last executing test programs: 4m31.765529967s ago: executing program 4 (id=137): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8d89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0xfffffffffffffffe, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0xc000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5cd, &(0x7f0000000e40)="$eJzs3V+IXFcZAPBvZndSu4lNK7Waaput1Tb2z2x2twRTC5JHbVNq/zwZiUsy2YSdzcTdCXa3FrYUoYKRUH3SJwVBxYeIoCA+FMSKT4JvSmnBIkogFEtRNOrKuTM3TLKT3Wx3J7fJ/f3g7t5z5s6e787Hd2fuyZ2bAEprNP2oRGyLiFcjYnunefEGo51fpyfPHE1LJZaXn3qrkm33/OSZo/mm+fO2ph/ViA+nX7+J2FpbOe78wuLMVLPZmOu2x9qzJ8bmFxYfPDY7Nd2YbhyfmBzfs3tiz/ievZu2rz967uXPvf7cY+dPnRv5wWs7dv4zxbut+1jvfmyW0Rjtvia1+FjvA5WIz2z2YAUZiojhiPhg0YGwbgf+8I1n8vzVsvrfHkNZK2Jk8sDb2+PUI0XHCAzOcuZyjw4tA9ezShQdAVCM/J0+nf/my9X67DFzvZwEX8PO7eucAD7fnds5fSH/w1HtblMb0Pn9zr9FjEb7vjOfvetraYkBzcNweUsvRDZRt7L+K9nc2M3d7e6OiF0R8fGI+ERE3BMR925w7Ke/mPL/xrd6++T/6rrS/H8yIuoRcV9E3B8RD0TEgxsc+7b9Kf9bv9TbJ//lcfvni46AIv3+paIjIDv+7x4e7nf8r27wb991SXvLJe3l7N8Vl97s7XP8L48nnyo6Aor0+J6iI6BI332r6Ah4ZV/nZG7l+381buvZLq1/qHOqGDvSZ/eI+EhEfDQi7oiIOyNiZ3490RX66qNp+3qjt2/l+3/17Eb2j9Wd2xfxSM+1Xad78t9181C39f5sPqBWOXKs2dgdETdlc0K1G1J7fJUxvr7060f79f/kjpT/Tz+ez/+lJY2fzwV24zg7fMPFzzs81Z7a6H7Tce6FiNuH++W/0r0SqHNd33JEjL3LMV7c9dPf9uv/1JMp//c8sHr+GaTl73XmcfvlP1dZ/frMsex4MJYfFVZ6MW491a//ifMp/2/+Sf6Lk+p/ZPX8Z8f/C9frzq9/jOHTZ7/Zt3825f8vv3o3x/8tlaezAPM5hWen2u258YgtlcdW9k+sP+brVf565K9Xyv+uu/u//3+g+5z0gqbK/m9E/C8i/hUR/46I8xHxn4j4e0S8vcqYv3z54V/06598JuX/r6+q/+Kk/B9eo/4rF9X/+le+c+fer/Qb+4ffT/kfqa9d/w9lwezq9vj8t7ZmY+53cQUJKjpOAAAAAAAAADZHNbsHXqVav7BerdbrnXv43Roj1WZrvn3/kdbJ44ej+33QWjW/0mt7z/Wg493viubtiUvakxFxS0S8NHRj1q4fajUPF73zUFLbIl7/2ZcPbdl6mfpPXhsqOkpgEFL9H/n20FJaf0edQ6mk+v/xO7PZ97LUP5SL+ofyUv9QXuofykv9Q3mpfyiBm/p3q38oL/UP5aX+obx66x8opyf270/Lcn7fz+Ot6WMzR0/sndhdnz15qH6oNXeiPt1qTWff2Jld++81W60T4w/FyWfH2o359tj8wuLB2dbJ4+2D2X2jDzZqnc3eGPR+Aav7x5+/8PNbdr7yx0pELD18Y7ZEz72za4VGBwyaU38or+GiAwAK4zM+UFnj8fdd7oEDmx8LcHVs9P/4B65d9+4w/w9lZf4fysv8P5SXz/iA+X8oH/P/UF6NufmFxZmpZnPFStGRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU0/zC4sxUs9mYs2LFSs9Kqo73QBgDXvl/AAAA//+dfkZw") 4m30.888527179s ago: executing program 1 (id=144): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) getresuid(0x0, 0x0, &(0x7f0000000340)) io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m30.580338597s ago: executing program 4 (id=148): r0 = epoll_create1(0x0) dup(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}, {@bh}]}, 0x1, 0x527, &(0x7f0000000280)="$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") syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264"], 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) 4m29.929794055s ago: executing program 1 (id=152): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x3, 0x448, &(0x7f0000000e40)="$eJzs28tvG8UfAPDv2kn6Sx+/mKo8+gACBVHxSJq0lB64tAKJA0hIcCjHkKRVqNugJki0iiAgVI6oEncENyT+Ak5wQcAJiSvcUaUK5dLCyWhtb+K4tuukTpzEn4+0yczurGa+nh17dscOoGcNp3+SiL0R8UdEDFWyqwsMV/7dWVqY/GdpYTKJUumtv5NyudtLC5NZ0ey8PVmmEJH7LInDDeqdu3rt4kSxOH2lmh+dv/T+6NzVay/MXJq4MH1h+vL46dMnT4y9dGr8xY7EmcZ1+9BHs0cOvvbOjTcmz91495fvkiz+ujg6ZLjVwadLpQ5X1137atJJX9unlXIb0hralY+ItLv6y+N/KPKx0nlD8eqnXW0csKEGWh9eLAE7WDqbB3pR9kGf3v9m2yZMO7aMW2di+TnGnepWOdIXlXvTZEPrH46Ic4v/fpVuUfscIr+h1QIAPeyHMxHxfKP5Xy4eqin3/+oaSiEiHoiI/RFxKiIORMSDEeWyD0fEI2usv36R5O75Z+7mugJrUzr/e7m6trV6/re8MlHIV3P7yvH3J+dnitPHq6/JsejflebHWtTx4yu/f9HsWO38L93S+rO5YLUdN/t2rT5namJ+4n5irnXrk4hDfY3iT5ZXAtIZ8MGIOLTOOmae/fZIs2P3jr+F9teZmip9HfFMpf8Xoy7+TNJ6fXL0f1GcPj6aXRV3+/W36282q/++4u+AtP93N7z+l+MvJLXrtXNrr+P6n583vadc7/U/kLy9at+HE/PzV8YiBpLXK42u3T9eV258pXwa/7GjafxZxCvjf3+svBKHIyK9iB+NiMci4vFq25+IiCcj4miL+H8++9R7649/Y6XxT62p/1cSA1G/p3Eif/Gn71dVWlhL/Gn/nyynjlX3NHv/G6xJt9Ou9V3NAAAAsP3kImJvJLmR5XQuNzJS+Q7/gdidK87OzT93fvaDy1OV3wgUoj+XPekaqnkeOla9rc/y43X5E9Xnxl/mB8v5kcnZ4lS3g4cet6fJ+E/95TsosPN1YB0N2KaMf+hdxj/0LuMfeleD8T/YjXYAm688/ut+5/pxl9oCbK66z3/LftBD3P9D7zL+oXcZ/9CT5gbj3j+S36aJb85uiWbs0ETk1nRWadcWaLNE+4luvzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD//y8A3oc=") syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x38, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x5, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x8c1b5e9789d55504, 0x4, @multicast1, @loopback}, "511588f7f154b4c0"}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 4m29.721946687s ago: executing program 1 (id=155): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x7) r4 = socket(0xa, 0x1, 0x0) listen(r4, 0x7f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r6, &(0x7f00000003c0)={0x0, 0xfffffffffffffcde, 0x0}, 0x10002) 4m29.614122314s ago: executing program 1 (id=158): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='nonumtail=0,shortname=lower,shortname=mixed,utf8=1,iocharset=cp1251,nonumtail=0,rodir,shortname=win95,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,errors=remount-ro,shortname=winnt,shortname=win95,uni_xlate=0,nonumtail=0,discard,nnonumtail=1,codepage=865,nonumtail=0,shortname=winnt,shortname=win95,Cscontext=unconfined_u,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) setresuid(0x0, 0x0, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000000)="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", 0xdb9) capset(&(0x7f00000020c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000, 0xffc}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) 4m29.266368394s ago: executing program 4 (id=159): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1) recvfrom(r0, 0x0, 0x0, 0x40010021, 0x0, 0xfe6c) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x501, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x800000, 0x6, 0x2, 0xcc, 0xffff, 0x0, 0x0, 0x0, 0x40bb}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000440)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x6, 0x10, r3, 0x0, 0x0, 0x0, 0x10001, 0x1}) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x189, 0x0) 4m29.033281838s ago: executing program 1 (id=161): mkdirat(0xffffffffffffffff, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x34) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000024000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[], 0x0) 4m28.528050968s ago: executing program 1 (id=165): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80003, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m28.526576828s ago: executing program 32 (id=165): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80003, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m27.572292374s ago: executing program 4 (id=172): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB='nonumtail=0,shortname=lower,shortname=mixed,utf8=1,iocharset=cp1251,nonumtail=0,rodir,shortname=win95,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,errors=remount-ro,shortname=winnt,shortname=win95,uni_xlate=0,nonumtail=0,discard,nnonumtail=1,codepage=865,nonumtail=0,shortname=winnt,shortname=win95,Cscontext=unconfined_u,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) setresuid(0x0, 0x0, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000000)="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", 0xdb9) capset(&(0x7f00000020c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000, 0xffc}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) 4m27.305411959s ago: executing program 4 (id=174): ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m26.644227718s ago: executing program 4 (id=180): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) getresuid(0x0, 0x0, &(0x7f0000000340)) io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m26.643069989s ago: executing program 33 (id=180): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) getresuid(0x0, 0x0, &(0x7f0000000340)) io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, 0x0, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 57.212535701s ago: executing program 5 (id=5075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000680), &(0x7f0000000780)='%pI4 \x00'}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x2c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880) 57.151470115s ago: executing program 5 (id=5078): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001600)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x0, 0x4, 0x7, 0x9507, 0x84, 0x3, 0x5}, 0x9c) 57.087610428s ago: executing program 5 (id=5081): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 57.069862849s ago: executing program 5 (id=5083): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0xa, 0x3, 0x3a) r0 = socket(0x2, 0x80805, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 57.001010484s ago: executing program 5 (id=5084): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xcb8, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 56.713209551s ago: executing program 5 (id=5092): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001600)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x0, 0x4, 0x7, 0x9507, 0x84, 0x3, 0x5}, 0x9c) 41.530271225s ago: executing program 34 (id=5092): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001600)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x0, 0x4, 0x7, 0x9507, 0x84, 0x3, 0x5}, 0x9c) 27.879963388s ago: executing program 0 (id=5519): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000103"], 0x20}}, 0x0) 27.784044764s ago: executing program 0 (id=5523): unshare(0x2c020400) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0x80}) io_uring_enter(r0, 0x351e, 0x483, 0x2400, 0x0, 0x0) 27.783531444s ago: executing program 0 (id=5524): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') read(r0, &(0x7f00000005c0)=""/4096, 0x1000) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004000), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)=ANY=[@ANYBLOB="38000000ccc75b481ef73fed9306d5321f93ca8f22bec3a8e2058d05db64fcec9fea77f0dce8735ab032036d8e8ae6563eb40db685baa8392141a918b0337fb7c9d06af361a1ccb6c31d96697f93a4027694e8a4c7b75e0df6cbadc10abf003a5f6b97969529378063b731e9611bb8af2a45f17e5231f3b14189eb9cba6269a092adf0263687", @ANYRES16=r3, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x94}, 0x4040040) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001680), r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0xd, 0x0, 0x5}, 0x20) geteuid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0xe2000, 0x3, &(0x7f0000a00000/0x600000)=nil) 27.721401397s ago: executing program 0 (id=5527): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) faccessat(0xffffffffffffffff, 0x0, 0x5) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) io_uring_setup(0x127c, 0x0) syz_open_procfs(0x0, 0x0) link(0x0, &(0x7f0000001f40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 25.546740545s ago: executing program 0 (id=5555): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c9vVEUcAPDv290WStVWYlQ8mEZDIFFaWsDgjwPcCcEfNy9WWgiy/Ait0aKJJcGLifHigcSTB/G/UKJXTyYePHjxZEjQGC4ao2ve7tvt2u6229Ll1b7PJ3ndmTe7nXnQb2f2zUw3gMIaS7+UIvZExOUkYqStrBJZ4VjjeXd/f/90eiRRq736WxJJdq75/CR7HM5e/PdIxPffJLG7vLLeuYWr56er1dkrWX5i/sLlibmFqwfOXZg+O3t29uLUc1NHjxw+cnTy4D1dX6ktfeL6W++MfHTy9S8++yuZ/PKnk0kci1/PNMrar2OzjMVY/FGrfbD8fPrvenSzK8tJufVzsiRZfoItq5LFyGBEPBYjUW773xyJD1/OtXFAX9WSiBpQUIn4h4JqjgOa7+17ex9c6vOoBLgf7hxPvw50iP9K495gjMZAROxd9roOt/Q2JK3ju29PXk+P6NN9OKCzxWs7stTy+E/qsTkaO+u5XXdLrfv7kY0ATmWPlYh4ZYP1jy3Li3+4fxavRcTjncb/K+O/fVonjfs32uL/zQ3WL/4BAAAAAABg89w6HhHPdpr/K2Vzczvjqfr8X9KY//thaYfgsU2of+35v9LtTagG6ODO8YiXOq7/ba3xHS1nuQcbqwGTM+eqswcj4qGI2B8DO9L85Cp1HPh4941uZe3r/9Ijrb+5FjBrx+3Kjv++ZmZ6fvperhlouHMt4olK9/U/af+ftPf/mfT3weUe69i99+apbmVrxz/QL7XPI/Z17P+XVvsmq/99jon6eGCiOSpY6cn3PvmqW/3iH/KT9v+7Vo//0aT97/XMre/7D0bEoYVKrVv5Rsf/g8lr5eb3T707PT9/ZTJiMDmx8vzU+toM21UzHprxksb//qdXv//XGv+3xeFQRCz2WOej/wz/3K1M/w/5SeN/Zl39//oTUzdHv+5Wf2/9/+F6n74/O+P+H6yu1wDNu50AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H9UiogHIimNt9Kl0vh4xHBEPBK7StVLc/PPnLn09sWZtKz++f+l5if9jjTySfPz/0fb8lPL8oci4uGI+LQ8VM+Pn75Uncn74gEAAAAAAAAAAAAAAAAAAGCLGO6y/z/1Sznv1gF9V8kexTsUTyXvBgC5Ef9QXOIfikv8Q3GJfyiuDca/6QLYBvT/UFQDvT1tZ7/bAeRB/w8AAAAAANvKrRefv5FExOILQ/UjNZiVtSYGh/JqHdBPpbwbAOTGGl4oLkt/oLh6XPwLbGNJK/VnrVN599X/SX8aBAAAAAAAAAAAAACssG/PrR/X3P8PbEv2/0Nx2f8PxWX/PxSX9/jAWrv47f8HAAAAAAAAAAAAgPzNLVw9P12tzl6RkNhqiYGI2ALNyCExmH945vyLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPk3AAD//54nJPo=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, 0x0, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="e372f3ec986c672df2826128194a", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 25.387465755s ago: executing program 0 (id=5560): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x1024020, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xffe, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) modify_ldt$write2(0x11, &(0x7f00000000c0)={0xff, 0x20001000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000080)=0x53) 25.324159199s ago: executing program 35 (id=5560): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x1024020, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xffe, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) modify_ldt$write2(0x11, &(0x7f00000000c0)={0xff, 0x20001000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000080)=0x53) 22.75478551s ago: executing program 7 (id=5575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x25, &(0x7f0000000440)="436ed9d0", 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 21.825716465s ago: executing program 7 (id=5584): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000500)={0x3, 0xfc, 0x20f}) 21.825280445s ago: executing program 7 (id=5585): syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x9}, &(0x7f0000000580), &(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) close_range(r0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4060, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) (fail_nth: 2) 21.500071544s ago: executing program 7 (id=5587): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r1, 0x0) pidfd_send_signal(r4, 0x2d, &(0x7f00000007c0)={0x14, 0x666b, 0x80008000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107a7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x4, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) r7 = socket(0xf, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {0xf}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, 0x0, r9, r10, 0x800) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc0000001000000126bd7000ffdbdf2564010102000000000000000000000000fe8800000000000000000001000000014e2200094e240000020020802f000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="ffffffff000000000000000000000000000004d6ff00000020010000000000000000000000000000ff0f000000000000040000000000000041000000000000000600000000000000850c000000000000100000000000000060090000000000000200000000000000ae0000000000000009000000000000008100000000000000ffffffff000000001000000005000000800000002dbd7000000000000200030920000000000000000a0010000000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x1000000000000006}, 0x6025, 0x4005, 0xb, 0x0, 0x7, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 21.375844332s ago: executing program 7 (id=5588): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0xf23, 0x0, 0xc, 0x0, 0x0) 21.21874386s ago: executing program 7 (id=5590): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x400006, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000300)=""/102}, 0x20) 21.047586091s ago: executing program 3 (id=5594): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x400006, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000aecaa7124a90d9a5ca500afda433173fc00134000ef0000020000000000000000209854c55b9c29ffaa85b7cdaefbb315f06dcf347d9084b5b58df4591724e3cd8b8e28a17d39e6e853b5809bdc4c60d01589b879690a3608f20fee5576b8022de12425268e4a6812b9328c0554f6499cbb5daaea5f6ecb37fd04e12ee621a5ff0f3e2914abd3dacb94fae0d71928a751ad090009ff0c48e2696ea999fd51db0b54c91ee0478155f6aacdac391bbbd1bff8e60e9394ddd07f81766e6316da40e2c8511cd14d57", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000300)=""/102}, 0x20) 20.938605087s ago: executing program 3 (id=5595): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002080)=ANY=[@ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xc882}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYRESDEC=r0], 0x20}}, 0x0) 20.845756683s ago: executing program 3 (id=5598): fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x24, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r2, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') 20.325529803s ago: executing program 3 (id=5600): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xcb8, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) 20.151323603s ago: executing program 3 (id=5601): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x294, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x1e, 0x0, @random="da0474ba290a538318a2043005af9d3f460557e7ebb86f0499c5"}, {0x7, 0x0, @random="a032c7"}]}, @NL80211_ATTR_IE={0xc1, 0x2a, [@fast_bss_trans={0x37, 0x64, {0x40, 0x1, "816f6e35211492fccb0ea2b2e37e291a", "12b02d89d3b08072a5f68943e5e0ba94a20984e1332cec18b02fde92d6259089", "fe7217efe8fd02e535d19d3487276364e1562a25ea7935c02854b4cd9099b9a3", [{0x4, 0x10, "0716e629e469fe6b4a00d30ae9674959"}]}}, @ssid={0x0, 0x12, @random="8b00985efd748937b6f1a4ab354c44ffd176"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xf7, 0x8, @device_b, 0x4, @value=@broadcast, 0x2, 0x3, @device_b, 0x5}}, @link_id={0x65, 0x12, {@random="35d90fbf220a", @device_b, @device_b}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xec, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, "83f1aa096c63c1abf8c4cb8fe0dbd243a2174f84388aaec0476923c7047e14eb81c9f4cb218127afaed13c0083c498850b20105be75a605c54cd103318657ba8e1ca1d1d6f5711f2ce0b1b25ec532bcff50a5b69dd1555f2c7bdfee99c29dd9cbfa53f672cd08abd77d2931db297cebb412c17ef67d238ec2b45d410ad8fb1ce356be32d537130f2c54f9af7d28e267ac5accefe0b2ec78b8919b4b4f98e5f55"}, @NL80211_BAND_60GHZ={0x44, 0x2, "72abd46fab0ff6956139d958e20074d65b222703a19518ba3ff322de42fa9f61160137e8bc13492b79d75b4d86ecdcdf39d08b7858c15a40b096120833ce7c9a"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x5}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0xfb}}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x74, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="5d48e81ef6f558"}, {0x9, 0x0, @random="5315b576fb"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}]}, 0x294}, 0x1, 0x0, 0x0, 0x44}, 0x800) 19.633054304s ago: executing program 3 (id=5605): fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[], 0x24, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r1, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 19.53461721s ago: executing program 36 (id=5605): fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[], 0x24, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r1, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 8.578839625s ago: executing program 