last executing test programs: 4m52.830866797s ago: executing program 32 (id=552): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e21, 0x8, @local}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_clone3(&(0x7f00000006c0)={0x241000800, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0, {0x1c}, &(0x7f0000000500)=""/127, 0x7f, &(0x7f0000000640)=""/84, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) getpgrp(r3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0xb, 0x2020001, 0xb, 0x0, 0x3, 0x0, 0x20000007}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x50000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f0000000400)=[{0x8f2, 0x1, 0x4, 0x7ffc0002}, {0x5, 0x8, 0x80, 0x100}, {0x6bfb, 0x13, 0x2, 0x7}, {0x2, 0x7, 0x7, 0xff}]}) fremovexattr(r5, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') r7 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r7, 0x0, 0x0, 0x400001) r8 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)=',(*\x00', 0x0) pwritev2(r5, &(0x7f00000003c0)=[{&(0x7f00000001c0)="c38f1617d2c565e0a2f1fb5bda6bfdd8f15ee76118df7c878ee94d531c63a8227b02f9807008114b48f0f1d6adc82065a47a4a251b70525dcae734ac1ab7d36d33703f11a8c6c3213e133fd2e686fd4b621d349caac39e347f7d473f55d572e3fb2061753a28da61e48ec7b124f2156d58bb8128d01dfbbbfab0cff0fce22bab0f5ec75ce4236f2d65e7408f68d918c7e7235216ad1f7fea3d55dc7b0db54bb8d64ed574bfef1764becaf8e035349db1069ee04b63e46dae1954e6969bcd5e58c9a4c6b51154df13a9c7f58f2894e5355bd950cbc54677a9e090f6e89083086647bebac5c8f17273ebd5f1d1f3b4d48e03d8", 0xf2}, {&(0x7f00000002c0)="db53d8ffc2c2805882c97f42a41573d9763d7151f79d26b59e1af1df135cad3cccfd575ab628485bab7e65ac68f5f879574743d1ca1293be1c490a87f3109825a5381e1b0f5431c21e28dc676e5470f9181fe5a0acedc7c54c7c2bf72c5faa428f6c8ec4a2a4c677b48f56c54689363ee8c07ea61e30b0537ad4a9c29d95da674836326376e736bc185ef8fabd3f", 0x8e}, {&(0x7f0000000380)="6c1d76be085979c19ce6543812d3976ca939d4612202719e59ae10f388dca08ac7ec3649b805264eeeb26b43b9", 0x2d}], 0x3, 0xf, 0xa4eb, 0x1) 4m18.649577911s ago: executing program 33 (id=783): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r1, &(0x7f00000002c0)='LU', &(0x7f0000000440)=""/11}, 0x20) mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x4, 0x2, 0x1, 0x0, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRES16=r4], 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2, 0x9, 0xfff8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$rds(0x15, 0x5, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000000c0)) r10 = socket(0x10, 0x3, 0x0) fremovexattr(r10, &(0x7f0000000180)=@known='security.apparmor\x00') setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 3m58.753243072s ago: executing program 34 (id=1405): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x1f9}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x56f, &(0x7f00000000c0)={0x0, 0x6601, 0x8000, 0x3, 0x8a, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x810, r7, 0x686b3000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000b40)="c1188619b95d02ff4284860186dd", 0x0, 0x8001fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14060000000000000005000000000000000000008ac1b8fc0975667f2bb3de2e2806a0b1a8935cadf33b0fe3c59dc19edb4feb7f46c8250790503df390075dea1cacf822c9a4b6a4b017b3133449ae29131bb9fb8ae73123ec50bb040a5085bd1ab4d09c44f2a751b38299cc0844c1356e63ee1fa2627f564102f81f3c9aa7087063986047c7de3e9e75fee099de068fc462807d33"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 3m24.558281986s ago: executing program 35 (id=1880): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000040)=0x14, 