcu_read_unlock+0x4e/0x70 [ 1153.285558][T10363] ? check_vma_flags+0x26d/0x330 [ 1153.285582][T10363] __get_user_pages+0x1023/0x1ea0 [ 1153.285764][T10363] __gup_longterm_locked+0x8d7/0xe30 [ 1153.285785][T10363] ? perf_trace_mmap_lock_acquire_returned+0x225/0x270 [ 1153.285884][T10363] pin_user_pages_remote+0x7e/0xb0 [ 1153.285904][T10363] process_vm_rw+0x49b/0x9c0 [ 1153.285989][T10363] __x64_sys_process_vm_writev+0x78/0x90 [ 1153.286016][T10363] x64_sys_call+0x27ef/0x3000 [ 1153.286041][T10363] do_syscall_64+0xc0/0x2a0 [ 1153.286105][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.286124][T10363] RIP: 0033:0x7f97fe10aeb9 [ 1153.286139][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.286155][T10363] RSP: 002b:00007f97fcb5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1153.286177][T10363] RAX: ffffffffffffffda RBX: 00007f97fe385fa0 RCX: 00007f97fe10aeb9 [ 1153.286191][T10363] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000035d [ 1153.286204][T10363] RBP: 00007f97fcb5f090 R08: 000000000000023a R09: 0000000000000000 [ 1153.286221][T10363] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.286237][T10363] R13: 00007f97fe386038 R14: 00007f97fe385fa0 R15: 00007ffd83807498 [ 1153.286259][T10363] [ 1153.328829][T10372] loop9: detected capacity change from 0 to 1024 [ 1153.361960][T10372] EXT4-fs: Ignoring removed mblk_io_submit option [ 1153.414230][T10372] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.455028][T10392] loop6: detected capacity change from 0 to 512 [ 1153.490570][T10372] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.647006][T10392] EXT4-fs (loop6): filesystem is read-only [ 1153.696118][T10392] EXT4-fs (loop6): filesystem is read-only [ 1153.702072][T10392] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1153.719647][T10392] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.23236: bad orphan inode 16 [ 1153.761081][T10392] ext4_test_bit(bit=15, block=3) = 0 [ 1153.780762][T10392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1153.815436][ T7510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1154.002941][ T7232] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.071661][T10482] loop9: detected capacity change from 0 to 128 [ 1154.078224][T10478] loop8: detected capacity change from 0 to 1024 [ 1154.180143][T10506] netlink: 'syz.6.23251': attribute type 12 has an invalid length. [ 1154.194832][T10514] netlink: 'syz.9.23250': attribute type 4 has an invalid length. [ 1154.272267][T10516] loop8: detected capacity change from 0 to 1024 [ 1154.312394][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 1154.312408][ T29] audit: type=1326 audit(1770382632.852:30359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.350908][ T29] audit: type=1326 audit(1770382632.892:30360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.375263][ T29] audit: type=1326 audit(1770382632.892:30361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.399009][ T29] audit: type=1326 audit(1770382632.892:30362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.422717][ T29] audit: type=1326 audit(1770382632.892:30363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.447396][ T29] audit: type=1326 audit(1770382632.892:30364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.471867][ T29] audit: type=1326 audit(1770382632.892:30365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.495713][ T29] audit: type=1326 audit(1770382632.892:30366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.520062][ T29] audit: type=1326 audit(1770382632.892:30367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.543935][ T29] audit: type=1326 audit(1770382632.892:30368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.8.23256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f477df9aeb9 code=0x7ffc0000 [ 1154.720189][T10607] loop8: detected capacity change from 0 to 1024 [ 1154.736342][T10607] EXT4-fs: Ignoring removed orlov option [ 1154.743070][T10610] FAULT_INJECTION: forcing a failure. [ 1154.743070][T10610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.756225][T10610] CPU: 1 UID: 0 PID: 10610 Comm: syz.7.23265 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1154.756307][T10610] Tainted: [W]=WARN [ 1154.756376][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1154.756388][T10610] Call Trace: [ 1154.756395][T10610] [ 1154.756404][T10610] __dump_stack+0x1d/0x30 [ 