2 (id=5719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000540)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0xb27fba5017e026b9, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40820}, 0x5) dup(r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 8.530127108s ago: executing program 2 (id=5720): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xaded}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x700000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xcf}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 8.464007471s ago: executing program 2 (id=5721): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = open(&(0x7f00000004c0)='./file0\x00', 0x420100, 0x100) sendmsg$nl_generic(r1, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000540)={0x3a4, 0x16, 0x20, 0x70bd2c, 0x25dfdbfb, {0x12}, [@typed={0x8, 0x74, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x16e, 0x28, 0x0, 0x1, [@generic="fb154154e776b041bea2bb10aa81f306ea3032015662436019704e6fe10c85a087c4de6f7d8b408f2f1a04b1122d71da6efcaffbad199f3c60b156c89b1aaa23b06cea01f6465def0465f11401162cf27c04892b6de12faf49da04c064526012cbbbac5757de5204b80e6539003eb19d2c6107b54857675fdb7ab1e041220362b32dd036c780c7d8c3861a319a9af36868e82ada36e875bcd284cc6b4b3aeb3f0a16b85ac7560496", @generic="58606b3e87377e11d0649c72e88cb4c25886f4fe5790475d", @nested={0x4, 0x7}, @nested={0x4, 0x24}, @generic="3c81c10f52f192414e9a80bc990b7ef631231e6af24d7e8753d95aef31adbc6235378f854cf5cea9bcce16f8b3e11c87aaa97a32b2335665e4b242d79137b89def8a5f214c82d1b80af5", @typed={0x52, 0x17, 0x0, 0x0, @binary="3a0874f15cef99b205debf8b44e1950130f11db77887409598824bdfc80c6e90444632087e5ae68862727a54b7bd5be5b3452d28f4d64c70f1b14fb1fef1d2bb65245afe1371c02a69da303d4153"}, @nested={0x4, 0x1d}]}, @nested={0x5e, 0x71, 0x0, 0x1, [@generic="0f95e3efa92c7e697d3ba48196da5e149bc9370384d5cd1a8bc7746fb7f4cdd2bb8b4f32f806aab5a813ee8b07dd07fe355cee49cfe82d63190922296e87bf5268687785a64b40a2a4e09e5e8f7eaed797b4", @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="57fdb858b119f1c62d3f4b1cbb77ccac08a1d63ea7e5b3307e85bae343796344333cfa873fa426ed698d5e570ef9148f5192853241e1d14e2e9835995754b0b2aedb262474a6cb48c58f79b6159f3f63481f536e01ce710884d1982da8b9c0198843721cfb48bda88c18b49b906b55f0bdbe61935c379e799799d4a2e63fa2a0db2f1aed5eae1cc1ae95d32d2f66d0fafdcc", @generic="1faf03377465b16d051cf045240a82973e458b9a6c1a170ead19c615a841fb2dbf276784e45adcb41f1f43d6daa8b8327e70e8ec56e8415d1215848e9f6c48ff0a61e98abf809668f53cdd903c5b0822b2bad150a25fdd33b55e77646bcadbb99917a2cbb91a4bd4c339adb70f010aa68f049467803c50eb1d330d4719563f4db070810d8af57988a5e4f5cdd678607e25fab507", @nested={0x7f, 0xcd, 0x0, 0x1, [@generic="484ff7187faadbf8d7cb921f0d48c3a950acd41eccb6ec0ef346855e6e10105db4faf3c0176e4c47cc0e522180cfc9fde83480a45eeab54b6f7f4bf7d22533fd7b1d9440794422aaaf3c876b3f2e789d092accedb3a00dc5ffd5d855a5baefa6313f441df2a0b28aa6b7a666927f17d310a18e3f477da76e30c7eb"]}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@remote}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x80}, 0xc001) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040005) 8.460741342s ago: executing program 2 (id=5722): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xcb8, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) 8.101680393s ago: executing program 2 (id=5727): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x31}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x88000, 0x0, 0x0) 6.767910162s ago: executing program 2 (id=5741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) nanosleep(&(0x7f00000001c0), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000540)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000a8199b4aa9f9fcffffff2500000010000000065102b487c072dac93d38be47e9e8429ef33546dfebf3d0d9e937d87598f169327c5af128a4b9739d310801b3378280dc1504734c6e"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r10, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0x118}, 0x40040c0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x4fbe41bbbe54e67e}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r12, 0x0, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="1c00000022000000", @ANYRES32=r8, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES8=r12, @ANYRES64=r13], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0e0000000001000000000000", @ANYRES32=r4, @ANYRES64=r13], 0x20) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa, 0x9, 0x0, 0x2, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480000, 0x0, @perf_config_ext={0x2, 0x5}, 0x4c58, 0x1, 0x0, 0x5, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xd, 0xffffffffffffffff, 0x8) 6.756212722s ago: executing program 37 (id=5741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) nanosleep(&(0x7f00000001c0), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000540)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000a8199b4aa9f9fcffffff2500000010000000065102b487c072dac93d38be47e9e8429ef33546dfebf3d0d9e937d87598f169327c5af128a4b9739d310801b3378280dc1504734c6e"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r10, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0x118}, 0x40040c0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x4fbe41bbbe54e67e}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r12, 0x0, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="1c00000022000000", @ANYRES32=r8, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES8=r12, @ANYRES64=r13], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0e0000000001000000000000", @ANYRES32=r4, @ANYRES64=r13], 0x20) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa, 0x9, 0x0, 0x2, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480000, 0x0, @perf_config_ext={0x2, 0x5}, 0x4c58, 0x1, 0x0, 0x5, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xd, 0xffffffffffffffff, 0x8) 6.163124797s ago: executing program 38 (id=5590): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x400006, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000300)=""/102}, 0x20) 1.110713585s ago: executing program 8 (id=5785): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r2, 0x89f1, 0x2) shutdown(r1, 0x1) listen(r1, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x10000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0x2, 0xb}, {0x4, 0xffee}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x280, 0x7f, 0xfff, 0xe2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r13, 0x0, 0x0, 0x24040815, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) fcntl$dupfd(r13, 0x406, r1) 852.34827ms ago: executing program 6 (id=5787): r0 = socket(0x18, 0x4, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x20, 0x0, 0x0, 0x4040800}, 0x4000048) 841.40794ms ago: executing program 6 (id=5788): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x16c, &(0x7f0000001200)="$eJzs27HrEmEYB/Dn0ur3q8U5Gg5amqSaGoswiA6KwqGmAmvREHI5m6S/pLW5vysIJ4fgjTrREi1Kzqv8fBYf+PLq87549/Ie3LPLr4aD8eTl+OE8TrIs2rcij0UWnTgTrajMAgD4nyxSik8ppXR+FqfvIqXUdEcAQN3s/wBwfH65/99sqDEAoDbO/wBwfB4/eXr/dlH0HuX5ScTHWdkv+9Vnld+9V/Su5d901qPmZdlvrfLrVZ7/mJ+NC8v8xtb8XFy9UuVfszsPio38Ygzqnz4AAAAchW6+svV83+3uyqvqu+cDG+f3dlxqH2waAMBvmEzfDJ+PRi9eK/6J4kP8FW38pJgu/1mH+9HPKaU/GP72fdVo4yu2T3G6Y52ziNjvm5u8KwGHsL7om+4EAAAAAAAAAAAAAADYpd73k1pNTw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2+hIAAP//+59KQA==") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000bc0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sync() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001000000000000000000020000100211000000000000050019"], 0x24}}, 0x48850) inotify_init() fcntl$setflags(r0, 0x2, 0x1) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005e00058a"], 0x18}], 0x1}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x800, 0x70bd25, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="d002008426dc6920a16e1d000000000085000000190000009500ff00000000004c23ca23fa33e5de11ca120d4f26abe154d9966f81195ae6dbb2eeadb10b2efe59100f2fa19e8e5fb5a34a24f5e6c917fdbfe78bf54e7086e7ae46bbe23e4a1330ea74d4c9b8988bc24411fb0d6a99678334167dcb599553314a3288c12d6ea1b2d166b377f6b2aa9463f8c9ef67ce15036f98d8"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 724.970047ms ago: executing program 9 (id=5789): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 666.082501ms ago: executing program 9 (id=5790): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0xe2000, 0x3, &(0x7f0000a00000/0x600000)=nil) 645.038742ms ago: executing program 8 (id=5791): syz_emit_ethernet(0x2a, &(0x7f0000002200)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote}}}}}, 0x0) socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 643.583882ms ago: executing program 6 (id=5792): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pselect6(0x66, 0x0, 0x0, &(0x7f00000010c0)={0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000080)=0x28) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r3, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x240088a4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405100000000000611014000000000062010c00000000009500090000000000a5ec62ba961dcea09d190ed7401f566106ba20157f7e1c3e48c7b0179f08c25c189d3010eed31bf12e134f29a105410e3e9de4cd94d97a3b11c180de7a6044a2183b6a47c21c8594521a7c204e15e19002c78191e8dbabb2da2f3c11ca3f0bdfbbe51072978d2b4ea36e71d1f9c6d3ce8cb9c02778a5766a977c62c411f726c678bf6132d067f5b3f05cbca86e6758e8fc2a52b755b9a4b8ede9197a69b3b548ae9fce9550982d9979fd01098282ee9e1a029a0e33860db9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080), 0x8) 568.215937ms ago: executing program 8 (id=5793): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 567.281317ms ago: executing program 6 (id=5794): fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB], 0x24, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r2, &(0x7f0000000280)=""/183, 0xb7) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') 562.430767ms ago: executing program 9 (id=5795): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040005) 511.57749ms ago: executing program 9 (id=5796): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x104}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r3, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) 469.560992ms ago: executing program 9 (id=5797): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$eventfd(r0, &(0x7f0000000280), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x7, 0x0, 0x9, 0x100}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0xd9, 0x4) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r6], 0x80}}, 0x0) bind$packet(r5, &(0x7f0000000040)={0x11, 0xf5, r3, 0x1, 0xfb, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@mcast2, @local, @empty, 0x7, 0x8000, 0x41, 0x400, 0x5, 0x18c0012, r3}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) 375.863658ms ago: executing program 6 (id=5798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$P9_RSTATFS(r0, &(0x7f0000000800)={0x43, 0x9, 0x2, {0x79, 0xfffffffe, 0x8, 0x66, 0x1, 0x0, 0x48, 0xffffffffffffff01, 0xfffffffc}}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r3, 0x2}, {r3, 0x2005}], 0x2, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xb, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 212.133378ms ago: executing program 8 (id=5799): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x318, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1000, 'system_u:object_r:apt_var_log_t:s0\x00'}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 211.556758ms ago: executing program 8 (id=5800): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x294, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x1e, 0x0, @random="da0474ba290a538318a2043005af9d3f460557e7ebb86f0499c5"}, {0x7, 0x0, @random="a032c7"}]}, @NL80211_ATTR_IE={0xc1, 0x2a, [@fast_bss_trans={0x37, 0x64, {0x40, 0x1, "816f6e35211492fccb0ea2b2e37e291a", "12b02d89d3b08072a5f68943e5e0ba94a20984e1332cec18b02fde92d6259089", "fe7217efe8fd02e535d19d3487276364e1562a25ea7935c02854b4cd9099b9a3", [{0x4, 0x10, "0716e629e469fe6b4a00d30ae9674959"}]}}, @ssid={0x0, 0x12, @random="8b00985efd748937b6f1a4ab354c44ffd176"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xf7, 0x8, @device_b, 0x4, @value=@broadcast, 0x2, 0x3, @device_b, 0x5}}, @link_id={0x65, 0x12, {@random="35d90fbf220a", @device_b, @device_b}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xec, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, "83f1aa096c63c1abf8c4cb8fe0dbd243a2174f84388aaec0476923c7047e14eb81c9f4cb218127afaed13c0083c498850b20105be75a605c54cd103318657ba8e1ca1d1d6f5711f2ce0b1b25ec532bcff50a5b69dd1555f2c7bdfee99c29dd9cbfa53f672cd08abd77d2931db297cebb412c17ef67d238ec2b45d410ad8fb1ce356be32d537130f2c54f9af7d28e267ac5accefe0b2ec78b8919b4b4f98e5f55"}, @NL80211_BAND_60GHZ={0x44, 0x2, "72abd46fab0ff6956139d958e20074d65b222703a19518ba3ff322de42fa9f61160137e8bc13492b79d75b4d86ecdcdf39d08b7858c15a40b096120833ce7c9a"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x5}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0xfb}}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x74, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="5d48e81ef6f558"}, {0x9, 0x0, @random="5315b576fb"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}]}, 0x294}, 0x1, 0x0, 0x0, 0x44}, 0x800) 209.446168ms ago: executing program 6 (id=5801): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2400000, &(0x7f0000000040), 0x2, 0x522, &(0x7f0000000180)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c000180140003"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000017000000000000000000500000a3c000000090a010400000000000000000a0000000000000000057a310000000008000f40000000b72423860073797a310000000008000a40fffffffcb0c000000000000000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000800)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r5, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000840)={"05cb93d01e330f5dbc8e5111c4d5d41c", 0x0, 0x0, {0xe, 0x9}, {0xc20f, 0x2}, 0x10000, [0xa00, 0x6, 0x7fffffff, 0x0, 0x7, 0x7fff, 0x5, 0x5, 0xffffffffffffffff, 0x9, 0x8, 0x3, 0x2, 0x6, 0x7]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001f40)={{r2}, r7, 0xc, @unused=[0x8, 0x7, 0x100, 0x1], @devid}) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x3}}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0xa, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x53, 0xff9, 0x8}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000740)={'veth1_to_team\x00', @random="40ff54180aec"}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0x0, 0x0) rename(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)='./file1\x00') r8 = syz_open_dev$usbmon(&(0x7f0000000700), 0x8, 0x1800) mmap$usbmon(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xc, 0x4000010, r8, 0xffffffffffffffff) 113.105184ms ago: executing program 9 (id=5802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'team0\x00', {}, 0x8001}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110bd000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd8d}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x9}}, 0xfd78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8004}, {0xa, 0x0, 0x30c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, r4, 0x3fc}}, 0x48) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x10001, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(0x0, 0x0, 0x0) r5 = gettid() r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) timer_create(0x6, &(0x7f0000000040)={0x0, 0x20, 0x2, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff008}, {0xa, 0x0, 0x0, 0x4}]}, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbfd, 0x3, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) r8 = timerfd_create(0x3, 0x80000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) timerfd_settime(r8, 0x2, &(0x7f0000000140)={{0x0, 0x3938700}}, &(0x7f00000000c0)) 0s ago: executing program 8 (id=5803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0xfc, 0x0, &(0x7f0000000240)=0x1) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom0\x00'}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffffffffffffffab, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_GROUP_FWD_MASK={0x0, 0x9, 0x8}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x0, 0x1c, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r5, 0x1, 0x578, 0x8000000000000000}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x1407, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x0) lseek(r2, 0x4, 0x1) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): h=c000003e syscall=202 compat=0 ip=0x7fe410ebacb9 code=0x7ffc0000 [ 276.989480][ T29] audit: type=1326 audit(1769145622.751:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe410ebacb9 code=0x7ffc0000 [ 277.013425][ T29] audit: type=1326 audit(1769145622.751:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410ebacb9 code=0x7ffc0000 [ 277.037071][ T29] audit: type=1326 audit(1769145622.751:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fe410ebacb9 code=0x7ffc0000 [ 277.060678][ T29] audit: type=1326 audit(1769145622.751:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe410ebacb9 code=0x7ffc0000 [ 277.084391][ T29] audit: type=1326 audit(1769145622.751:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe410ebacb9 code=0x7ffc0000 [ 277.678616][ T4090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 277.727549][T17762] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 277.835068][T17766] __nla_validate_parse: 8 callbacks suppressed [ 277.835086][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5262'. [ 277.943802][T17768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.954287][T17760] lo speed is unknown, defaulting to 1000 [ 277.980460][T17768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.072573][T17768] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.083567][T17768] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.268618][T17786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5270'. [ 278.284203][T17768] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.295375][T17768] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.452628][T17791] veth0_to_team: entered promiscuous mode [ 278.524354][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5274'. [ 278.535569][T17768] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.546812][T17768] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.610742][T17798] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5273'. [ 278.622677][T17793] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5273'. [ 278.640477][T17795] x_tables: duplicate underflow at hook 2 [ 278.757392][T17768] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.768145][T17768] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.893953][T17809] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5279'. [ 