0x4) (async) sendto$inet6(r0, &(0x7f0000000100)="da", 0x1, 0x4004070, &(0x7f0000000000)={0xa, 0x4e21, 0xffffff00, @local, 0x7}, 0x1c) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socket(0x11, 0x3, 0x0) (async) fadvise64(0xffffffffffffffff, 0x2400000, 0x2, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000901000010000000000000000000500000a480000000c0a010100000000000000000e0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100923100000800034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000004c0)) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x101000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x9f, 0x7f, &(0x7f0000000340)="f36868a7db8ea9c7093a9dfca15d659c1e48d336ffe83d1e9c06b8fed7a8864ef7b060e5b4297ee56c5f7a8e319b7471003fc429205a89771ffe746988676374766e317b8b5c04861e9a5e0fa0adb5c4a453bd0a280b165efb67305302e4bb33f6d841886e0d83397201ac75b84e6cd82203b39ebd961fd817cac6b4bb85b14944af936a9026ef139749bc0b180556ae2d4bb4909de986b765086d862564e8", &(0x7f00000001c0)=""/127, 0x2, 0x0, 0x11, 0xc6, &(0x7f0000000480)="67fc05b48ae5248433814ef9a00f9dddd4", &(0x7f0000000580)="9eb9a7e60b3313e001f241a00e07aed24e0982308f409ef82e7b1620d9ca4daf3c5314bfac67534104790d2ad070bbb2abb4d6bcbc2777561aeb1baae69f9aeb2905beabce77abe2ad3cddf5eddfc62486665f27ca31ba7edbaba51926a3102d9a6ce07900dad3770e1fb14aa91eb271d7b015b4a25f590d9c719ae3042c9b59b5159296270b822a9e93da3aaf83fc7017cfc92919748c368108251fd0e348b51cd47d75e6c0d9b226c842a087e21d54c5d5b4c2ead8df29b7a5cb22c3a9906c4c3d198ba79e", 0x1, 0x0, 0x3}, 0x50) (async) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) 2m3.188332353s ago: executing program 36 (id=3232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01010000000000000000020000000900010073797a30000000000900020073797a30000000002c000000180a01010000000000000000020000040c0005400002000000000002090001007379"], 0x80}}, 0x0) 1m46.866007885s ago: executing program 37 (id=3536): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xcc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000008, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@data_err_ignore}, {@dioread_nolock}], [{@context={'context', 0x3d, 'user_u'}}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") 1m41.581672784s ago: executing program 7 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r1 = socket$kcm(0x10, 0x6, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000, 0x8}, 0x0, 0x10000, 0xda, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0, 0xffffffffffffffff, r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1m41.393146625s ago: executing program 7 (id=3612): syz_pidfd_open(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\b\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 1m41.353152197s ago: executing program 7 (id=3614): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'geneve1\x00', 0x4}, 0x18) open_by_handle_at(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="08000000fe000000000000"], 0x755c00) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xbc, 0xa2, &(0x7f00000001c0)="044502c3b103e95a4659b9797d666f71d47eb9c842913c446dd64230b598c327ae1f7ff0d4f64a8b3c9b805a1c8ed15248ecc1fc7ff359f5b93c622301f33116bef79cd250c435ca12c98e028773e91bd30af7715a267aae96ed51664bb71bdc268494c9a475e2bf04e52c4a148bee166efd477a6c4ce3151f9abf219232ef47310592c26af92d9a53e15d84c73178f8f5d6cc20dc958b1e2553678a643289110d9fb5beaf87e0625fdfbe2ee7cceb91f484d6cb8e088b6dc1a98887", &(0x7f0000000280)=""/162, 0x4, 0x0, 0xdc, 