1154.756428][T10610] dump_stack_lvl+0x95/0xd0 [ 1154.756449][T10610] dump_stack+0x15/0x1b [ 1154.756531][T10610] should_fail_ex+0x263/0x280 [ 1154.756560][T10610] should_fail+0xb/0x20 [ 1154.756584][T10610] should_fail_usercopy+0x1a/0x20 [ 1154.756672][T10610] _copy_to_user+0x20/0xa0 [ 1154.756732][T10610] simple_read_from_buffer+0xb5/0x130 [ 1154.756803][T10610] proc_fail_nth_read+0x10e/0x150 [ 1154.756831][T10610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.756857][T10610] vfs_read+0x1ab/0x7f0 [ 1154.756874][T10610] ? __rcu_read_unlock+0x4e/0x70 [ 1154.756952][T10610] ? __fget_files+0x184/0x1c0 [ 1154.756975][T10610] ? mutex_lock+0x57/0x90 [ 1154.757094][T10610] ksys_read+0xdc/0x1a0 [ 1154.757116][T10610] __x64_sys_read+0x40/0x50 [ 1154.757148][T10610] x64_sys_call+0x2889/0x3000 [ 1154.757245][T10610] do_syscall_64+0xc0/0x2a0 [ 1154.757275][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.757305][T10610] RIP: 0033:0x7fc6b057b78e [ 1154.757394][T10610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1154.757413][T10610] RSP: 002b:00007fc6af016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1154.757436][T10610] RAX: ffffffffffffffda RBX: 00007fc6af0176c0 RCX: 00007fc6b057b78e [ 1154.757452][T10610] RDX: 000000000000000f RSI: 00007fc6af0170a0 RDI: 0000000000000004 [ 1154.757468][T10610] RBP: 00007fc6af017090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.757483][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.757567][T10610] R13: 00007fc6b0836038 R14: 00007fc6b0835fa0 R15: 00007fff039efd38 [ 1154.757587][T10610] [ 1154.976857][T10607] netlink: 'syz.8.23263': attribute type 39 has an invalid length. [ 1154.989773][T10607] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 1155.040956][T10627] FAULT_INJECTION: forcing a failure. [ 1155.040956][T10627] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.053735][T10627] CPU: 1 UID: 0 PID: 10627 Comm: syz.3.23270 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1155.053766][T10627] Tainted: [W]=WARN [ 1155.053773][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1155.053820][T10627] Call Trace: [ 1155.053826][T10627] [ 1155.053841][T10627] __dump_stack+0x1d/0x30 [ 1155.053869][T10627] dump_stack_lvl+0x95/0xd0 [ 1155.053894][T10627] dump_stack+0x15/0x1b [ 1155.053944][T10627] should_fail_ex+0x263/0x280 [ 1155.053978][T10627] should_failslab+0x8c/0xb0 [ 1155.054019][T10627] __kmalloc_cache_noprof+0x64/0x4a0 [ 1155.054042][T10627] ? init_srcu_struct_fields+0x57/0x600 [ 1155.054075][T10627] ? hci_alloc_dev_priv+0x24/0xe70 [ 1155.054208][T10627] init_srcu_struct_fields+0x57/0x600 [ 1155.054238][T10627] ? __slab_alloc+0x25/0x50 [ 1155.054268][T10627] ? __kmalloc_noprof+0x2a3/0x580 [ 1155.054293][T10627] ? hci_alloc_dev_priv+0x24/0xe70 [ 1155.054332][T10627] init_srcu_struct+0x23/0x30 [ 1155.054363][T10627] hci_alloc_dev_priv+0x35/0xe70 [ 1155.054417][T10627] hci_uart_tty_ioctl+0x28b/0x5c0 [ 1155.054455][T10627] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 1155.054547][T10627] tty_ioctl+0x83e/0xb80 [ 1155.054571][T10627] ? __pfx_tty_ioctl+0x10/0x10 [ 1155.054595][T10627] __se_sys_ioctl+0xce/0x140 [ 1155.054653][T10627] __x64_sys_ioctl+0x43/0x50 [ 1155.054683][T10627] x64_sys_call+0x14b0/0x3000 [ 1155.054708][T10627] do_syscall_64+0xc0/0x2a0 [ 1155.054766][T10627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.054788][T10627] RIP: 0033:0x7f97fe10aeb9 [ 1155.054805][T10627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.054853][T10627] RSP: 002b:00007f97fcb5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.054909][T10627] RAX: ffffffffffffffda RBX: 00007f97fe385fa0 RCX: 00007f97fe10aeb9 [ 1155.054923][T10627] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 1155.054937][T10627] RBP: 00007f97fcb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.054951][T10627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.054964][T10627] R13: 00007f97fe386038 R14: 00007f97fe385fa0 R15: 00007ffd83807498 [ 1155.054983][T10627] [ 1155.054991][T10627] Bluetooth: Can't allocate HCI device [ 1155.078485][T10632] loop7: detected capacity change from 0 to 512 [ 1155.123669][T10634] EXT4-fs: dax option not supported [ 1155.191469][T10632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1155.307090][ T5216] Bluetooth: hci0: Frame reassembly failed (-84) [ 1155.332824][T10646] SELinux: failed to load policy [ 