278.911209][T17809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5279'. [ 279.140734][T17814] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 279.185515][ T1822] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.193875][ T1822] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.278075][T17816] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 279.379571][ T1822] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.387880][ T1822] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.538362][T17821] veth0_to_team: entered promiscuous mode [ 279.544368][ T1822] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.552620][ T1822] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.636161][T17824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5285'. [ 279.683084][ T7680] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.691451][ T7680] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.702213][T17824] x_tables: duplicate underflow at hook 2 [ 279.930776][T17819] lo speed is unknown, defaulting to 1000 [ 280.039436][T17834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5290'. [ 280.059420][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5290'. [ 280.426555][T17840] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 280.640572][T17842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.674754][T17842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.741276][T17842] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.752148][T17842] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.779615][T17850] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 280.939531][T17842] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.950282][T17842] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.100566][T17854] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 281.132114][T17842] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.143555][T17842] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.263131][T17862] IPv6: Can't replace route, no match found [ 281.332653][T17842] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.343768][T17842] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.381256][T17866] bond0: option mode: unable to set because the bond device is up [ 281.484985][T17871] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 281.684523][T17879] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 281.908628][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 281.908646][ T29] audit: type=1326 audit(1769145627.761:10624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 281.962072][ T29] audit: type=1326 audit(1769145627.761:10625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 281.986022][ T29] audit: type=1326 audit(1769145627.811:10626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 282.009671][ T29] audit: type=1326 audit(1769145627.811:10627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bbc4daa22 code=0x7ffc0000 [ 282.033245][ T29] audit: type=1326 audit(1769145627.811:10628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8bbc4daab7 code=0x7ffc0000 [ 282.056786][ T29] audit: type=1326 audit(1769145627.811:10629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8bbc497a51 code=0x7ffc0000 [ 282.080312][ T29] audit: type=1326 audit(1769145627.811:10630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8bbc4dbac9 code=0x7ffc0000 [ 282.103935][ T29] audit: type=1326 audit(1769145627.811:10631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8bbc497abb code=0x7ffc0000 [ 282.127460][ T29] audit: type=1326 audit(1769145627.811:10632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 282.151218][ T29] audit: type=1326 audit(1769145627.811:10633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 282.810023][T12170] syz_tun (unregistering): left allmulticast mode [ 282.816686][T12170] syz_tun (unregistering): left promiscuous mode [ 282.823116][T12170] bridge0: port 3(syz_tun) entered disabled state [ 282.855345][ T1618] smc: removing ib device syz1 [ 283.256267][ T7680] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.264643][ T7680] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.389249][T14042] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.397538][T14042] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.565974][T17897] lo speed is unknown, defaulting to 1000 [ 283.571844][ T1618] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.580110][ T1618] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.817683][T14042] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.826072][T14042] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.921964][T14041] ip6gretap0: left allmulticast mode [ 283.927371][T14041] ip6gretap0: left promiscuous mode [ 283.932714][T14041] bridge0: port 4(ip6gretap0) entered disabled state [ 283.976894][T14041] bridge_slave_1: left allmulticast mode [ 283.982636][T14041] bridge_slave_1: left promiscuous mode [ 283.988418][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.014395][T14041] bridge_slave_0: left allmulticast mode [ 284.020321][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.088818][T14041] erspan0 (unregistering): left promiscuous mode [ 284.099138][T14041] gretap0 (unregistering): left promiscuous mode [ 284.132234][T14041] bond1 (unregistering): (slave gretap2): Releasing active interface [ 284.167315][T14041] bond4 (unregistering): (slave gretap1): Releasing active interface [ 284.227703][T14041] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 284.297927][T14041] bond1 (unregistering): (slave bridge1): Releasing active interface [ 284.302557][T17938] __nla_validate_parse: 5 callbacks suppressed [ 284.302573][T17938] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5324'. [ 284.422497][T17933] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5324'. [ 284.681843][T17957] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 284.705517][T14041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.715254][T14041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.724457][T14041] bond0 (unregistering): Released all slaves [ 284.732115][T14041] bond1 (unregistering): Released all slaves [ 284.740378][T14041] bond2 (unregistering): Released all slaves [ 284.749059][T14041] bond3 (unregistering): Released all slaves [ 284.757934][T14041] bond4 (unregistering): Released all slaves [ 284.766608][T14041] bond5 (unregistering): Released all slaves [ 284.775191][T14041] bond6 (unregistering): Released all slaves [ 284.784106][T14041] bond7 (unregistering): Released all slaves [ 284.792792][T14041] bond8 (unregistering): Released all slaves [ 284.802367][T14041] bond9 (unregistering): Released all slaves [ 284.811370][T14041] bond10 (unregistering): Released all slaves [ 284.820790][T14041] bond11 (unregistering): Released all slaves [ 284.829638][T14041] bond12 (unregistering): Released all slaves [ 284.838631][T14041] bond13 (unregistering): Released all slaves [ 284.847586][T14041] bond14 (unregistering): Released all slaves [ 284.856551][T14041] bond15 (unregistering): Released all slaves [ 284.865397][T14041] bond16 (unregistering): Released all slaves [ 284.874223][T14041] bond17 (unregistering): Released all slaves [ 284.884707][T14041] bond18 (unregistering): Released all slaves [ 284.893892][T14041] bond19 (unregistering): Released all slaves [ 284.903118][T14041] bond20 (unregistering): Released all slaves [ 284.913160][T14041] bond21 (unregistering): Released all slaves [ 284.922351][T14041] bond22 (unregistering): Released all slaves [ 284.931648][T14041] bond23 (unregistering): Released all slaves [ 284.940756][T14041] bond24 (unregistering): Released all slaves [ 284.949922][T14041] bond25 (unregistering): Released all slaves [ 284.959233][T14041] bond26 (unregistering): Released all slaves [ 284.968304][T14041] bond27 (unregistering): Released all slaves [ 285.001730][T17959] veth1_to_bond: entered promiscuous mode [ 285.061645][T14041] tipc: Left network mode [ 285.221195][T17958] veth1_to_bond: left promiscuous mode [ 285.267513][T17978] loop6: detected capacity change from 0 to 1024 [ 285.285137][T17978] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 285.296234][T17978] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 285.324143][T17978] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.5336: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 285.346647][T17943] lo speed is unknown, defaulting to 1000 [ 285.353564][T14041] macvlan1: left promiscuous mode [ 285.360428][T14041] dummy0: left promiscuous mode [ 285.367995][T17978] EXT4-fs (loop6): no journal found [ 285.373539][T14041] hsr_slave_0: left promiscuous mode [ 285.386897][T14041] hsr_slave_1: left promiscuous mode [ 285.414165][T14041] pim6reg (unregistering): left allmulticast mode [ 285.454882][T14041] team0 (unregistering): Port device C removed [ 285.568883][T17978] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.578703][T17978] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.590796][T17897] chnl_net:caif_netlink_parms(): no params data found [ 285.644937][T17978] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.654855][T17978] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.829935][T17978] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.839952][T17978] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.863294][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.870675][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.878084][T17897] bridge_slave_0: entered allmulticast mode [ 285.884906][T17897] bridge_slave_0: entered promiscuous mode [ 285.895401][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.902510][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.910773][T17897] bridge_slave_1: entered allmulticast mode [ 285.918450][T17897] bridge_slave_1: entered promiscuous mode [ 285.928722][T17978] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.938708][T17978] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.006747][T14041] IPVS: stop unused estimator thread 0... [ 286.019319][T17897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.045855][T17897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.164984][T17897] team0: Port device team_slave_0 added [ 286.181725][T17897] team0: Port device team_slave_1 added [ 286.214406][T18034] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5347'. [ 286.271364][T17897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.278404][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.304425][T17897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.321764][T17897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.328824][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.354839][T17897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.373798][T18020] veth1_to_bond: entered promiscuous mode [ 286.445384][T18019] veth1_to_bond: left promiscuous mode [ 286.512627][T17897] hsr_slave_0: entered promiscuous mode [ 286.518916][T17897] hsr_slave_1: entered promiscuous mode [ 286.525271][T17897] debugfs: 'hsr0' already exists in 'hsr' [ 286.531075][T17897] Cannot create hsr debugfs directory [ 286.573458][T18048] netlink: 'syz.2.5350': attribute type 1 has an invalid length. [ 286.605384][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5350'. [ 286.656424][ T1618] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.664804][ T1618] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.696452][T18048] macvlan2: entered promiscuous mode [ 286.701920][T18048] macvlan2: entered allmulticast mode [ 286.708543][T18048] bond26: entered promiscuous mode [ 286.714264][T18048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.723044][T18048] bond26: left promiscuous mode [ 286.746127][T14042] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.754394][T14042] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.817740][ T2590] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.826076][ T2590] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.894028][T14041] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.902351][T14041] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.942191][T17897] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.952373][T17897] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.965975][T18062] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5356'. [ 286.980303][T17897] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.989567][T17897] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.001282][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 287.001299][ T29] audit: type=1400 audit(1769145632.851:11050): avc: denied { mac_admin } for pid=18059 comm="syz.2.5355" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.004288][T18060] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 287.038257][ T29] audit: type=1400 audit(1769145632.891:11051): avc: denied { relabelto } for pid=18059 comm="syz.2.5355" name="1036" dev="tmpfs" ino=5537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 287.091668][ T29] audit: type=1400 audit(1769145632.891:11052): avc: denied { associate } for pid=18059 comm="syz.2.5355" name="1036" dev="tmpfs" ino=5537 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 287.122932][ T29] audit: type=1326 audit(1769145632.981:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18071 comm="syz.6.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 287.146700][ T29] audit: type=1326 audit(1769145632.981:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18071 comm="syz.6.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 287.168759][T17897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.170558][ T29] audit: type=1326 audit(1769145632.981:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18071 comm="syz.6.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 287.194872][T17897] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.200943][ T29] audit: type=1326 audit(1769145632.981:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18071 comm="syz.6.5358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 287.216269][T13384] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.237859][T13384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.267367][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.274512][T14041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.274818][T18074] loop6: detected capacity change from 0 to 512 [ 287.303519][T18074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.354964][T18074] EXT4-fs (loop6): too many log groups per flexible block group [ 287.362715][T18074] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 287.370243][T18074] EXT4-fs (loop6): mount failed [ 287.399311][T18074] siw: device registration error -23 [ 287.446303][T17897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.479147][ T29] audit: type=1400 audit(1769145633.331:11057): avc: denied { read } for pid=18081 comm="syz.0.5360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 287.492171][T18082] netlink: 7688 bytes leftover after parsing attributes in process `syz.0.5360'. [ 287.507339][T18087] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 287.542026][ T29] audit: type=1326 audit(1769145633.381:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.6.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 287.565708][ T29] audit: type=1326 audit(1769145633.381:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18086 comm="syz.6.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 287.698891][T18102] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 287.928628][T18105] lo speed is unknown, defaulting to 1000 [ 287.982280][T17897] veth0_vlan: entered promiscuous mode [ 288.007306][T17897] veth1_vlan: entered promiscuous mode [ 288.083984][T17897] veth0_macvtap: entered promiscuous mode [ 288.108539][T17897] veth1_macvtap: entered promiscuous mode [ 288.144361][T17897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.158841][T17897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.172790][T13384] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.188601][T13384] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.222444][T13384] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.251247][T13384] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.266907][T18142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.285287][T18142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.292263][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5314'. [ 288.324529][T18142] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.335247][T18142] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.355078][T18149] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 288.385866][T18145] wireguard0: entered promiscuous mode [ 288.392438][T18145] wireguard0: entered allmulticast mode [ 288.411875][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5381'. [ 288.425331][T18152] bond35: option mode: unable to set because the bond device has slaves [ 288.435723][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5381'. [ 288.444742][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5381'. [ 288.492311][T18142] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.503172][T18142] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.627599][T18142] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.683218][T18142] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.809250][T18180] batadv1: entered promiscuous mode [ 288.893381][T18142] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.911735][T18142] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.981222][T18194] wireguard0: entered promiscuous mode [ 289.057419][T18197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.078578][T18197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.108525][T18197] bond1: (slave bond0): making interface the new active one [ 289.126534][T18197] bond1: (slave bond0): Enslaving as an active interface with an up link [ 289.152172][T18204] bridge0: port 3(syz_tun) entered blocking state [ 289.158764][T18204] bridge0: port 3(syz_tun) entered disabled state [ 289.166013][T18204] syz_tun: entered allmulticast mode [ 289.172102][T18204] syz_tun: entered promiscuous mode [ 289.191957][T18207] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 289.206088][T18204] bridge0: port 3(syz_tun) entered blocking state [ 289.213030][T18204] bridge0: port 3(syz_tun) entered forwarding state [ 289.350293][T18203] lo speed is unknown, defaulting to 1000 [ 289.376179][T18213] __nla_validate_parse: 5 callbacks suppressed [ 289.376206][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5404'. [ 289.391478][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5404'. [ 289.479042][T18218] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.507670][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5407'. [ 