0x5d, &(0x7f0000000340)="7580503d86cf11e32ba0fd1afb1591200e0c438e735d663dea0332791cf774193e7f70af26789c1b33384ad126a085fe17efa0051b6bab488d5f0105edafbda53b1e75f87b0da9d2f56bb99dbb1067cc09c4e74bc021900ee3b2ffd24cc91c81341f8a86f03d437b1dbeb9d5f4b8cadc9f86a7f9e331d4c3ea669048d38f8afabe226dde2a833f9b8623ef8330338b0bd6b76e4cb10396f627e6633d48d31d3f3be7ffed2e12d2a003268377b09144226d3d49b99c88724691492c7d1356f4c1da7a4aaa500846364e78690ea12900965e4e9718c4da4f12a98e9394", &(0x7f0000000440)="b3033a5336ceb90e13133b1e8abaa7a2a4fcbf8674dc2e3d5840366a6fd19bf19d3f3cc4b51723badbd9d66475636f6ae39e530fab70c4c9110a5a3b534a036590a45a3f78c3fc6260a0386279011a025221f324bb0eb037e108bcba3b", 0x4, 0x0, 0x7}, 0x50) getsockopt(r0, 0x1, 0x7, &(0x7f0000000140)=""/125, &(0x7f00000000c0)=0x7d) 1m41.282621091s ago: executing program 7 (id=3615): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000380)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$eJzs3EtsG0UYAOB/HefVBw2lPFpaCJRHBTRp0gc9cAGBxAEkJDgUcQppWpWmDWqCRKsICodyRJW4I45I3JE4wQUBB4TEFe6oUoVyaeG0aO1d10ls5+XGLf4+yc7M7joz/85OdjJjO4CuNZw9JRHbIuKPiNhRzS4+YLj64+bC/OQ/C/OTSaTpm38nleNuLMxPFocWr9tazaRpRH+W7G9Q7pV3Iiamp6cu5PnRuXPvj85evHTwzLmJ01Onp86PHz9+5PC+vmPjRyv70yb1710hvlL+M4vrxp6PZvbufvXtq69Pnrj67s/fZPXdlu+vj2Nd0uU1HK6e3aUezZ6e3FBhd5Rfs6ftdRuScvODRzahQqxeT0SUa/0oiZ4YrO3bEa982sGqAbdZmqZpo/tz1N23U+B/KtG/oUsV9/rs/9/isTkjjzvD9Rcj4mCeWZifvFmLv1ybO+hd8v9tOw1HxInL/36ZPaId8xAAACv4Phv/PNdo/FeKB+qOuydfQxmKiHsjYmdE3BcRuyLi/ojKsQ9GnHtojeUvXSFZPv4pXVtXYKuUjf9eyNe2bi4a/xWjvxjqyXPbK/H3JqfOTE8dys/Jgejtz/JjLcr44eXfPy/SA0v21Y//skdWfjEWzOtxrbxkgu7kxNxEJZGm6ccbCz+ufxKxp9wo/iSKZZwkInZHxJ51lnHmma/3Ntu3cvwttFhnWq30q4inq+1/efH4/1ZTJfXrk4MRUVufHHv+2PjR0YGYnjo0WlwVy/3y25U3mpW/ofjbIGv/LQ2v/9oq8FAyEDF78dLZynrt7NrLuPLnZ3V9etHqchZ/6duINV//fclblXRfvu3Dibm5C2MRfclry7eP33ptkS+Oz+I/sL9x/99ZV+OHIyK7iPdFxCP5Im7Wdo9FxOMRsb9F/D+99MR7zfY1b/9ms/LtdT0/US3bP+rbf+2JnrM/ftes/OF8DTLy89C4/Y9UUgfyLbW/fy2stoLrOmkAAABwlylV3gOflEZq6VJpZKT6Hv5dsaU0PTM79+ypmQ/On6y+V34oekvFTNeOuvnQsXxuuMiPL8kfzueNv+gZrORHJmemT3Y6eOhyW5v0/8xfPZ2uHXDbtWEdDbhL6f/QvfR/6F76P3Qv/R+6V6P+v9EPFgB3B/d/6F6V/v/U5U5XA+gA93/oXvo/dKWmn40vbegj/00TSbt/YcNE8d0Jm1HWyoniuyg2vfTBdb98YOVTF6XOntWuSZSXtUWU21pEf8NdHfyjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Eb/BQAA///i5tKw") r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./cgroup.net/devices.allow\x00', 0x10, &(0x7f00000003c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption}, {@inlinecrypt}, {@norecovery}]}, 0x1, 0x58b, &(0x7f0000009ec0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000580)={0x0, 0x0, 0x2}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x2b}, {@in=@loopback, 0x0, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "b38e4d"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(r7, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r7}}, 0x20) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0xac, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket(0x2a, 0x3, 0x0) connect$bt_sco(r8, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 1m41.147517149s ago: executing program 7 (id=3617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r2], 0x5c}, 0x1, 0x400000000000000, 0xf0ff}, 0x40010) 1m40.95087638s ago: executing program 7 (id=3619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getegid() getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1m40.95055184s ago: executing program 38 (id=3619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getegid() getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1m23.690766747s ago: executing program 6 (id=3909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) (fail_nth: 16) 1m23.201645076s ago: executing program 6 (id=3911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0xf5ffffffffffffff) 1m23.117357231s ago: executing program 6 (id=3915): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xb, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x4d, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x34, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x44014) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffefff, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m23.006208537s ago: executing program 6 (id=3917): syz_emit_ethernet(0xea, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00b42b00fe8000000000000000000000000000bbfe8000000000000000000002000000aa3a020201000000"], 0x0) 1m22.918789682s ago: executing program 6 (id=3918): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x5400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1m22.918284572s ago: executing program 6 (id=3919): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NAME(0x45, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) shutdown(r1, 0x1) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) tee(r4, r3, 0x2000200000000, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc01c}, 0x0) lseek(r0, 0x8, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x10b002, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000140)="b49d11a7111ed1d4db696d322d5ca8152dfa0b16e384204cd6d768b451fe0e498287c83a9a90b0a96c058276382cd8ae9cdb61d512fd69aae62d9b021104d8e5f04c0a369d9ba1badc", &(0x7f00000001c0)=""/191, &(0x7f0000000380)="5eb4191c4565962bc66e2ef7ccdc3b28d42d57c77f0ebe6e0bcb28f6f49f481cf671f0b4337a41b0a6c034ca43bda0cf673662a536ac27de96038f963850390acdd32da26a7915eadf23418acc7d4ff984218cbf3d8997d4398016dc95be8c1e78159efe972566e6d723c3ae5a2a4840adccc73d1542db270beddf5371a77ca8d416b0de0bef82a87eccfab009feb226011f0f4c21985bd5c7ca7a4472e262c25ef90fc0edef47e7230f4017c5", &(0x7f00000002c0)="39b73ba905ee203a3afc2adddbc83d9534", 0x4, r7, 0x4}, 0x38) get_mempolicy(0x0, 0x0, 0x9979, &(0x7f0000ff9000/0x4000)=nil, 0x3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="56ecc28469d9af8134e6ecd8765e0bd5babfa963ebf61332f64b940b4ece3c1aa47c47692d447a058fcce3fdbec79d2954280df34d90b07750ef3cc3bbc971108d826025365e0a1423aa3d77c378b4af32ff57cd28d39697ecd6748480d28b7ddb4dac70471d2dd3ab9ccb86c88b058a29bafc3a813d286ffcc40aa65cdae9799c258bee8ffefb8209013ef367e05cb0a92c1f17615ee1dfe53e66ca9ac0ecf112bfae518a8c65aa12ca313f0f1fc5ea0f1152726eef473eff2dc7e78737c491b716a77745da02c2bb3087f0ef3cbe4b0e46c84362", 0xd5}, {&(0x7f0000000980)="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", 0xfd}], 0x2}}, {{&(0x7f0000000640)={0xa, 0x4e21, 0x4b, @private0}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000c40)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r9}}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0xa4, 0x0, [@mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr={{0xa8, 0x29, 0x39, {0x2f, 0x12, 0x1, 0x3, 0x0, [@local, @private1, @private0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x32, 0xe, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x48, {0x0, 0x10, 0xf, 0x3, [0x1, 0x4, 0x1, 0x8115, 0x3, 0x7ff, 0x7ad, 0x7]}}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x1d0}}], 0x2, 0x480c0) 1m15.551685102s ago: executing program 3 (id=4027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}]}]}, 0x38}, 0x1, 0x0, 0x8001000000000000}, 0x0) 1m15.525128284s ago: executing program 3 (id=4028): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(r3, &(0x7f0000002700), 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x8, 0x10840) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000000c0)={0x9, 0x40, 0x7f, 0x10000, 0x6}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0x0, 0x0) 1m15.470122807s ago: executing program 3 (id=4030): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) (fail_nth: 7) 1m15.300860936s ago: executing program 3 (id=4034): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10002}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff8, 0x490001) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='vfat\x00') unshare(0x6020400) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x89, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) prlimit64(r6, 0x2, &(0x7f0000000240)={0x8, 0xcde9}, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = getpgrp(0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r9, 0x0, r7, r7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r12 = socket(0x1d, 0x2, 0x6) r13 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000001840)={0x90000001}) 1m15.300201166s ago: executing program 3 (id=4035): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44851}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xff000000, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x61, 0x1ff, 0x6, 0xb0e2, 0xffff, 0x84e, 0x3, 0x18, 0x8}, {0x20000000001}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x2, "ad30a0fb7b11d5c1a73d4ac270ab7a73a5f3d92f20958ac6d60047426c56"}}}, {{@ipv6={@remote, @local, [], [0x0, 0xffffff00], 'batadv0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390) 1m15.222787671s ago: executing program 3 (id=4038): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x7, 0xff, 0x3, {{0x17, 0x4, 0x2, 0x11, 0x5c, 0x64, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x7, 0xbb, [@broadcast]}, @timestamp={0x44, 0x28, 0x25, 0x0, 0xd, [0x200, 0x5, 0x10001, 0x80000000, 0x6d9, 0x80c, 0x6, 0x9, 0x1f8b]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x14, 0xba, 0x1, 0x3, [{@local, 0x1}, {@loopback, 0x55}]}]}}}}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000340)={r7, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r4, 0x0, 0x5, &(0x7f0000000040)='ext4\x00'}, 0x30) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$eJzs3E9sVNUeAODfnba0/Hv08Xi8B6IW0dhIbKGgsDAxGE1caGLERF02bSFIoYaWRAjqkBhcGhL3xqVbF27VDTGsTNzi0sSQEMMGMCGOuTP3dqbDzJRppx1Lvy+Z9px7595zzj333Dn3nLkTwLo1lP5JKuEbEbEtIgr1bxiq/Lt7+9LEvduXJqJYKh3/IylvdieNZ7LdxOYsMlyIKHyWVFfUmL1w8fT49PTUuSw+Onfmw9HZCxefPzWQLTl69PChg0deHHuh/UI1SC8t153dn8zs2fX6+1ffnOjNl+ep1ZajU4ZiqFFWyp7pdGJdtrUmnPR2MSO0JT3/0+rqK7f/bdETrSqvuIo5A1ZaqVQq9TdfXSzVu/zAEmDNioFu5wDojvyDPr3/zV+NOgIbVqb70XW3jlVugNJy381eEU+WF+bjIH1197edNBQR7xX//Cp9RbNxiJ4VShwAWJd+OJb3BOv6f4OVmZH756+9nP7/VzaHMhgR/46I7RHxn4jYERH/jYidEfG/iPh/3f7TrkupRfpDdfH59OcnoQo3O1TUhtL+30vZ3Fa1/7cgA4M9WWxrRN5hnjqQHZPh6Os/cWp66mCLNH589Zcvmq2r7f+lrzT9vC+Y5eNmb90A3eT43PiSC1zn1uWI3b315U96I5L5mYAkInZFxO429jtYEz713Dd75iN9C9+3ePnLSg3n0Towz1T6OuLZSO7fvX2pGAvqv5pismB+8sz4yamTU2fH5ucnRwdieurAaHoWHGiYxvWfr7zVLP1Fy//db/WbvHbk++MduylI639Tzfkf+fxttfyDSUQyP187234aV379vOnc6lLP/w3JO+Vwfl/60fjc3LmDERuSNx5cPlbdNo+n/6NYKf/wvsbtf3u2TXokHouI9CR+PCKeiModYpr3vRHxVETsa1H+n155+oO2y19oscMOSss/WXf9q9T8gvqvztc3CyTZ3GCDVT2n99641+Ti8XD1f7gcGs6WNL7+JQsuEc1ymn/apUv+WvbRAwAAgLWhEBFbasaStkShMDJSGQPaEZsK0zOzc/tPzJw/O5muixiMvkI+0lUZD+5L8vHPwZr4WF38UDZu/GXPxnJ8ZGJmerKrJQc2l9t8UhiJeLenpv2nfve9E3j0eV4L1q9W7T/txO+8uoqZAVbVw3/+X/t4RTMCrLqa9t/sCf/iEr73BawB7v+BqsV/6Mc1A9a+krYM61pb7X+/HwGER0lvvD0fXqXnDoF/iKX2/z/tcD6AVbXoc/3LCpT6G68aiAffHAOtd9gTS8vGxgZpdSWQ9qy6kvrGpWyV/5pC0/dEob0d9kdn6vTEMo9G8dzsyZ0dP/lL2XflO12D3zZvp9f7W9TO8gNduRwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03N8BAAD//6Yc4S8=") 