1155.340050][T10632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.355195][T10632] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.467809][ T2937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.549406][T10671] __nla_validate_parse: 5 callbacks suppressed [ 1155.549423][T10671] netlink: 20 bytes leftover after parsing attributes in process `syz.9.23277'. [ 1155.569845][T10668] EXT4-fs: Ignoring removed nobh option [ 1155.575992][T10668] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1155.603678][T10668] EXT4-fs (loop7): 1 truncate cleaned up [ 1155.622113][T10668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.649369][T10683] EXT4-fs: Ignoring removed orlov option [ 1155.683007][T10683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1155.721097][ T2937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.734641][T10683] netlink: 'syz.3.23280': attribute type 39 has an invalid length. [ 1155.769790][T10707] netlink: 132 bytes leftover after parsing attributes in process `syz.7.23283'. [ 1155.779027][T10683] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20012 [ 1155.827091][T10707] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1155.836979][T10707] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1155.858850][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.873120][T10718] bond2 (unregistering): Released all slaves [ 1155.887256][T10707] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1155.894479][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23286'. [ 1155.906350][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23286'. [ 1155.915580][T10707] EXT4-fs error (device loop7): ext4_get_journal_inode:5849: inode #5: comm syz.7.23283: unexpected bad inode w/o EXT4_IGET_BAD [ 1155.936209][T10707] EXT4-fs (loop7): no journal found [ 1155.942247][T10707] EXT4-fs (loop7): can't get journal size [ 1155.950323][T10707] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1155.974123][T10807] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 1155.993483][T10707] EXT4-fs error (device loop7): __ext4_iget:5426: inode #15: block 1803188595: comm syz.7.23283: invalid block [ 1156.013611][T10803] bridge0: left allmulticast mode [ 1156.021147][T10803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.021550][T10801] IPVS: stopping master sync thread 10807 ... [ 1156.034791][T10803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1156.118309][ T2937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.234263][T10834] FAULT_INJECTION: forcing a failure. [ 1156.234263][T10834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.247486][T10834] CPU: 1 UID: 0 PID: 10834 Comm: syz.9.23293 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1156.247590][T10834] Tainted: [W]=WARN [ 1156.247596][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1156.247607][T10834] Call Trace: [ 1156.247616][T10834] [ 1156.247625][T10834] __dump_stack+0x1d/0x30 [ 1156.247653][T10834] dump_stack_lvl+0x95/0xd0 [ 1156.247680][T10834] dump_stack+0x15/0x1b [ 1156.247700][T10834] should_fail_ex+0x263/0x280 [ 1156.247763][T10834] should_fail+0xb/0x20 [ 1156.247789][T10834] should_fail_usercopy+0x1a/0x20 [ 1156.247887][T10834] _copy_from_user+0x1c/0xb0 [ 1156.247906][T10834] ___sys_sendmsg+0xc1/0x1e0 [ 1156.247935][T10834] __x64_sys_sendmsg+0xd4/0x160 [ 1156.247957][T10834] x64_sys_call+0x17ba/0x3000 [ 1156.248013][T10834] do_syscall_64+0xc0/0x2a0 [ 1156.248116][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.248139][T10834] RIP: 0033:0x7f623d82aeb9 [ 1156.248156][T10834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.248230][T10834] RSP: 002b:00007f623c287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.248321][T10834] RAX: ffffffffffffffda RBX: 00007f623daa5fa0 RCX: 00007f623d82aeb9 [ 1156.248337][T10834] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1156.248370][T10834] RBP: 00007f623c287090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.248382][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.248395][T10834] R13: 00007f623daa6038 R14: 00007f623daa5fa0 R15: 00007ffef83724d8 [ 1156.248417][T10834] [ 1156.514270][T10854] set_capacity_and_notify: 4 callbacks suppressed [ 1156.514288][T10854] loop7: detected capacity change from 0 to 512 [ 1156.542028][T10854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1156.559050][T10862] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1156.566234][T10864] validate_nla: 2 callbacks suppressed [ 1156.566249][T10864] netlink: 