289.555124][T18225] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 289.693948][T18231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5412'. [ 289.793440][T18234] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 289.970635][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5415'. [ 289.982154][T18238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.993128][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5415'. [ 290.002113][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5415'. [ 290.152596][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5419'. [ 290.166408][T18248] netlink: 'syz.3.5420': attribute type 1 has an invalid length. [ 290.206111][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 290.216077][T18246] x_tables: duplicate underflow at hook 2 [ 290.239359][T18251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5421'. [ 290.261348][T18248] macvlan4: entered promiscuous mode [ 290.266870][T18248] macvlan4: entered allmulticast mode [ 290.307976][T18253] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 290.317594][T18248] bond26: entered promiscuous mode [ 290.331807][T18248] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 290.356677][T18248] bond26: left promiscuous mode [ 290.465584][T18259] dvmrp0: entered allmulticast mode [ 290.484479][ T7593] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.491818][ T7593] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.491928][ T52] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.526967][ T52] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.543997][ T2590] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.552727][ T2590] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.602137][T18272] x_tables: duplicate underflow at hook 2 [ 290.610904][T18275] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 290.674536][T18285] netlink: 'syz.2.5437': attribute type 1 has an invalid length. [ 290.694763][T18285] macvlan2: entered promiscuous mode [ 290.700130][T18285] macvlan2: entered allmulticast mode [ 290.706481][T18285] bond27: entered promiscuous mode [ 290.711998][T18285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.720621][T18285] bond27: left promiscuous mode [ 290.902295][T14042] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.910756][T14042] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.079208][ T52] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.087571][ T52] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.283165][T14029] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.291475][T14029] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.399325][ T7593] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.407688][ T7593] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.416275][T18316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18316 comm=syz.3.5447 [ 291.568494][T18320] loop6: detected capacity change from 0 to 512 [ 291.588783][T18320] EXT4-fs: Ignoring removed nobh option [ 291.604729][T18320] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 291.621749][T18320] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.5449: attempt to clear invalid blocks 1 len 1 [ 291.662492][T18320] EXT4-fs (loop6): Remounting filesystem read-only [ 291.676028][T18320] EXT4-fs (loop6): 1 truncate cleaned up [ 291.689857][T18320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.766068][ T4090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.797641][T18324] x_tables: duplicate underflow at hook 2 [ 291.855701][T18330] bond22: option mode: unable to set because the bond device is up [ 291.867609][T18330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.877052][T18330] bond22: (slave bond0): making interface the new active one [ 291.886554][T18330] bond22: (slave bond0): Enslaving as an active interface with an up link [ 292.025779][T18333] lo speed is unknown, defaulting to 1000 [ 292.183370][T18342] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.269657][T18342] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.292784][T18350] loop6: detected capacity change from 0 to 512 [ 292.300689][T18350] EXT4-fs: Ignoring removed nobh option [ 292.316842][T18350] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 292.333100][T18350] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.5462: attempt to clear invalid blocks 1 len 1 [ 292.346545][T18350] EXT4-fs (loop6): Remounting filesystem read-only [ 292.355056][T18350] EXT4-fs (loop6): 1 truncate cleaned up [ 292.361267][T18348] x_tables: duplicate underflow at hook 2 [ 292.365646][T18350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.380224][T18355] netlink: 'syz.0.5463': attribute type 1 has an invalid length. [ 292.400366][T18342] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.435295][T18358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 292.445157][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 292.445173][ T29] audit: type=1326 audit(1769145638.301:11159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.475816][ T29] audit: type=1326 audit(1769145638.301:11160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.499486][ T29] audit: type=1326 audit(1769145638.301:11161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.523176][ T29] audit: type=1326 audit(1769145638.301:11162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.530039][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 292.547352][ T29] audit: type=1326 audit(1769145638.301:11163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.576570][ T29] audit: type=1326 audit(1769145638.301:11164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.607140][T18355] macvlan3: entered promiscuous mode [ 292.612500][T18355] macvlan3: entered allmulticast mode [ 292.623040][ T29] audit: type=1326 audit(1769145638.361:11165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.633058][T18355] bond37: entered promiscuous mode [ 292.646741][ T29] audit: type=1326 audit(1769145638.361:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 292.676480][T18355] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 292.686895][ T4090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.697640][T18355] bond37: left promiscuous mode [ 292.716080][T18363] loop6: detected capacity change from 0 to 128 [ 292.722968][T18363] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 292.808245][T18342] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.019936][T18366] lo speed is unknown, defaulting to 1000 [ 293.160828][T18386] ip6t_srh: unknown srh match flags 4000 [ 293.364061][T18384] lo speed is unknown, defaulting to 1000 [ 293.375045][ T7593] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.383892][T18390] x_tables: duplicate underflow at hook 2 [ 293.457141][T18394] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 293.468009][ T29] audit: type=1326 audit(1769145639.321:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.2.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 293.491848][ T29] audit: type=1326 audit(1769145639.321:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18393 comm="syz.2.5475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 293.534420][T18396] loop7: detected capacity change from 0 to 512 [ 293.571814][T18396] EXT4-fs: Ignoring removed nobh option [ 293.600559][T18363] loop6: detected capacity change from 0 to 512 [ 293.611444][T18396] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 293.629608][T18396] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5476: attempt to clear invalid blocks 1 len 1 [ 293.649442][T18396] EXT4-fs (loop7): Remounting filesystem read-only [ 293.657494][T18396] EXT4-fs (loop7): 1 truncate cleaned up [ 293.668395][T18396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.680197][T14042] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.708536][T17897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.716655][T18363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.737011][T18363] ext4 filesystem being mounted at /960/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.937767][T14042] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.153446][T18421] loop7: detected capacity change from 0 to 512 [ 294.154824][ T935] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.168548][T18421] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 294.199261][T18421] EXT4-fs error (device loop7): ext4_init_orphan_info:620: comm syz.7.5484: orphan file block 0: bad magic [ 294.225076][T18421] EXT4-fs (loop7): mount failed [ 294.383532][T18428] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 294.394791][T18430] __nla_validate_parse: 21 callbacks suppressed [ 294.394809][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5488'. [ 294.579790][T18435] veth1_to_bond: entered promiscuous mode [ 294.817595][T18457] netlink: 'syz.2.5498': attribute type 1 has an invalid length. [ 294.869739][T18459] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.879871][T18457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5498'. [ 294.905485][T18457] macvlan2: entered promiscuous mode [ 294.910833][T18457] macvlan2: entered allmulticast mode [ 294.917878][T18457] bond28: entered promiscuous mode [ 294.929538][T18457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.952827][T18457] bond28: left promiscuous mode [ 294.978149][T18459] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.012660][T18434] veth1_to_bond: left promiscuous mode [ 295.055573][T18459] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.087108][T18363] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 3: comm syz.6.5466: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 295.138299][T18470] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 295.148945][T18459] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.195848][ T4090] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.212875][T13384] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.259774][T13384] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.272089][T13384] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.281067][T13384] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.308199][T18484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5506'. [ 295.327500][T18476] lo speed is unknown, defaulting to 1000 [ 295.387387][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5507'. [ 295.396400][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5507'. [ 295.424416][T18486] bond35: (slave bond0): Releasing active interface [ 295.443114][T18490] netlink: 'syz.0.5507': attribute type 10 has an invalid length. [ 295.487934][T18493] netlink: 'syz.6.5510': attribute type 1 has an invalid length. [ 295.526022][T18493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5510'. [ 295.539529][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5509'. [ 295.552111][T18493] macvlan3: entered promiscuous mode [ 295.557527][T18493] macvlan3: entered allmulticast mode [ 295.564962][T18493] bond23: entered promiscuous mode [ 295.570435][T18493] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 295.579223][T18493] bond23: left promiscuous mode [ 295.597633][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5509'. [ 295.632108][T18499] veth1_to_bond: entered promiscuous mode [ 295.660472][T18502] FAULT_INJECTION: forcing a failure. [ 295.660472][T18502] name failslab, interval 1, probability 0, space 0, times 0 [ 295.673205][T18502] CPU: 1 UID: 0 PID: 18502 Comm: syz.6.5513 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 295.673263][T18502] Tainted: [W]=WARN [ 295.673272][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.673308][T18502] Call Trace: [ 295.673316][T18502] [ 295.673338][T18502] __dump_stack+0x1d/0x30 [ 295.673371][T18502] dump_stack_lvl+0x95/0xd0 [ 295.673449][T18502] dump_stack+0x15/0x1b [ 295.673469][T18502] should_fail_ex+0x263/0x280 [ 295.673490][T18502] should_failslab+0x8c/0xb0 [ 295.673578][T18502] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 295.673613][T18502] ? __alloc_skb+0x2f0/0x4b0 [ 295.673643][T18502] __alloc_skb+0x2f0/0x4b0 [ 295.673692][T18502] ? __alloc_skb+0x219/0x4b0 [ 295.673722][T18502] pfkey_sendmsg+0xd7/0x9b0 [ 295.673810][T18502] ? avc_has_perm+0x101/0x190 [ 295.673837][T18502] ? selinux_socket_sendmsg+0x192/0x1c0 [ 295.673866][T18502] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 295.673964][T18502] __sock_sendmsg+0x145/0x170 [ 295.674021][T18502] ____sys_sendmsg+0x345/0x4a0 [ 295.674076][T18502] ___sys_sendmsg+0x195/0x1e0 [ 295.674114][T18502] __sys_sendmmsg+0x185/0x320 [ 295.674157][T18502] __x64_sys_sendmmsg+0x57/0x70 [ 295.674205][T18502] x64_sys_call+0x1e28/0x3000 [ 295.674236][T18502] do_syscall_64+0xc0/0x2a0 [ 295.674278][T18502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.674348][T18502] RIP: 0033:0x7f64d6d3acb9 [ 295.674369][T18502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.674394][T18502] RSP: 002b:00007f64d5797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 295.674415][T18502] RAX: ffffffffffffffda RBX: 00007f64d6fb5fa0 RCX: 00007f64d6d3acb9 [ 295.674506][T18502] RDX: 0000000000000001 RSI: 0000200000002f40 RDI: 0000000000000003 [ 295.674523][T18502] RBP: 00007f64d5797090 R08: 0000000000000000 R09: 0000000000000000 [ 295.674541][T18502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.674562][T18502] R13: 00007f64d6fb6038 R14: 00007f64d6fb5fa0 R15: 00007ffe4abddaf8 [ 295.674583][T18502] [ 295.886463][T18503] netlink: 'syz.7.5512': attribute type 8 has an invalid length. [ 295.894507][T18503] netem: change failed [ 295.998767][T18506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5514'. [ 296.079129][T18510] loop6: detected capacity change from 0 to 1024 [ 296.090326][T18510] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.101346][T18510] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.117636][T18510] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.5516: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 296.136132][T18510] EXT4-fs (loop6): no journal found [ 296.163538][T18513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.171880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.180525][T18497] veth1_to_bond: left promiscuous mode [ 296.188706][T18510] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.198693][T18510] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.237919][T18515] 9p: Bad value for 'wfdno' [ 296.260419][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5519'. [ 296.282869][T18510] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.292844][T18510] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.313535][T18512] lo speed is unknown, defaulting to 1000 [ 296.328666][T18526] netlink: 'syz.3.5521': attribute type 10 has an invalid length. [ 296.346684][T18510] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.356582][T18510] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.391895][T18532] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 296.409040][T18510] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.418860][T18510] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.475424][T18538] loop7: detected capacity change from 0 to 512 [ 296.488063][T14029] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.496343][T14029] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.522461][T18538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 296.538657][T18538] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.551185][T14029] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.559528][T14029] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.567805][T18542] veth1_to_bond: entered promiscuous mode [ 296.576965][T18538] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5528: bg 0: block 360: padding at end of block bitmap is not set [ 296.600780][T14029] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.609090][T14029] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.694058][T14029] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.702422][T14029] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.035177][T18541] veth1_to_bond: left promiscuous mode [ 297.096246][T18565] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 297.278452][T18575] bond22: (slave bond0): Releasing active interface [ 297.312523][T18575] netlink: 'syz.6.5536': attribute type 10 has an invalid length. [ 297.371220][T17897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 297.392817][T18580] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 297.485205][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 297.485276][ T29] audit: type=1400 audit(1769145643.341:11263): avc: denied { read write } for pid=18585 comm="syz.6.5542" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 297.489467][T18587] bond1: option mode: unable to set because the bond device has slaves [ 297.491415][ T29] audit: type=1400 audit(1769145643.341:11264): avc: denied { open } for pid=18585 comm="syz.6.5542" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 297.551523][T18586] siw: device registration error -23 [ 297.587283][T18590] loop7: detected capacity change from 0 to 128 [ 297.602180][ T7593] bond1: (slave bond0): link status definitely down, disabling slave [ 297.610560][ T7593] bond1: now running without any active interface! [ 297.653505][T18590] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 297.663239][T18596] veth1_to_bond: entered promiscuous mode [ 297.847131][ T29] audit: type=1400 audit(1769145643.701:11265): avc: denied { create } for pid=18603 comm="syz.6.5549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 298.056956][T18595] veth1_to_bond: left promiscuous mode [ 298.133265][T18619] netlink: 'syz.3.5550': attribute type 1 has an invalid length. [ 298.208866][T18619] macvlan4: entered promiscuous mode [ 298.214269][T18619] macvlan4: entered allmulticast mode [ 298.227761][T18590] loop7: detected capacity change from 0 to 512 [ 298.254973][T18619] bond27: entered promiscuous mode [ 298.272484][T18619] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 298.288806][T18619] bond27: left promiscuous mode [ 298.310624][T18626] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 298.333586][ T29] audit: type=1326 audit(1769145644.181:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.6.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 298.362982][T18590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.381500][T18590] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.393668][ T29] audit: type=1326 audit(1769145644.211:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.6.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 298.417393][ T29] audit: type=1326 audit(1769145644.211:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.6.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 298.441104][ T29] audit: type=1326 audit(1769145644.221:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.6.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 298.464782][ T29] audit: type=1326 audit(1769145644.221:11270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.6.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 298.488522][ T29] audit: type=1326 audit(1769145644.221:11271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.6.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 298.512129][ T29] audit: type=1326 audit(1769145644.231:11272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18625 comm="syz.6.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 298.558269][T18641] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 298.595365][T18639] x_tables: duplicate underflow at hook 2 [ 298.717931][ T7886] syz_tun (unregistering): left allmulticast mode [ 298.724620][ T7886] syz_tun (unregistering): left promiscuous mode [ 298.731030][ T7886] bridge0: port 3(syz_tun) entered disabled state [ 298.767914][T18663] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 298.982853][T18655] lo speed is unknown, defaulting to 1000 [ 299.150500][T13384] bridge_slave_1: left allmulticast mode [ 299.156360][T13384] bridge_slave_1: left promiscuous mode [ 299.162084][T13384] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.197534][T13384] bridge_slave_0: left allmulticast mode [ 299.203272][T13384] bridge_slave_0: left promiscuous mode [ 299.209097][T13384] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.290376][T13384] bond1 (unregistering): (slave gretap1): Releasing active interface [ 299.301163][T13384] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 299.320313][T18703] x_tables: duplicate underflow at hook 2 [ 299.330753][T13384] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 299.366807][T13384] bond1 (unregistering): (slave bridge1): Releasing active interface [ 299.415694][T13384] bond2 (unregistering): (slave bridge2): Releasing active interface [ 299.475580][T13384] bond3 (unregistering): (slave bridge3): Releasing active interface [ 299.530238][T18590] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 3: comm syz.7.5543: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 299.551931][T13384] bond5 (unregistering): (slave bridge4): Releasing active interface [ 299.584457][T17897] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.595121][T13384] bond8 (unregistering): (slave bridge5): Releasing active interface [ 299.645813][T13384] bond11 (unregistering): (slave bridge6): Releasing active interface [ 299.695583][T18717] xt_hashlimit: max too large, truncated to 1048576 [ 299.705097][T13384] bond17 (unregistering): (slave bridge7): Releasing active interface [ 299.716285][T18717] __nla_validate_parse: 15 callbacks suppressed [ 299.716304][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5569'. [ 299.774071][T13384] bond18 (unregistering): (slave bridge8): Releasing active interface [ 300.895527][T13384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.905083][T13384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.914417][T13384] bond0 (unregistering): Released all slaves [ 300.921873][T13384] bond1 (unregistering): Released all slaves [ 300.930644][T13384] bond2 (unregistering): Released all slaves [ 300.939040][T13384] bond3 (unregistering): Released all slaves [ 300.947582][T13384] bond4 (unregistering): Released all slaves [ 300.955806][T13384] bond5 (unregistering): Released all slaves [ 300.964755][T13384] bond6 (unregistering): Released all slaves [ 300.973354][T13384] bond7 (unregistering): Released all slaves [ 300.981863][T13384] bond8 (unregistering): Released all slaves [ 300.990361][T13384] bond9 (unregistering): Released all slaves [ 300.999473][T13384] bond10 (unregistering): Released all slaves [ 301.008024][T13384] bond11 (unregistering): Released all slaves [ 301.016559][T13384] bond12 (unregistering): Released all slaves [ 301.025451][T13384] bond13 (unregistering): Released all slaves [ 301.034139][T13384] bond14 (unregistering): Released all slaves [ 301.043344][T13384] bond15 (unregistering): Released all slaves [ 301.051995][T13384] bond16 (unregistering): Released all slaves [ 301.060419][T13384] bond17 (unregistering): Released all slaves [ 301.069142][T13384] bond18 (unregistering): Released all slaves [ 301.077418][T13384] bond19 (unregistering): Released all slaves [ 301.085902][T13384] bond20 (unregistering): Released all slaves [ 301.095068][T13384] bond21 (unregistering): Released all slaves [ 301.103551][T13384] bond22 (unregistering): Released all slaves [ 301.112272][T13384] bond23 (unregistering): Released all slaves [ 301.121035][T13384] bond24 (unregistering): Released all slaves [ 301.129882][T13384] bond25 (unregistering): Released all slaves [ 301.138573][T13384] bond26 (unregistering): Released all slaves [ 301.147368][T13384] bond27 (unregistering): Released all slaves [ 301.156172][T13384] bond28 (unregistering): Released all slaves [ 301.165542][T13384] bond29 (unregistering): Released all slaves [ 301.174638][T13384] bond30 (unregistering): Released all slaves [ 301.182980][T13384] bond31 (unregistering): Released all slaves [ 301.191943][T13384] bond32 (unregistering): Released all slaves [ 301.201005][T13384] bond33 (unregistering): Released all slaves [ 301.211080][T13384] bond34 (unregistering): Released all slaves [ 301.220112][T13384] bond35 (unregistering): Released all slaves [ 301.228638][T13384] bond36 (unregistering): Released all slaves [ 301.237320][T13384] bond37 (unregistering): Released all slaves [ 301.255251][T18717] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 301.310985][T13384] tipc: Disabling bearer [ 301.324987][T13384] tipc: Left network mode [ 301.351534][T18738] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 301.457396][T13384] hsr_slave_0: left promiscuous mode [ 301.463147][T13384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.470865][T13384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.482196][T13384] pimreg (unregistering): left allmulticast mode [ 301.502163][T13384] pim6reg (unregistering): left allmulticast mode [ 301.648789][T13384] team0 (unregistering): Port device team_slave_1 removed [ 301.658396][T13384] team0 (unregistering): Port device team_slave_0 removed [ 301.692574][T18680] lo speed is unknown, defaulting to 1000 [ 301.701460][T14042] smc: removing ib device  [ 301.714005][T18760] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.729085][T18760] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.945905][T18760] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.957032][T18760] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.012688][T18775] netlink: 'syz.2.5579': attribute type 1 has an invalid length. [ 302.041363][T18775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5579'. [ 302.059706][T18775] macvlan2: entered promiscuous mode [ 302.065123][T18775] macvlan2: entered allmulticast mode [ 302.071206][T18775] bond29: entered promiscuous mode [ 302.077009][T18775] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.085708][T18775] bond29: left promiscuous mode [ 302.119749][T18760] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.130157][T18760] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.156469][T18680] chnl_net:caif_netlink_parms(): no params data found [ 302.178010][T13384] IPVS: stop unused estimator thread 0... [ 302.184755][T18786] xt_hashlimit: size too large, truncated to 1048576 [ 302.266454][T18760] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.278330][T18760] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.367758][T18802] FAULT_INJECTION: forcing a failure. [ 302.367758][T18802] name failslab, interval 1, probability 0, space 0, times 0 [ 302.380501][T18802] CPU: 1 UID: 0 PID: 18802 Comm: syz.7.5585 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.380544][T18802] Tainted: [W]=WARN [ 302.380553][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.380570][T18802] Call Trace: [ 302.380577][T18802] [ 302.380586][T18802] __dump_stack+0x1d/0x30 [ 302.380649][T18802] dump_stack_lvl+0x95/0xd0 [ 302.380704][T18802] dump_stack+0x15/0x1b [ 302.380739][T18802] should_fail_ex+0x263/0x280 [ 302.380816][T18802] should_failslab+0x8c/0xb0 [ 302.380839][T18802] kmem_cache_alloc_noprof+0x68/0x490 [ 302.380918][T18802] ? dst_alloc+0xbd/0x100 [ 302.381014][T18802] dst_alloc+0xbd/0x100 [ 302.381039][T18802] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 302.381142][T18802] ip_route_output_flow+0x65/0x110 [ 302.381172][T18802] udp_sendmsg+0x13c3/0x15d0 [ 302.381197][T18802] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 302.381223][T18802] ? avc_has_perm+0x101/0x190 [ 302.381249][T18802] ? __pfx_udp_sendmsg+0x10/0x10 [ 302.381351][T18802] inet_sendmsg+0xac/0xd0 [ 302.381386][T18802] __sock_sendmsg+0x102/0x170 [ 302.381499][T18802] __sys_sendto+0x2b2/0x380 [ 302.381530][T18802] __x64_sys_sendto+0x76/0x90 [ 302.381553][T18802] x64_sys_call+0x29a7/0x3000 [ 302.381580][T18802] do_syscall_64+0xc0/0x2a0 [ 302.381623][T18802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.381647][T18802] RIP: 0033:0x7f23d2c5acb9 [ 302.381664][T18802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.381685][T18802] RSP: 002b:00007f23d16b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 302.381748][T18802] RAX: ffffffffffffffda RBX: 00007f23d2ed5fa0 RCX: 00007f23d2c5acb9 [ 302.381763][T18802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 302.381817][T18802] RBP: 00007f23d16b7090 R08: 00002000000002c0 R09: 0000000000000010 [ 302.381831][T18802] R10: 0000000000004060 R11: 0000000000000246 R12: 0000000000000001 [ 302.381845][T18802] R13: 00007f23d2ed6038 R14: 00007f23d2ed5fa0 R15: 00007ffcb11531d8 [ 302.381904][T18802] [ 302.408412][T18680] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.600425][T18680] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.614934][T18680] bridge_slave_0: entered allmulticast mode [ 302.621667][T18680] bridge_slave_0: entered promiscuous mode [ 302.632680][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 302.632697][ T29] audit: type=1400 audit(1769145648.481:11341): avc: denied { connect } for pid=18784 comm="syz.3.5581" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.660043][T18786] 9p: Unknown uid 00000000004294967295 [ 302.680198][ T29] audit: type=1326 audit(1769145648.531:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.2.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 302.680239][T18680] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.680355][T18680] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.726744][ T29] audit: type=1326 audit(1769145648.581:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.2.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 302.728945][T18680] bridge_slave_1: entered allmulticast mode [ 302.777916][T18680] bridge_slave_1: entered promiscuous mode [ 302.835254][T18680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.874294][T18823] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5589'. [ 302.878062][T18680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.893354][T18823] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5589'. [ 302.974742][ T7593] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.982971][ T7593] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.002822][T18828] netlink: 'syz.3.5592': attribute type 1 has an invalid length. [ 303.019304][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5592'. [ 303.032313][T18828] macvlan4: entered promiscuous mode [ 303.037841][T18828] macvlan4: entered allmulticast mode [ 303.044567][T18828] bond28: entered promiscuous mode [ 303.050128][T18828] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 303.065630][T18828] bond28: left promiscuous mode [ 303.137739][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5593'. [ 303.165231][T18680] team0: Port device team_slave_0 added [ 303.170873][ T7593] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.179180][ T7593] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.194663][T18680] team0: Port device team_slave_1 added [ 303.296948][ T29] audit: type=1326 audit(1769145649.151:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.2.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 303.304512][ T7593] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.320616][ T29] audit: type=1326 audit(1769145649.151:11345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.2.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 303.328835][ T7593] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.331248][T18680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.367819][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.393848][T18680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.404422][ T29] audit: type=1326 audit(1769145649.151:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.2.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 303.428078][ T29] audit: type=1326 audit(1769145649.151:11347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.2.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 303.451699][ T29] audit: type=1326 audit(1769145649.151:11348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.2.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 303.480872][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5598'. [ 303.502695][ T29] audit: type=1326 audit(1769145649.281:11349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.2.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 303.526340][ T29] audit: type=1326 audit(1769145649.281:11350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18843 comm="syz.2.5597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 303.552138][T18680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.552234][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5598'. [ 303.559221][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.568050][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5598'. [ 303.602903][T18680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.699772][T18846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.715996][ T57] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.724550][ T57] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.803215][T18680] hsr_slave_0: entered promiscuous mode [ 303.809692][T18680] hsr_slave_1: entered promiscuous mode [ 303.816141][T18680] debugfs: 'hsr0' already exists in 'hsr' [ 303.821917][T18680] Cannot create hsr debugfs directory [ 304.119920][ T4576] syz_tun (unregistering): left allmulticast mode [ 304.126628][ T4576] syz_tun (unregistering): left promiscuous mode [ 304.133052][ T4576] bridge0: port 3(syz_tun) entered disabled state [ 304.175372][T18680] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 304.195484][T18680] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 304.210588][T18680] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 304.228576][T18680] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 304.239560][T11343] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.306013][T11343] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.335671][T18864] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5602'. [ 304.370288][T11343] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.525323][T11343] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.543016][T18868] hsr_slave_0: left promiscuous mode [ 304.554398][T18868] hsr_slave_1: left promiscuous mode [ 304.653263][T18680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.679298][T11343] bridge_slave_1: left allmulticast mode [ 304.685062][T11343] bridge_slave_1: left promiscuous mode [ 304.690946][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.719442][T11343] bridge_slave_0: left promiscuous mode [ 304.725293][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.804855][T11343] bond1 (unregistering): (slave gretap1): Releasing active interface [ 304.867549][T11343] bond3 (unregistering): (slave bridge1): Releasing active interface [ 304.915105][T11343] bond7 (unregistering): (slave bridge2): Releasing active interface [ 305.131321][T18896] __nla_validate_parse: 2 callbacks suppressed [ 305.131344][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5609'. [ 305.182317][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5609'. [ 305.191302][T18897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5609'. [ 305.645263][T11343] bond1 (unregistering): Released all slaves [ 305.655739][T11343] bond2 (unregistering): Released all slaves [ 305.664885][T11343] bond3 (unregistering): Released all slaves [ 305.674007][T11343] bond4 (unregistering): Released all slaves [ 305.682634][T11343] bond5 (unregistering): Released all slaves [ 305.692356][T11343] bond6 (unregistering): Released all slaves [ 305.701269][T11343] bond7 (unregistering): Released all slaves [ 305.710380][T11343] bond8 (unregistering): Released all slaves [ 305.719795][T11343] bond9 (unregistering): Released all slaves [ 305.731577][T11343] bond10 (unregistering): Released all slaves [ 305.741541][T11343] bond11 (unregistering): Released all slaves [ 305.750564][T11343] bond12 (unregistering): Released all slaves [ 305.759909][T11343] bond13 (unregistering): Released all slaves [ 305.769730][T11343] bond14 (unregistering): Released all slaves [ 305.778962][T11343] bond15 (unregistering): Released all slaves [ 305.788393][T11343] bond16 (unregistering): Released all slaves [ 305.798105][T11343] bond17 (unregistering): Released all slaves [ 305.808553][T11343] bond18 (unregistering): Released all slaves [ 305.818169][T11343] bond19 (unregistering): Released all slaves [ 305.828022][T11343] bond20 (unregistering): Released all slaves [ 305.837417][T11343] bond21 (unregistering): Released all slaves [ 305.848778][T11343] bond22 (unregistering): Released all slaves [ 305.858104][T11343] bond0 (unregistering): Released all slaves [ 305.866973][T11343] bond23 (unregistering): Released all slaves [ 305.877848][T11343] bond24 (unregistering): Released all slaves [ 305.886955][T11343] bond25 (unregistering): Released all slaves [ 305.896178][T11343] bond26 (unregistering): Released all slaves [ 305.906600][T11343] bond27 (unregistering): Released all slaves [ 305.916239][T11343] bond28 (unregistering): Released all slaves [ 305.926596][T18896] bond23: option mode: unable to set because the bond device has slaves [ 305.951392][T18680] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.982645][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.989853][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.009293][T11343] tipc: Left network mode [ 