'syz.3.23301': attribute type 29 has an invalid length. [ 1156.580364][T10864] netlink: 'syz.3.23301': attribute type 3 has an invalid length. [ 1156.588182][T10864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23301'. [ 1156.602758][T10854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.620095][T10854] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.633399][T10871] loop8: detected capacity change from 0 to 128 [ 1156.651442][T10864] loop3: detected capacity change from 0 to 1024 [ 1156.658751][T10873] loop9: detected capacity change from 0 to 128 [ 1156.658974][T10864] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1156.675048][T10864] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1156.685032][T10864] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1156.698578][T10864] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #5: comm syz.3.23301: unexpected bad inode w/o EXT4_IGET_BAD [ 1156.722570][T10873] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1156.739732][T10864] EXT4-fs (loop3): no journal found [ 1156.744981][T10864] EXT4-fs (loop3): can't get journal size [ 1156.760425][T10888] loop8: detected capacity change from 0 to 512 [ 1156.769795][T10864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1156.786916][T10873] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1156.808027][ T7888] udevd[7888]: symlink '../../loop8' '/dev/disk/by-diskseq/3821.tmp-b7:8' failed: Read-only file system [ 1156.823197][T10888] loop8: detected capacity change from 0 to 4096 [ 1156.824947][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.23303'. [ 1156.830234][T10888] EXT4-fs: Ignoring removed bh option [ 1156.844045][T10888] EXT4-fs: Ignoring removed mblk_io_submit option [ 1156.857323][T25003] udevd[25003]: symlink '../../loop9' '/dev/disk/by-diskseq/3820.tmp-b7:9' failed: Read-only file system [ 1156.864202][ T7888] udevd[7888]: symlink '../../loop8' '/dev/disk/by-diskseq/3821.tmp-b7:8' failed: Read-only file system [ 1156.879063][T10873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10873 comm=syz.9.23303 [ 1156.887063][T10864] EXT4-fs error (device loop3): __ext4_iget:5426: inode #15: block 1803188595: comm syz.3.23301: invalid block [ 1156.896271][ T7888] udevd[7888]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1156.914516][ T2937] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.931432][T10899] netlink: 128 bytes leftover after parsing attributes in process `syz.8.23305'. [ 1156.941166][T10873] netlink: 'syz.9.23303': attribute type 4 has an invalid length. [ 1156.945078][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3822.tmp-b7:8' failed: Read-only file system [ 1156.971217][ T7888] udevd[7888]: symlink '../../loop7' '/dev/disk/by-diskseq/3816.tmp-b7:7' failed: Read-only file system [ 1156.984654][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3822.tmp-b7:8' failed: Read-only file system [ 1157.000656][ T7888] udevd[7888]: symlink '../../loop7' '/dev/disk/by-diskseq/3816.tmp-b7:7' failed: Read-only file system [ 1157.016150][T25006] udevd[25006]: symlink '../../loop9' '/dev/disk/by-diskseq/3820.tmp-b7:9' failed: Read-only file system [ 1157.018349][T10906] FAULT_INJECTION: forcing a failure. [ 1157.018349][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.035592][T25003] udevd[25003]: symlink '../../loop8' '/dev/disk/by-diskseq/3823.tmp-b7:8' failed: Read-only file system [ 1157.040272][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.7.23306 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1157.040305][T10906] Tainted: [W]=WARN [ 1157.040312][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1157.040325][T10906] Call Trace: [ 1157.040367][T10906] [ 1157.040376][T10906] __dump_stack+0x1d/0x30 [ 1157.040409][T10906] dump_stack_lvl+0x95/0xd0 [ 1157.040522][T10906] dump_stack+0x15/0x1b [ 1157.040543][T10906] should_fail_ex+0x263/0x280 [ 1157.040575][T10906] should_failslab+0x8c/0xb0 [ 1157.040600][T10906] kmem_cache_alloc_noprof+0x68/0x490 [ 1157.040641][T10906] ? alloc_empty_file+0x76/0x200 [ 1157.040671][T10906] alloc_empty_file+0x76/0x200 [ 1157.040698][T10906] path_openat+0x62/0x23c0 [ 1157.040732][T10906] ? __rcu_read_unlock+0x4e/0x70 [ 1157.040815][T10906] ? __perf_event_task_sched_in+0xa65/0xad0 [ 1157.040844][T10906] ? __perf_event_task_sched_out+0x192/0x710 [ 1157.040872][T10906] ? _raw_spin_unlock+0x9/0x30 [ 1157.040948][T10906] ? finish_task_switch+0x79/0x280 [ 1157.040977][T10906] do_filp_open+0x15d/0x280 [ 1157.041049][T10906] do_sys_openat2+0xa6/0x150 [ 1157.041080][T10906] __x64_sys_creat+0x65/0x90 [ 1157.041182][T10906] x64_sys_call+0x2f1c/0x3000 [ 1157.041208][T10906] do_syscall_64+0xc0/0x2a0 [ 1157.041239][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.041338][T10906] RIP: 0033:0x7fc6b05baeb9 [ 1157.041357][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.041380][T10906] RSP: 002b:00007fc6af017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1157.041402][T10906] RAX: ffffffffffffffda RBX: 00007fc6b0835fa0 RCX: 00007fc6b05baeb9 [ 1157.041424][T10906] RDX: 0000000000000000 RSI: 0000000000000109 RDI: 0000200000000200 [ 1157.041439][T10906] RBP: 00007fc6af017090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.041453][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.041476][T10906] R13: 00007fc6b0836038 R14: 00007fc6b0835fa0 R15: 00007fff039efd38 [ 1157.041497][T10906] [ 1157.259232][T17937] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1157.275330][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.295426][T10918] FAULT_INJECTION: forcing a failure. [ 1157.295426][T10918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1157.309490][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.3.23308 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1157.309522][T10918] Tainted: [W]=WARN [ 1157.309529][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1157.309543][T10918] Call Trace: [ 1157.309551][T10918] [ 1157.309562][T10918] __dump_stack+0x1d/0x30 [ 1157.309588][T10918] dump_stack_lvl+0x95/0xd0 [ 1157.309679][T10918] dump_stack+0x15/0x1b [ 1157.309698][T10918] should_fail_ex+0x263/0x280 [ 1157.309726][T10918] should_fail_alloc_page+0xf2/0x100 [ 1157.309825][T10918] __alloc_frozen_pages_noprof+0x108/0x350 [ 1157.309856][T10918] alloc_pages_mpol+0xb3/0x260 [ 1157.309885][T10918] vma_alloc_folio_noprof+0x1a9/0x300 [ 1157.309916][T10918] do_wp_page+0xf6d/0x2560 [ 1157.310020][T10918] ? __rcu_read_lock+0x36/0x50 [ 1157.310051][T10918] handle_mm_fault+0x8c7/0x3030 [ 1157.310130][T10918] ? mt_find+0x291/0x3b0 [ 1157.310235][T10918] do_user_addr_fault+0x3fd/0x1050 [ 1157.310265][T10918] exc_page_fault+0x62/0xa0 [ 1157.310288][T10918] asm_exc_page_fault+0x26/0x30 [ 1157.310405][T10918] RIP: 0010:__put_user_4+0xd/0x20 [ 1157.310443][T10918] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1157.310462][T10918] RSP: 0018:ffffc90002b73d70 EFLAGS: 00050202 [ 1157.310480][T10918] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8 [ 1157.310575][T10918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1157.310587][T10918] RBP: 000000000004001c R08: 0001c90002b73bf7 R09: 0000000000000000 [ 1157.310600][T10918] R10: 00000000ffffff97 R11: 0000000000000000 R12: 0000000000000000 [ 1157.310611][T10918] R13: 0000200000007fc0 R14: 0000200000007fc0 R15: 00000000000003ff [ 1157.310630][T10918] __sys_sendmmsg+0x1a8/0x320 [ 1157.310696][T10918] __x64_sys_sendmmsg+0x57/0x70 [ 1157.310717][T10918] x64_sys_call+0x1e28/0x3000 [ 1157.310819][T10918] do_syscall_64+0xc0/0x2a0 [ 1157.310869][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.310889][T10918] RIP: 0033:0x7f97fe10aeb9 [ 1157.310904][T10918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.310984][T10918] RSP: 002b:00007f97fcb5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1157.311002][T10918] RAX: ffffffffffffffda RBX: 00007f97fe385fa0 RCX: 00007f97fe10aeb9 [ 1157.311067][T10918] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 1157.311081][T10918] RBP: 00007f97fcb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.311105][T10918] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 1157.311119][T10918] R13: 00007f97fe386038 R14: 00007f97fe385fa0 R15: 00007ffd83807498 [ 1157.311139][T10918] [ 1157.315560][T10921] loop9: detected capacity change from 0 to 512 [ 1157.597760][T10921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1157.638113][ T5216] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.673487][T10934] loop3: detected capacity change from 0 to 512 [ 1157.692744][T10921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.714820][ T5216] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.725587][T10921] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.729465][T10934] EXT4-fs: Ignoring removed nobh option [ 1157.771198][T10943] netlink: 'syz.7.23316': attribute