306.017529][T18680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.028000][T18680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.042272][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.049382][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.073230][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'. [ 306.082228][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5610'. [ 306.097769][T18907] bond23: (slave bond0): Releasing active interface [ 306.108247][T18907] netlink: 'syz.2.5610': attribute type 10 has an invalid length. [ 306.117859][T11343] macvlan1: left promiscuous mode [ 306.136161][T11343] hsr_slave_0: left promiscuous mode [ 306.142637][T11343] hsr_slave_1: left promiscuous mode [ 306.158641][T11343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.166966][T11343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.207940][T11343] pim6reg (unregistering): left allmulticast mode [ 306.248779][T11343] team0 (unregistering): Port device team_slave_1 removed [ 306.259310][T11343] team0 (unregistering): Port device team_slave_0 removed [ 306.321147][T18877] lo speed is unknown, defaulting to 1000 [ 306.378300][T18680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.458914][T11343] IPVS: stop unused estimator thread 0... [ 306.485005][T18877] chnl_net:caif_netlink_parms(): no params data found [ 306.522510][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5611'. [ 306.597077][T18877] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.604390][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.613042][T18877] bridge_slave_0: entered allmulticast mode [ 306.621632][T18877] bridge_slave_0: entered promiscuous mode [ 306.643441][T18877] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.650681][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.677926][T18877] bridge_slave_1: entered allmulticast mode [ 306.684882][T18877] bridge_slave_1: entered promiscuous mode [ 306.696867][T18947] veth1_to_bond: entered promiscuous mode [ 306.732291][T18877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.755534][T18877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.798339][T18680] veth0_vlan: entered promiscuous mode [ 306.811523][T18877] team0: Port device team_slave_0 added [ 306.819576][T18680] veth1_vlan: entered promiscuous mode [ 306.827594][T18877] team0: Port device team_slave_1 added [ 306.866494][T18680] veth0_macvtap: entered promiscuous mode [ 306.881314][T18877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.888344][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.914333][T18877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.928477][T18680] veth1_macvtap: entered promiscuous mode [ 306.941264][T18680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.949375][T18877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.956390][T18877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.982550][T18877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.019734][T18680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.051141][T18877] hsr_slave_0: entered promiscuous mode [ 307.058478][T18877] hsr_slave_1: entered promiscuous mode [ 307.092223][ T1618] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.128924][ T1618] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.160894][ T1618] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.195453][ T1618] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.233555][T18946] veth1_to_bond: left promiscuous mode [ 307.277415][T18877] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 307.292060][T18877] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 307.313431][T18975] netlink: 'syz.8.5613': attribute type 33 has an invalid length. [ 307.321332][T18975] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5613'. [ 307.340887][T18877] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 307.350409][T18877] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 307.361123][T18975] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5613'. [ 307.408330][T18988] batadv_slave_0: entered promiscuous mode [ 307.438851][T18877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.458147][T18987] batadv_slave_0: left promiscuous mode [ 307.471645][T18877] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.494963][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.502073][T11343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.537432][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.544596][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.557063][T18995] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 307.734776][T18877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.811812][ T1618] Bluetooth: hci0: Frame reassembly failed (-84) [ 308.014780][T18877] veth0_vlan: entered promiscuous mode [ 308.032465][T18877] veth1_vlan: entered promiscuous mode [ 308.064130][T18877] veth0_macvtap: entered promiscuous mode [ 308.080391][T18877] veth1_macvtap: entered promiscuous mode [ 308.105053][T18877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.127528][T18877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.154020][ T2590] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.173437][ T2590] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.200590][ T2590] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.219736][ T2590] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.400964][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 308.400984][ T29] audit: type=1400 audit(1769145654.251:11359): avc: denied { connect } for pid=19024 comm="syz.9.5606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.428529][T19025] netlink: 'syz.9.5606': attribute type 46 has an invalid length. [ 308.462935][ T29] audit: type=1400 audit(1769145654.281:11360): avc: denied { write } for pid=19024 comm="syz.9.5606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.533572][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5619'. [ 308.542636][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5619'. [ 308.574518][T19031] netlink: 'syz.6.5619': attribute type 10 has an invalid length. [ 308.780620][T19037] loop6: detected capacity change from 0 to 1024 [ 308.809765][T19037] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 308.820749][T19037] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 308.863940][T19037] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.5621: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 308.929959][T19037] EXT4-fs (loop6): no journal found [ 308.946276][T19037] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.956183][T19037] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.017432][T19037] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.027353][T19037] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.098556][T19037] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.108440][T19037] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.175604][ T29] audit: type=1326 audit(1769145655.031:11361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 309.216121][T19037] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.224149][ T29] audit: type=1326 audit(1769145655.031:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 309.227519][T19037] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.251115][ T29] audit: type=1326 audit(1769145655.061:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 309.284558][ T29] audit: type=1326 audit(1769145655.061:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 309.308284][ T29] audit: type=1326 audit(1769145655.061:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8bbc4dacb9 code=0x7ffc0000 [ 309.333034][ T29] audit: type=1326 audit(1769145655.061:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bbc4daa22 code=0x7ffc0000 [ 309.356600][ T29] audit: type=1326 audit(1769145655.061:11367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8bbc49b58e code=0x7ffc0000 [ 309.380049][ T29] audit: type=1326 audit(1769145655.061:11368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19040 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8bbc4daae7 code=0x7ffc0000 [ 309.421727][T19047] vhci_hcd vhci_hcd.0: invalid port number 65 [ 309.428050][T19047] vhci_hcd vhci_hcd.0: invalid port number 65 [ 309.439193][T19047] loop9: detected capacity change from 0 to 512 [ 309.455340][T14042] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.463591][T14042] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.479020][T19047] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 309.503973][T19047] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 309.518096][T14042] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.526384][T14042] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.552730][T14042] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.561100][T14042] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.570445][T14042] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.578764][T14042] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.660157][T19055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.681670][T19055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.691420][T19055] bond1: (slave bond0): making interface the new active one [ 309.700588][T19055] bond1: (slave bond0): Enslaving as an active interface with an up link [ 309.711892][T19055] bridge0: port 3(syz_tun) entered blocking state [ 309.718652][T19055] bridge0: port 3(syz_tun) entered disabled state [ 309.725634][T19055] syz_tun: entered allmulticast mode [ 309.731792][T19055] syz_tun: entered promiscuous mode [ 309.738739][T19055] bridge0: port 3(syz_tun) entered blocking state [ 309.745307][T19055] bridge0: port 3(syz_tun) entered forwarding state [ 309.883796][ T3718] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 309.883836][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 309.917377][T19062] bond1: (slave bond0): Releasing active interface [ 309.933257][T19062] netlink: 'syz.9.5630': attribute type 10 has an invalid length. [ 309.970554][T19066] loop6: detected capacity change from 0 to 512 [ 309.984889][T19068] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 309.995036][T19062] bridge0: port 3(syz_tun) entered disabled state [ 310.001584][T19062] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.008988][T19062] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.017048][T19066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.029529][T19062] bridge0: port 3(syz_tun) entered blocking state [ 310.036273][T19062] bridge0: port 3(syz_tun) entered forwarding state [ 310.043111][T19062] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.050245][T19062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.057667][T19062] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.064844][T19062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.075179][T19066] EXT4-fs (loop6): too many log groups per flexible block group [ 310.078462][T19062] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 310.083217][T19066] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 310.099561][T19066] EXT4-fs (loop6): mount failed [ 310.129243][T19066] siw: device registration error -23 [ 310.189583][T19073] lo speed is unknown, defaulting to 1000 [ 310.261103][T19079] loop9: detected capacity change from 0 to 256 [ 310.276608][T19081] netlink: 'syz.6.5637': attribute type 1 has an invalid length. [ 310.352600][T19081] bond24: (slave bridge20): making interface the new active one [ 310.364351][T19081] bond24: (slave bridge20): Enslaving as an active interface with an up link [ 310.493186][T19093] __nla_validate_parse: 5 callbacks suppressed [ 310.493205][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 310.533990][T19093] bond22: option mode: unable to set because the bond device is up [ 310.544261][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 310.553165][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5640'. [ 310.580357][T19097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.593033][T19093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.600967][T19097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.613445][T19093] bond22: (slave bond0): making interface the new active one [ 310.624873][T19093] bond22: (slave bond0): Enslaving as an active interface with an up link [ 310.794353][T19105] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 310.883880][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5646'. [ 310.892795][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5646'. [ 310.943963][T19108] netlink: 'syz.6.5646': attribute type 10 has an invalid length. [ 311.024227][T19107] bond22: (slave bond0): Releasing active interface [ 311.183975][T19113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19113 comm=syz.8.5647 [ 311.263387][T19120] loop8: detected capacity change from 0 to 128 [ 311.319036][T19122] netlink: 'syz.6.5651': attribute type 1 has an invalid length. [ 311.396417][T19122] bond25: (slave bridge21): making interface the new active one [ 311.414478][T19122] bond25: (slave bridge21): Enslaving as an active interface with an up link [ 311.537545][T19132] veth1_to_bond: entered promiscuous mode [ 311.731147][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5661'. [ 311.740157][T19144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5661'. [ 311.749974][T19144] netlink: 'syz.9.5661': attribute type 10 has an invalid length. [ 311.759063][T19144] bridge0: port 3(syz_tun) entered disabled state [ 311.765688][T19144] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.772835][T19144] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.799057][T19146] loop8: detected capacity change from 0 to 128 [ 311.908696][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5663'. [ 311.943759][T19149] bond1: option mode: unable to set because the bond device is up [ 311.961512][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5663'. [ 311.970528][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5663'. [ 311.979756][T19131] veth1_to_bond: left promiscuous mode [ 311.986700][T19155] netlink: 'syz.8.5666': attribute type 1 has an invalid length. [ 312.058552][T19149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.086564][T19149] bond1: (slave bond0): making interface the new active one [ 312.107141][T19149] bond1: (slave bond0): Enslaving as an active interface with an up link [ 312.553053][T19175] netlink: 'syz.8.5673': attribute type 10 has an invalid length. [ 312.587362][T19175] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.594737][T19175] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.625587][T19175] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.632717][T19175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.640115][T19175] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.647261][T19175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.695917][T19175] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 312.707926][T19180] geneve2: entered promiscuous mode [ 312.713250][T19180] geneve2: entered allmulticast mode [ 312.729232][T19181] bridge0: port 3(syz_tun) entered blocking state [ 312.735931][T19181] bridge0: port 3(syz_tun) entered disabled state [ 312.757095][T19181] syz_tun: entered allmulticast mode [ 312.770428][T19181] syz_tun: entered promiscuous mode [ 312.787883][T19181] bridge0: port 3(syz_tun) entered blocking state [ 312.794418][T19181] bridge0: port 3(syz_tun) entered forwarding state [ 312.889161][T19185] veth1_to_bond: entered promiscuous mode [ 312.924090][T19187] netlink: 'syz.6.5678': attribute type 1 has an invalid length. [ 312.986755][T19187] bond26: (slave bridge22): making interface the new active one [ 313.014578][T19187] bond26: (slave bridge22): Enslaving as an active interface with an up link [ 313.093561][T19194] FAULT_INJECTION: forcing a failure. [ 313.093561][T19194] name failslab, interval 1, probability 0, space 0, times 0 [ 313.106582][T19194] CPU: 1 UID: 0 PID: 19194 Comm: syz.6.5680 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 313.106633][T19194] Tainted: [W]=WARN [ 313.106642][T19194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.106659][T19194] Call Trace: [ 313.106668][T19194] [ 313.106677][T19194] __dump_stack+0x1d/0x30 [ 313.106734][T19194] dump_stack_lvl+0x95/0xd0 [ 313.106758][T19194] dump_stack+0x15/0x1b [ 313.106779][T19194] should_fail_ex+0x263/0x280 [ 313.106801][T19194] should_failslab+0x8c/0xb0 [ 313.106829][T19194] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 313.106914][T19194] ? __alloc_skb+0x2f0/0x4b0 [ 313.106939][T19194] __alloc_skb+0x2f0/0x4b0 [ 313.106958][T19194] ? __alloc_skb+0x219/0x4b0 [ 313.106977][T19194] netlink_alloc_large_skb+0xbf/0xf0 [ 313.107030][T19194] netlink_sendmsg+0x40c/0x6f0 [ 313.107088][T19194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.107167][T19194] __sock_sendmsg+0x145/0x170 [ 313.107239][T19194] ____sys_sendmsg+0x31e/0x4a0 [ 313.107275][T19194] ___sys_sendmsg+0x195/0x1e0 [ 313.107320][T19194] __x64_sys_sendmsg+0xd4/0x160 [ 313.107365][T19194] x64_sys_call+0x17ba/0x3000 [ 313.107453][T19194] do_syscall_64+0xc0/0x2a0 [ 313.107490][T19194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.107519][T19194] RIP: 0033:0x7f64d6d3acb9 [ 313.107613][T19194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.107634][T19194] RSP: 002b:00007f64d5797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.107661][T19194] RAX: ffffffffffffffda RBX: 00007f64d6fb5fa0 RCX: 00007f64d6d3acb9 [ 313.107680][T19194] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 313.107697][T19194] RBP: 00007f64d5797090 R08: 0000000000000000 R09: 0000000000000000 [ 313.107715][T19194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.107755][T19194] R13: 00007f64d6fb6038 R14: 00007f64d6fb5fa0 R15: 00007ffe4abddaf8 [ 313.107818][T19194] [ 313.371984][T19198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.396763][T19184] veth1_to_bond: left promiscuous mode [ 313.436733][T19198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.478003][T19198] bond1: (slave bond0): making interface the new active one [ 313.516006][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 313.516024][ T29] audit: type=1326 audit(1769145659.371:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.556657][T19198] bond1: (slave bond0): Enslaving as an active interface with an up link [ 313.581863][ T29] audit: type=1326 audit(1769145659.401:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.605694][ T29] audit: type=1326 audit(1769145659.401:11577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.629368][ T29] audit: type=1326 audit(1769145659.401:11578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.653355][ T29] audit: type=1326 audit(1769145659.401:11579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.677015][ T29] audit: type=1326 audit(1769145659.401:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.700796][ T29] audit: type=1326 audit(1769145659.401:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.724518][ T29] audit: type=1326 audit(1769145659.401:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.748214][ T29] audit: type=1326 audit(1769145659.401:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.771904][ T29] audit: type=1326 audit(1769145659.401:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19212 comm="syz.9.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 313.828001][T19218] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 314.027923][T19230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.036231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.044664][T19230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.053739][T14029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.062423][T19229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.070762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.114343][T19234] veth1_to_bond: entered promiscuous mode [ 314.189772][T19244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.198342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.207518][T19242] bond1: option mode: unable to set because the bond device has slaves [ 314.274316][ T2590] bond1: (slave bond0): link status definitely down, disabling slave [ 314.282825][ T2590] bond1: now running without any active interface! [ 314.435662][T19253] loop8: detected capacity change from 0 to 128 [ 314.444592][T19253] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 314.454542][T19232] veth1_to_bond: left promiscuous mode [ 314.898888][T19267] 8021q: adding VLAN 0 to HW filter on device bond27 [ 314.935405][T19276] macvlan3: entered promiscuous mode [ 314.940823][T19276] macvlan3: entered allmulticast mode [ 314.978416][T19253] loop8: detected capacity change from 0 to 512 [ 314.997276][T19276] bond27: (slave macvlan3): Opening slave failed [ 315.193451][T19253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.241028][T19253] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.429046][T19309] loop9: detected capacity change from 0 to 512 [ 315.464349][T19309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 315.485201][T19309] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.527832][T19309] __nla_validate_parse: 10 callbacks suppressed [ 315.527855][T19309] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5718'. [ 315.672941][T19334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.682685][T19309] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5718: bg 0: block 360: padding at end of block bitmap is not set [ 316.174704][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5728'. [ 316.366420][T18877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 316.508167][T19388] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5731'. [ 316.638613][T19397] loop6: detected capacity change from 0 to 512 [ 316.654740][T19397] EXT4-fs: Mount option(s) incompatible with ext2 [ 316.725949][T19400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.742349][T19400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.865439][T18388] syz_tun (unregistering): left allmulticast mode [ 316.872101][T18388] syz_tun (unregistering): left promiscuous mode [ 316.878563][T18388] bridge0: port 2(syz_tun) entered disabled state [ 317.228288][T18680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.251424][T19403] loop8: detected capacity change from 0 to 1024 [ 317.258219][T19403] EXT4-fs: Ignoring removed orlov option [ 317.283405][T19403] ext4: Unknown parameter 'dont_hash' [ 317.503097][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5743'. [ 317.553560][T19436] netlink: 'syz.6.5746': attribute type 19 has an invalid length. [ 317.561640][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5746'. [ 317.572490][T19431] netlink: 'syz.9.5747': attribute type 33 has an invalid length. [ 317.580406][T19431] netlink: 164 bytes leftover after parsing attributes in process `syz.9.5747'. [ 317.590212][T19421] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 317.599579][T19421] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 317.617496][T19431] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5747'. [ 317.640303][T14029] bridge_slave_0: left allmulticast mode [ 317.646176][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.742250][T19444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.758622][T14029] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 317.768359][T19444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.796031][T14029] bond1 (unregistering): (slave gretap1): Releasing active interface [ 317.808538][T14029] bond4 (unregistering): (slave gretap2): Releasing active interface [ 317.833999][T19432] loop6: detected capacity change from 0 to 8186 [ 317.837842][T14029] dvmrp0 (unregistering): left allmulticast mode [ 317.864414][T14029] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 317.872878][T14029] bridge0 (unregistering): left promiscuous mode [ 317.917248][T14029] bond1 (unregistering): (slave bridge1): Releasing active interface [ 317.956670][T14029] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 317.984022][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5749'. [ 318.026031][T14029] bond5 (unregistering): (slave bridge3): Releasing active interface [ 318.076222][T14029] bond7 (unregistering): (slave bridge4): Releasing active interface [ 318.138968][T14029] bond8 (unregistering): (slave bridge5): Releasing active interface [ 318.334917][T19461] loop8: detected capacity change from 0 to 128 [ 319.229552][T19466] net_ratelimit: 6 callbacks suppressed [ 319.229567][T19466] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 319.348979][T19468] loop8: detected capacity change from 0 to 1024 [ 319.356163][T19468] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 319.366072][T19468] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 319.379072][T19468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.705827][T14029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.714742][T14029] bond_slave_0: left promiscuous mode [ 319.720891][T14029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.730785][T14029] bond_slave_1: left promiscuous mode [ 319.738063][T14029] bond0 (unregistering): Released all slaves [ 319.745740][T14029] bond1 (unregistering): Released all slaves [ 319.754509][T14029] bond2 (unregistering): Released all slaves [ 319.762897][T14029] bond3 (unregistering): Released all slaves [ 319.771642][T14029] bond4 (unregistering): Released all slaves [ 319.780236][T14029] bond5 (unregistering): Released all slaves [ 319.789556][T14029] bond6 (unregistering): Released all slaves [ 319.798203][T14029] bond7 (unregistering): Released all slaves [ 319.806845][T14029] bond8 (unregistering): Released all slaves [ 319.815292][T14029] bond9 (unregistering): Released all slaves [ 319.823442][T14029] bond10 (unregistering): Released all slaves [ 319.831975][T14029] bond11 (unregistering): Released all slaves [ 319.840708][T14029] bond12 (unregistering): Released all slaves [ 319.849342][T14029] bond13 (unregistering): Released all slaves [ 319.857974][T14029] bond14 (unregistering): Released all slaves [ 319.866705][T14029] bond15 (unregistering): Released all slaves [ 319.875650][T14029] bond16 (unregistering): Released all slaves [ 319.884679][T14029] bond17 (unregistering): Released all slaves [ 319.893326][T14029] bond18 (unregistering): Released all slaves [ 319.902552][T14029] bond19 (unregistering): Released all slaves [ 319.911080][T14029] bond20 (unregistering): Released all slaves [ 319.920094][T14029] bond21 (unregistering): Released all slaves [ 319.928763][T14029] bond22 (unregistering): Released all slaves [ 319.937608][T14029] bond23 (unregistering): Released all slaves [ 319.946384][T14029] bond24 (unregistering): Released all slaves [ 319.955035][T14029] bond25 (unregistering): Released all slaves [ 319.963356][T14029] bond26 (unregistering): Released all slaves [ 319.972109][T14029] bond27 (unregistering): Released all slaves [ 319.980620][T14029] bond28 (unregistering): Released all slaves [ 319.989442][T14029] bond29 (unregistering): Released all slaves [ 320.006169][T17897] bridge0: port 3(syz_tun) entered disabled state [ 320.014821][T17897] syz_tun (unregistering): left allmulticast mode [ 320.021282][T17897] syz_tun (unregistering): left promiscuous mode [ 320.027743][T17897] bridge0: port 3(syz_tun) entered disabled state [ 320.069365][T14029] tipc: Left network mode [ 320.074336][T18680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.098249][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 320.098267][ T29] audit: type=1326 audit(1769145665.951:11678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.134338][T14029] macvlan1: left promiscuous mode [ 320.144787][T14029] hsr_slave_0: left promiscuous mode [ 320.150628][T14029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.178108][T14029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.185308][ T29] audit: type=1326 audit(1769145665.981:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.209179][ T29] audit: type=1326 audit(1769145665.981:11680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.232811][ T29] audit: type=1326 audit(1769145665.981:11681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.256396][ T29] audit: type=1326 audit(1769145665.981:11682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.280065][ T29] audit: type=1326 audit(1769145665.981:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.303709][ T29] audit: type=1326 audit(1769145665.981:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.327309][ T29] audit: type=1326 audit(1769145665.981:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19477 comm="syz.6.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d6d3acb9 code=0x7ffc0000 [ 320.384948][T19490] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 320.412856][T14029] pim6reg (unregistering): left allmulticast mode [ 320.470842][ T29] audit: type=1326 audit(1769145666.311:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.9.5761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 320.494491][ T29] audit: type=1326 audit(1769145666.311:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.9.5761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8bb166acb9 code=0x7ffc0000 [ 320.494966][T19497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.577457][T14029] team0 (unregistering): Port device team_slave_1 removed [ 320.584882][T19497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.599989][T14029] team0 (unregistering): Port device team_slave_0 removed [ 320.635750][T19506] loop9: detected capacity change from 0 to 1024 [ 320.656306][T19433] lo speed is unknown, defaulting to 1000 [ 320.662266][ T3488] lo speed is unknown, defaulting to 1000 [ 320.668155][ T3488] syz2: Port: 1 Link DOWN [ 320.677658][T19506] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 320.688684][T19506] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 320.751117][T19506] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #2: comm syz.9.5764: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 320.773365][T19506] EXT4-fs (loop9): no journal found [ 320.812259][T19433] chnl_net:caif_netlink_parms(): no params data found [ 320.847788][T19506] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.919770][T19506] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.961587][T19433] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.968790][T19433] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.982550][T19433] bridge_slave_0: entered allmulticast mode [ 320.989248][T19433] bridge_slave_0: entered promiscuous mode [ 321.001604][T19538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5766'. [ 321.013013][T19433] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.020317][T19433] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.029195][T19433] bridge_slave_1: entered allmulticast mode [ 321.036444][T19433] bridge_slave_1: entered promiscuous mode [ 321.064310][T19506] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.075025][T19542] FAULT_INJECTION: forcing a failure. [ 321.075025][T19542] name failslab, interval 1, probability 0, space 0, times 0 [ 321.087896][T19542] CPU: 0 UID: 0 PID: 19542 Comm: syz.6.5767 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 321.087997][T19542] Tainted: [W]=WARN [ 321.088008][T19542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.088026][T19542] Call Trace: [ 321.088035][T19542] [ 321.088046][T19542] __dump_stack+0x1d/0x30 [ 321.088087][T19542] dump_stack_lvl+0x95/0xd0 [ 321.088118][T19542] dump_stack+0x15/0x1b [ 321.088215][T19542] should_fail_ex+0x263/0x280 [ 321.088245][T19542] should_failslab+0x8c/0xb0 [ 321.088271][T19542] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 321.088335][T19542] ? __alloc_skb+0x2f0/0x4b0 [ 321.088363][T19542] __alloc_skb+0x2f0/0x4b0 [ 321.088383][T19542] ? __alloc_skb+0x219/0x4b0 [ 321.088457][T19542] netlink_alloc_large_skb+0xbf/0xf0 [ 321.088483][T19542] netlink_sendmsg+0x40c/0x6f0 [ 321.088538][T19542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.088654][T19542] __sock_sendmsg+0x145/0x170 [ 321.088696][T19542] ____sys_sendmsg+0x31e/0x4a0 [ 321.088733][T19542] ___sys_sendmsg+0x195/0x1e0 [ 321.088859][T19542] __x64_sys_sendmsg+0xd4/0x160 [ 321.088978][T19542] x64_sys_call+0x17ba/0x3000 [ 321.089014][T19542] do_syscall_64+0xc0/0x2a0 [ 321.089123][T19542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.089155][T19542] RIP: 0033:0x7f64d6d3acb9 [ 321.089176][T19542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.089202][T19542] RSP: 002b:00007f64d5797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.089230][T19542] RAX: ffffffffffffffda RBX: 00007f64d6fb5fa0 RCX: 00007f64d6d3acb9 [ 321.089249][T19542] RDX: 0000000000000810 RSI: 0000200000000a40 RDI: 0000000000000003 [ 321.089285][T19542] RBP: 00007f64d5797090 R08: 0000000000000000 R09: 0000000000000000 [ 321.089298][T19542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.089310][T19542] R13: 00007f64d6fb6038 R14: 00007f64d6fb5fa0 R15: 00007ffe4abddaf8 [ 321.089331][T19542] [ 321.297913][T19433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.309129][T14029] IPVS: stop unused estimator thread 0... [ 321.320880][T19506] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.356726][T19433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.409029][T19551] openvswitch: netlink: Key type 1542 is out of range max 32 [ 321.428968][T19433] team0: Port device team_slave_0 added [ 321.459481][T14038] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.485094][T19452] chnl_net:caif_netlink_parms(): no params data found [ 321.515814][T14038] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525187][T19433] team0: Port device team_slave_1 added [ 321.534336][T14029] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.536141][T19566] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5771'. [ 321.577932][T14038] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.591891][T14038] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.606139][T19433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.613140][T19433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.639150][T19433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.657922][T19574] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.680029][T14029] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.703915][T19433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.710945][T19433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.736942][T19433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.768230][T19583] loop9: detected capacity change from 0 to 128 [ 321.787054][T19583] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 321.875693][T19593] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5777'. [ 321.892676][T19452] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.899879][T19452] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.900650][T19593] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5777'. [ 321.925015][T19452] bridge_slave_0: entered allmulticast mode [ 321.931858][T19452] bridge_slave_0: entered promiscuous mode [ 321.941411][T14029] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.962142][T19433] hsr_slave_0: entered promiscuous mode [ 321.968656][T19433] hsr_slave_1: entered promiscuous mode [ 321.979052][T19433] debugfs: 'hsr0' already exists in 'hsr' [ 321.985042][T19433] Cannot create hsr debugfs directory [ 321.990736][T19452] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.997943][T19452] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.021447][T19452] bridge_slave_1: entered allmulticast mode [ 322.032589][T19452] bridge_slave_1: entered promiscuous mode [ 322.049533][T14029] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.105682][T19452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.128332][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.144456][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.165083][T19452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.201524][T19452] team0: Port device team_slave_0 added [ 322.213210][T19452] team0: Port device team_slave_1 added [ 322.261771][T19583] loop9: detected capacity change from 0 to 512 [ 322.307823][T19452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.315021][T19452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.341074][T19452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.373493][T14029] bridge_slave_1: left allmulticast mode [ 322.379336][T14029] bridge_slave_1: left promiscuous mode [ 322.385102][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.400856][T14029] bridge_slave_0: left allmulticast mode [ 322.406602][T14029] bridge_slave_0: left promiscuous mode [ 322.412340][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.429101][T19583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.447050][T19617] netlink: 'syz.6.5779': attribute type 1 has an invalid length. [ 322.465309][T19583] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.517786][T18877] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.528706][T14029] bond1 (unregistering): (slave bond0): Releasing active interface [ 322.546974][T14029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.557754][T14029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.568353][T14029] bond0 (unregistering): Released all slaves [ 322.576497][T14029] bond1 (unregistering): Released all slaves [ 322.587025][T19452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.594098][T19452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.620143][T19452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.640348][T19628] FAULT_INJECTION: forcing a failure. [ 