type 16 has an invalid length. [ 1157.779170][T10943] netlink: 'syz.7.23316': attribute type 17 has an invalid length. [ 1157.781217][T10934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1157.823181][T10952] netlink: 28 bytes leftover after parsing attributes in process `syz.8.23317'. [ 1157.833484][T10934] EXT4-fs (loop3): 1 truncate cleaned up [ 1157.839623][T10943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1157.842782][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz.7.23316'. [ 1157.855665][T10934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1157.903286][ T5216] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.917264][T10962] netlink: 'syz.8.23318': attribute type 29 has an invalid length. [ 1157.925275][T10962] netlink: 'syz.8.23318': attribute type 3 has an invalid length. [ 1157.933218][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.8.23318'. [ 1157.948310][T10962] loop8: detected capacity change from 0 to 1024 [ 1157.963151][T10956] bond3: option primary_reselect: invalid value (5) [ 1157.967927][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.991181][T10956] bond3 (unregistering): Released all slaves [ 1158.010003][T10962] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1158.019808][T10962] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1158.037487][T10962] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1158.039777][ T7510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.056891][T10962] EXT4-fs error (device loop8): ext4_get_journal_inode:5849: inode #5: comm syz.8.23318: unexpected bad inode w/o EXT4_IGET_BAD [ 1158.058026][ T5216] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.071047][T10962] EXT4-fs (loop8): no journal found [ 1158.086361][T10962] EXT4-fs (loop8): can't get journal size [ 1158.094376][T10962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1158.147693][T10962] EXT4-fs error (device loop8): __ext4_iget:5426: inode #15: block 1803188595: comm syz.8.23318: invalid block [ 1158.211521][T11054] loop3: detected capacity change from 0 to 512 [ 1158.225901][ T1577] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.288018][T11054] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1158.295147][ T5216] bridge_slave_1: left allmulticast mode [ 1158.300861][ T5216] bridge_slave_1: left promiscuous mode [ 1158.306521][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.309201][T11054] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.23321: corrupted in-inode xattr: invalid size in ea xattr [ 1158.368320][T11054] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.23321: couldn't read orphan inode 15 (err -117) [ 1158.398933][T11054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1158.428577][ T5216] bridge_slave_0: left allmulticast mode [ 1158.435007][ T5216] bridge_slave_0: left promiscuous mode [ 1158.440747][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.501845][T29171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.578749][T11105] FAULT_INJECTION: forcing a failure. [ 1158.578749][T11105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.602940][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.9.23329 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1158.602973][T11105] Tainted: [W]=WARN [ 1158.602985][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1158.602996][T11105] Call Trace: [ 1158.603027][T11105] [ 1158.603037][T11105] __dump_stack+0x1d/0x30 [ 1158.603065][T11105] dump_stack_lvl+0x95/0xd0 [ 1158.603089][T11105] dump_stack+0x15/0x1b [ 1158.603173][T11105] should_fail_ex+0x263/0x280 [ 1158.603201][T11105] should_fail+0xb/0x20 [ 1158.603224][T11105] should_fail_usercopy+0x1a/0x20 [ 1158.603278][T11105] _copy_from_user+0x1c/0xb0 [ 1158.603344][T11105] ___sys_sendmsg+0xc1/0x1e0 [ 1158.603371][T11105] __x64_sys_sendmsg+0xd4/0x160 [ 1158.603396][T11105] x64_sys_call+0x17ba/0x3000 [ 1158.603422][T11105] do_syscall_64+0xc0/0x2a0 [ 1158.603476][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.603496][T11105] RIP: 0033:0x7f623d82aeb9 [ 1158.603513][T11105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.603531][T11105] RSP: 002b:00007f623c287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.603552][T11105] RAX: ffffffffffffffda RBX: 00007f623daa5fa0 RCX: 00007f623d82aeb9 [ 1158.603644][T11105] RDX: 0000000000000040 RSI: 0000200000000300 RDI: 0000000000000003 [ 1158.603657][T11105] RBP: 