322.640348][T19628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.653487][T19628] CPU: 1 UID: 0 PID: 19628 Comm: syz.9.5781 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 322.653619][T19628] Tainted: [W]=WARN [ 322.653628][T19628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.653646][T19628] Call Trace: [ 322.653654][T19628] [ 322.653661][T19628] __dump_stack+0x1d/0x30 [ 322.653696][T19628] dump_stack_lvl+0x95/0xd0 [ 322.653726][T19628] dump_stack+0x15/0x1b [ 322.653753][T19628] should_fail_ex+0x263/0x280 [ 322.653788][T19628] should_fail+0xb/0x20 [ 322.653811][T19628] should_fail_usercopy+0x1a/0x20 [ 322.653852][T19628] _copy_from_user+0x1c/0xb0 [ 322.653883][T19628] ___sys_sendmsg+0xc1/0x1e0 [ 322.653975][T19628] __x64_sys_sendmsg+0xd4/0x160 [ 322.654085][T19628] x64_sys_call+0x17ba/0x3000 [ 322.654119][T19628] do_syscall_64+0xc0/0x2a0 [ 322.654240][T19628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.654263][T19628] RIP: 0033:0x7f8bb166acb9 [ 322.654284][T19628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.654315][T19628] RSP: 002b:00007f8bb00c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.654343][T19628] RAX: ffffffffffffffda RBX: 00007f8bb18e5fa0 RCX: 00007f8bb166acb9 [ 322.654358][T19628] RDX: 0000000020000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 322.654392][T19628] RBP: 00007f8bb00c7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.654405][T19628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.654421][T19628] R13: 00007f8bb18e6038 R14: 00007f8bb18e5fa0 R15: 00007ffce3855ff8 [ 322.654447][T19628] [ 322.662212][T19621] bond28: (slave bridge23): making interface the new active one [ 322.838413][T19621] bond28: (slave bridge23): Enslaving as an active interface with an up link [ 322.839412][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5783'. [ 322.866612][T19625] macvlan3: entered promiscuous mode [ 322.872100][T19625] macvlan3: entered allmulticast mode [ 322.878407][T19625] bond28: entered promiscuous mode [ 322.883567][T19625] bridge23: entered promiscuous mode [ 322.886275][T19630] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5782'. [ 322.890496][T19625] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 322.900305][T19630] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5782'. [ 322.912104][T19625] bond28: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 322.921701][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5783'. [ 322.931643][T19625] bond28: left promiscuous mode [ 322.939684][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5783'. [ 322.944107][T19625] bridge23: left promiscuous mode [ 322.969394][T19632] bond1: option mode: unable to set because the bond device has slaves [ 322.979617][T14029] hsr_slave_0: left promiscuous mode [ 322.985538][T14029] hsr_slave_1: left promiscuous mode [ 322.991183][T14029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.998598][T14029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.008229][T14029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.015696][T14029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.027678][T14029] veth1_macvtap: left promiscuous mode [ 323.033257][T14029] veth0_macvtap: left promiscuous mode [ 323.039209][T14029] veth1_vlan: left promiscuous mode [ 323.044588][T14029] veth0_vlan: left promiscuous mode [ 323.132093][T14029] team0 (unregistering): Port device team_slave_1 removed [ 323.143542][T14029] team0 (unregistering): Port device team_slave_0 removed [ 323.207676][T19452] hsr_slave_0: entered promiscuous mode [ 323.214230][T19452] hsr_slave_1: entered promiscuous mode [ 323.220277][T19452] debugfs: 'hsr0' already exists in 'hsr' [ 323.226055][T19452] Cannot create hsr debugfs directory [ 323.237934][T19638] tipc: Started in network mode [ 323.243079][T19638] tipc: Node identity 820e4a7b1c3b, cluster identity 4711 [ 323.250616][T19638] tipc: Enabled bearer , priority 0 [ 323.260971][T19638] syzkaller0: entered promiscuous mode [ 323.266540][T19638] syzkaller0: entered allmulticast mode [ 323.298695][T14028] bond1: (slave bond0): link status definitely down, disabling slave [ 323.313814][T14028] bond1: now running without any active interface! [ 323.325514][T19638] tipc: Resetting bearer [ 323.336819][T19650] netlink: 'syz.9.5786': attribute type 8 has an invalid length. [ 323.344737][T19650] netem: change failed [ 323.357633][T19637] tipc: Resetting bearer [ 323.365520][T19637] tipc: Disabling bearer [ 323.371980][T19652] loop6: detected capacity change from 0 to 128 [ 323.595753][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5793'. [ 323.617868][T19685] bond22: option mode: unable to set because the bond device is up [ 323.636265][T19680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.645863][T19685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.675532][T19685] bond22: (slave bond0): making interface the new active one [ 323.695522][T19685] bond22: (slave bond0): Enslaving as an active interface with an up link [ 323.711881][T19680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.727572][T19680] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 323.741629][T19680] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 323.767765][T19697] macvlan2: entered promiscuous mode [ 323.773121][T19697] macvlan2: entered allmulticast mode [ 323.779233][T19697] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 323.862032][T19706] netlink: 'syz.6.5798': attribute type 8 has an invalid length. [ 323.869945][T19706] netem: change failed [ 323.966161][T19699] veth1_to_bond: entered promiscuous mode [ 323.984805][T19698] veth1_to_bond: left promiscuous mode [ 324.027077][T19433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.048545][T19433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.075973][T19433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.093885][T19433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.132850][ T2] ================================================================== [ 324.141014][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 324.147564][ T2] [ 324.149912][ T2] read-write to 0xffffffff86a60008 of 4 bytes by task 18680 on cpu 1: [ 324.158089][ T2] free_pid+0xb9/0x1d0 [ 324.162191][ T2] free_pids+0x54/0xb0 [ 324.166311][ T2] release_task+0x9a7/0xb60 [ 324.170854][ T2] wait_consider_task+0x1160/0x1670 [ 324.176078][ T2] __do_wait+0xf9/0x510 [ 324.180263][ T2] do_wait+0xb6/0x240 [ 324.184268][ T2] kernel_wait4+0x19f/0x210 [ 324.188801][ T2] __x64_sys_wait4+0x91/0x120 [ 324.193499][ T2] x64_sys_call+0x28ec/0x3000 [ 324.198206][ T2] do_syscall_64+0xc0/0x2a0 [ 324.202732][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.208647][ T2] [ 324.210982][ T2] read to 0xffffffff86a60008 of 4 bytes by task 2 on cpu 0: [ 324.218274][ T2] copy_process+0x16e4/0x1f10 [ 324.222972][ T2] kernel_clone+0x16b/0x5b0 [ 324.227493][ T2] kernel_thread+0xe5/0x120 [ 324.232019][ T2] kthreadd+0x26b/0x330 [ 324.236199][ T2] ret_from_fork+0x148/0x280 [ 324.240811][ T2] ret_from_fork_asm+0x1a/0x30 [ 324.245598][ T2] [ 324.247937][ T2] value changed: 0x80000152 -> 0x80000151 [ 324.253666][ T2] [ 324.255997][ T2] Reported by Kernel Concurrency Sanitizer on: [ 324.262158][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.273025][ T2] Tainted: [W]=WARN [ 324.276861][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.286932][ T2] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 324.380742][T19433] kthread_run failed with err -4 [ 324.451552][T19737] bridge0: port 3(syz_tun) entered disabled state [ 324.458204][T19737] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.465580][T19737] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.486768][T19737] wireguard0: entered promiscuous mode [ 324.492327][T19737] wireguard0: entered allmulticast mode [ 324.544872][T19727] syz_tun (unregistering): left allmulticast mode [ 324.551361][T19727] syz_tun (unregistering): left promiscuous mode [ 324.557919][T19727] bridge0: port 3(syz_tun) entered disabled state [ 324.592865][T19724] syz_tun (unregistering): left allmulticast mode [ 324.599511][T19724] syz_tun (unregistering): left promiscuous mode [ 324.605941][T19724] bridge0: port 3(syz_tun) entered disabled state [ 324.710918][T19737] syz_tun (unregistering): left allmulticast mode [ 324.717440][T19737] syz_tun (unregistering): left promiscuous mode [ 324.723972][T19737] bridge0: port 3(syz_tun) entered disabled state [ 325.087279][T14028] bridge_slave_1: left allmulticast mode [ 325.092979][T14028] bridge_slave_1: left promiscuous mode [ 325.098789][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.107449][T14028] bridge_slave_0: left allmulticast mode [ 325.113241][T14028] bridge_slave_0: left promiscuous mode [ 325.119011][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.186936][T14028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.197525][T14028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.207350][T14028] bond0 (unregistering): Released all slaves [ 325.268393][T14028] hsr_slave_0: left promiscuous mode [ 325.274353][T14028] hsr_slave_1: left promiscuous mode [ 325.280030][T14028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.288217][T14028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.331572][T14028] team0 (unregistering): Port device team_slave_1 removed [ 325.342226][T14028] team0 (unregistering): Port device team_slave_0 removed [ 325.707805][T14028] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.749271][T14028] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.796879][T14028] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.846586][T14028] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.909074][T14028] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.918961][T14028] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.995593][T14028] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.005550][T14028] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.045739][T14028] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.055734][T14028] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.105781][T14028] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.115591][T14028] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.216608][T14028] bridge_slave_1: left allmulticast mode [ 326.222311][T14028] bridge_slave_1: left promiscuous mode [ 326.228229][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.236300][T14028] bridge_slave_0: left allmulticast mode [ 326.242091][T14028] bridge_slave_0: left promiscuous mode [ 326.247936][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.257339][T14028] team0: left allmulticast mode [ 326.262239][T14028] team_slave_0: left allmulticast mode [ 326.267788][T14028] team_slave_1: left allmulticast mode [ 326.273298][T14028] team0: left promiscuous mode [ 326.278113][T14028] team_slave_0: left promiscuous mode [ 326.283583][T14028] team_slave_1: left promiscuous mode [ 326.289243][T14028] bridge0: port 4(team0) entered disabled state [ 326.296997][T14028] bridge_slave_1: left allmulticast mode [ 326.302714][T14028] bridge_slave_1: left promiscuous mode [ 326.308505][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.317218][T14028] bridge_slave_0: left allmulticast mode [ 326.323003][T14028] bridge_slave_0: left promiscuous mode [ 326.328844][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.350243][T14028] bridge_slave_1: left allmulticast mode [ 326.355981][T14028] bridge_slave_1: left promiscuous mode [ 326.361910][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.369945][T14028] bridge_slave_0: left allmulticast mode [ 326.375659][T14028] bridge_slave_0: left promiscuous mode [ 326.381463][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.491050][T14028] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 326.585285][T14028] bond1 (unregistering): (slave bond0): Releasing active interface [ 326.594864][T14028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.607918][T14028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.617479][T14028] bond0 (unregistering): Released all slaves [ 326.625294][T14028] bond1 (unregistering): Released all slaves [ 326.634501][T14028] bond2 (unregistering): Released all slaves [ 326.659519][T14028] bond2 (unregistering): (slave gretap2): Releasing active interface [ 326.678564][T14028] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 326.747052][T14028] bond1 (unregistering): (slave bridge1): Releasing active interface [ 327.634988][T14028] bond24 (unregistering): (slave bridge20): Releasing active interface [ 327.714845][T14028] bond25 (unregistering): (slave bridge21): Releasing active interface [ 327.775086][T14028] bond26 (unregistering): (slave bridge22): Releasing active interface [ 327.834869][T14028] bond28 (unregistering): (slave bridge23): Releasing active interface [ 327.894977][T14028] bond22 (unregistering): (slave bond0): Releasing active interface [ 327.904742][T14028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.914240][T14028] bond0 (unregistering): Released all slaves [ 327.921910][T14028] bond1 (unregistering): Released all slaves [ 327.930732][T14028] bond2 (unregistering): Released all slaves [ 327.939379][T14028] bond3 (unregistering): Released all slaves [ 327.947990][T14028] bond4 (unregistering): Released all slaves [ 327.956359][T14028] bond5 (unregistering): Released all slaves [ 327.965466][T14028] bond6 (unregistering): Released all slaves [ 327.974706][T14028] bond7 (unregistering): Released all slaves [ 327.983282][T14028] bond8 (unregistering): Released all slaves [ 327.992042][T14028] bond9 (unregistering): Released all slaves [ 328.001092][T14028] bond10 (unregistering): Released all slaves [ 328.009864][T14028] bond11 (unregistering): Released all slaves [ 328.018635][T14028] bond12 (unregistering): Released all slaves [ 328.027621][T14028] bond13 (unregistering): Released all slaves [ 328.036602][T14028] bond14 (unregistering): Released all slaves [ 328.045436][T14028] bond15 (unregistering): Released all slaves [ 328.054239][T14028] bond16 (unregistering): Released all slaves [ 328.063136][T14028] bond17 (unregistering): Released all slaves [ 328.071943][T14028] bond18 (unregistering): Released all slaves [ 328.081085][T14028] bond19 (unregistering): Released all slaves [ 328.089941][T14028] bond20 (unregistering): Released all slaves [ 328.098664][T14028] bond21 (unregistering): Released all slaves [ 328.107824][T14028] bond22 (unregistering): Released all slaves [ 328.116551][T14028] bond23 (unregistering): Released all slaves [ 328.125286][T14028] bond24 (unregistering): Released all slaves [ 328.134329][T14028] bond25 (unregistering): Released all slaves [ 328.142911][T14028] bond26 (unregistering): Released all slaves [ 328.152259][T14028] bond27 (unregistering): Released all slaves [ 328.160650][T14028] bond28 (unregistering): Released all slaves [ 328.206036][T14028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.215733][T14028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.225161][T14028] bond0 (unregistering): Released all slaves [ 328.264132][T14028] tipc: Left network mode [ 328.268680][T14028] tipc: Disabling bearer [ 328.274068][T14028] tipc: Left network mode [ 328.300900][T14028] hsr_slave_0: left promiscuous mode [ 328.309041][T14028] hsr_slave_1: left promiscuous mode [ 328.315012][T14028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.322517][T14028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.330510][T14028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.338013][T14028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.347531][T14028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.355113][T14028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.364781][T14028] hsr_slave_0: left promiscuous mode [ 328.370674][T14028] hsr_slave_1: left promiscuous mode [ 328.376782][T14028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.384482][T14028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.395710][T14028] veth1_macvtap: left promiscuous mode [ 328.401391][T14028] veth0_macvtap: left promiscuous mode [ 328.407778][T14028] veth1_vlan: left promiscuous mode [ 328.413040][T14028] veth0_vlan: left promiscuous mode [ 328.420573][T14028] veth0_virt_wifi: left promiscuous mode [ 328.426347][T14028] veth1_macvtap: left promiscuous mode [ 328.431980][T14028] veth1_vlan: left promiscuous mode [ 328.437493][T14028] veth0_vlan: left promiscuous mode [ 328.559542][T14028] team0 (unregistering): Port device team_slave_1 removed [ 328.570864][T14028] team0 (unregistering): Port device team_slave_0 removed [ 328.622169][T14028] pim6reg (unregistering): left allmulticast mode [ 328.659455][T14028] team0 (unregistering): Port device team_slave_1 removed [ 328.669604][T14028] team0 (unregistering): Port device team_slave_0 removed [ 328.729842][T14028] team0 (unregistering): Port device team_slave_1 removed [ 328.739345][T14028] team0 (unregistering): Port device team_slave_0 removed [ 329.426670][T14028] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.485471][T14028] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.517226][T14028] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.565490][T14028] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.631605][T14028] bridge_slave_1: left allmulticast mode [ 329.637351][T14028] bridge_slave_1: left promiscuous mode [ 329.643098][T14028] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.653131][T14028] bridge_slave_0: left allmulticast mode [ 329.658884][T14028] bridge_slave_0: left promiscuous mode [ 329.664682][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.718604][T14028] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 329.765111][T14028] bond1 (unregistering): (slave bond0): Releasing active interface [ 329.774762][T14028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.784594][T14028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.794223][T14028] bond0 (unregistering): Released all slaves [ 329.801765][T14028] bond1 (unregistering): Released all slaves [ 329.848615][T14028] hsr_slave_0: left promiscuous mode [ 329.854676][T14028] hsr_slave_1: left promiscuous mode [ 329.860408][T14028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.867892][T14028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.876985][T14028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.884497][T14028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.893669][T14028] veth1_macvtap: left promiscuous mode [ 329.900057][T14028] veth0_macvtap: left promiscuous mode [ 329.905710][T14028] veth1_vlan: left promiscuous mode [ 329.911003][T14028] veth0_vlan: left promiscuous mode [ 329.991024][T14028] team0 (unregistering): Port device team_slave_1 removed [ 330.001249][T14028] team0 (unregistering): Port device team_slave_0 removed