00007f623c287090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.603672][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.603684][T11105] R13: 00007f623daa6038 R14: 00007f623daa5fa0 R15: 00007ffef83724d8 [ 1158.603702][T11105] [ 1158.863633][T11046] ================================================================== [ 1158.871762][T11046] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 1158.879881][T11046] [ 1158.882204][T11046] write to 0xffff88811ab09828 of 8 bytes by task 11047 on cpu 0: [ 1158.890012][T11046] filemap_splice_read+0x523/0x780 [ 1158.895143][T11046] splice_direct_to_actor+0x26e/0x670 [ 1158.900527][T11046] do_splice_direct+0x119/0x1a0 [ 1158.905385][T11046] do_sendfile+0x382/0x650 [ 1158.909814][T11046] __x64_sys_sendfile64+0x105/0x150 [ 1158.915026][T11046] x64_sys_call+0x2db1/0x3000 [ 1158.919708][T11046] do_syscall_64+0xc0/0x2a0 [ 1158.924225][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.930123][T11046] [ 1158.932444][T11046] write to 0xffff88811ab09828 of 8 bytes by task 11046 on cpu 1: [ 1158.940153][T11046] filemap_splice_read+0x523/0x780 [ 1158.945353][T11046] splice_direct_to_actor+0x26e/0x670 [ 1158.950720][T11046] do_splice_direct+0x119/0x1a0 [ 1158.955568][T11046] do_sendfile+0x382/0x650 [ 1158.959983][T11046] __x64_sys_sendfile64+0x105/0x150 [ 1158.965187][T11046] x64_sys_call+0x2db1/0x3000 [ 1158.969860][T11046] do_syscall_64+0xc0/0x2a0 [ 1158.974369][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.980250][T11046] [ 1158.982565][T11046] value changed: 0x000000000156b000 -> 0x0000000001961000 [ 1158.989664][T11046] [ 1158.991976][T11046] Reported by Kernel Concurrency Sanitizer on: [ 1158.998124][T11046] CPU: 1 UID: 0 PID: 11046 Comm: syz.7.23322 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1159.009584][T11046] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1159.013382][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1159.023433][T11046] ================================================================== [ 1159.058005][ T5216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.079391][ T5216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.101991][ T5216] bond0 (unregistering): Released all slaves [ 1159.113591][ T5216] bond1 (unregistering): Released all slaves [ 1159.131303][T10944] lo speed is unknown, defaulting to 1000 [ 1159.372111][ T5216] hsr_slave_0: left promiscuous mode [ 1159.378223][ T5216] hsr_slave_1: left promiscuous mode [ 1159.384453][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.392038][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.408616][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.416091][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.424142][ T5216] batman_adv: batadv0: Interface deactivated: dummy0 [ 1159.431664][ T5216] batman_adv: batadv0: Removing interface: dummy0 [ 1159.444380][ T5216] veth1_macvtap: left promiscuous mode [ 1159.450004][ T5216] veth0_macvtap: left promiscuous mode [ 1159.455509][ T5216] veth1_vlan: left promiscuous mode [ 1159.460927][ T5216] veth0_vlan: left promiscuous mode [ 1159.552752][ T5216] team0 (unregistering): Port device team_slave_1 removed [ 1159.563102][ T5216] team0 (unregistering): Port device team_slave_0 removed [ 1159.895596][ T5216] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.981602][ T5216] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.032871][ T5216] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.081487][ T5216] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.173200][ T5216] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.212449][ T5216] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.254041][ T5216] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.302502][ T5216] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.387052][ T5216] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.432701][ T5216] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.493494][ T5216] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.543512][ T5216] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.624742][ T5216] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.680417][ T5216] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.721163][ T5216] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.760319][ T5216] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.840414][ T5216] bridge_slave_1: left allmulticast mode [ 1160.846160][ T5216] bridge_slave_1: left promiscuous mode [ 1160.851947][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.861513][ T5216] bridge_slave_0: left allmulticast mode [ 1160.867184][ T5216] bridge_slave_0: left promiscuous mode [ 1160.872900][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.881327][ T5216] bridge_slave_1: left allmulticast mode [ 1160.886953][ T5216] bridge_slave_1: left promiscuous mode [ 1160.892774][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.900506][ T5216] bridge_slave_0: left allmulticast mode [ 1160.906133][ T5216] bridge_slave_0: left promiscuous mode [ 1160.911832][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.921164][ T5216] bridge_slave_1: left allmulticast mode [ 1160.926800][ T5216] bridge_slave_1: left promiscuous mode [ 1160.932550][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.942898][ T5216] bridge_slave_0: left allmulticast mode [ 1160.948525][ T5216] bridge_slave_0: left promiscuous mode [ 1160.954327][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.162360][ T5216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.172799][ T5216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.182440][ T5216] bond0 (unregistering): Released all slaves [ 1161.190167][ T5216] bond1 (unregistering): Released all slaves [ 1161.212233][ T5216] dvmrp6 (unregistering): left allmulticast mode [ 1161.262847][ T5216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.272851][ T5216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.282611][ T5216] bond0 (unregistering): Released all slaves [ 1161.290121][ T5216] bond1 (unregistering): Released all slaves [ 1161.298962][ T5216] bond2 (unregistering): Released all slaves [ 1161.351146][ T5216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.361411][ T5216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.371650][ T5216] bond0 (unregistering): Released all slaves [ 1161.393867][ T5216] team0: Port device gtp0 removed [ 1161.440805][ T5216] bond0 (unregistering): Released all slaves [ 1161.448303][ T5216] bond1 (unregistering): Released all slaves [ 1161.598102][ T5216] hsr_slave_0: left promiscuous mode [ 1161.607507][ T5216] hsr_slave_0: left promiscuous mode [ 1161.615189][ T5216] hsr_slave_0: left promiscuous mode [ 1161.621312][ T5216] hsr_slave_1: left promiscuous mode [ 1161.627014][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.634412][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.642317][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.649719][ T5216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.659484][ T5216] hsr_slave_0: left promiscuous mode [ 1161.673900][ T5216] veth1_macvtap: left promiscuous mode [ 1161.679909][ T5216] veth0_macvtap: left promiscuous mode [ 1161.685422][ T5216] veth1_vlan: left promiscuous mode [ 1161.690708][ T5216] veth0_vlan: left promiscuous mode [ 1161.696303][ T5216] veth1_macvtap: left promiscuous mode [ 1161.701790][ T5216] veth0_macvtap: left promiscuous mode [ 1161.707357][ T5216] veth1_vlan: left promiscuous mode [ 1161.713068][ T5216] veth0_vlan: left promiscuous mode [ 1161.718580][ T5216] veth1_macvtap: left promiscuous mode [ 1161.724168][ T5216] veth0_macvtap: left promiscuous mode [ 1161.729677][ T5216] veth1_vlan: left promiscuous mode [ 1161.734921][ T5216] veth0_vlan: left promiscuous mode [ 1161.741221][ T5216] veth1_macvtap: left promiscuous mode [ 1161.746685][ T5216] veth0_macvtap: left promiscuous mode [ 1161.752254][ T5216] veth1_vlan: left promiscuous mode [ 1161.757531][ T5216] veth0_vlan: left promiscuous mode [ 1161.912589][ T5216] team0 (unregistering): Port device team_slave_1 removed [ 1161.923206][ T5216] team0 (unregistering): Port device team_slave_0 removed [ 1161.977699][ T5216] team0 (unregistering): Port device team_slave_1 removed [ 1161.988383][ T5216] team0 (unregistering): Port device team_slave_0 removed [ 1162.026577][ T5216] team0 (unregistering): Port device macvlan1 removed [ 1162.049747][ T5216] team0 (unregistering): Port device team_slave_1 removed [ 1162.060072][ T5216] team0 (unregistering): Port device team_slave_0 removed [ 1162.136632][ T4365] lo speed is unknown, defaulting to 1000 [ 1162.142411][ T4365] infiniband syz2: ib_query_port failed (-19) [ 1162.701349][ T5216] IPVS: stop unused estimator thread 0... [ 1162.707496][ T5216] IPVS: stop unused estimator thread 0... [ 1162.715213][ T5216] IPVS: stop unused estimator thread 0...