1m15.222215681s ago: executing program 39 (id=4038): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x7, 0xff, 0x3, {{0x17, 0x4, 0x2, 0x11, 0x5c, 0x64, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@rr={0x7, 0x7, 0xbb, [@broadcast]}, @timestamp={0x44, 0x28, 0x25, 0x0, 0xd, [0x200, 0x5, 0x10001, 0x80000000, 0x6d9, 0x80c, 0x6, 0x9, 0x1f8b]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x14, 0xba, 0x1, 0x3, [{@local, 0x1}, {@loopback, 0x55}]}]}}}}}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000340)={r7, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r4, 0x0, 0x5, &(0x7f0000000040)='ext4\x00'}, 0x30) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") 1m7.461670364s ago: executing program 0 (id=4184): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 1m7.436373455s ago: executing program 0 (id=4186): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7001b05c"], 0x48) 1m7.378790719s ago: executing program 0 (id=4187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x1000000}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x10000000}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x2}, {0xd20f}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {0x52}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 1m7.378462759s ago: executing program 0 (id=4188): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b064000002280000140003007665746830000000000000000000000818"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) 1m7.254462706s ago: executing program 0 (id=4193): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x81ffffff}, 0x800) 1m7.233703757s ago: executing program 0 (id=4194): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14c58, 0x1, 0x0, 0x4, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x10, 0x3, 0x0) unshare(0x2040600) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESDEC], 0x15) 1m6.864681219s ago: executing program 40 (id=3919): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_NAME(0x45, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) shutdown(r1, 0x1) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) tee(r4, r3, 0x2000200000000, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc01c}, 0x0) lseek(r0, 0x8, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x10b002, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000140)="b49d11a7111ed1d4db696d322d5ca8152dfa0b16e384204cd6d768b451fe0e498287c83a9a90b0a96c058276382cd8ae9cdb61d512fd69aae62d9b021104d8e5f04c0a369d9ba1badc", &(0x7f00000001c0)=""/191, &(0x7f0000000380)="5eb4191c4565962bc66e2ef7ccdc3b28d42d57c77f0ebe6e0bcb28f6f49f481cf671f0b4337a41b0a6c034ca43bda0cf673662a536ac27de96038f963850390acdd32da26a7915eadf23418acc7d4ff984218cbf3d8997d4398016dc95be8c1e78159efe972566e6d723c3ae5a2a4840adccc73d1542db270beddf5371a77ca8d416b0de0bef82a87eccfab009feb226011f0f4c21985bd5c7ca7a4472e262c25ef90fc0edef47e7230f4017c5", &(0x7f00000002c0)="39b73ba905ee203a3afc2adddbc83d9534", 0x4, r7, 0x4}, 0x38) get_mempolicy(0x0, 0x0, 0x9979, &(0x7f0000ff9000/0x4000)=nil, 0x3) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000006c0)={@remote, 0x0}, &(0x7f0000000700)=0x14) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="56ecc28469d9af8134e6ecd8765e0bd5babfa963ebf61332f64b940b4ece3c1aa47c47692d447a058fcce3fdbec79d2954280df34d90b07750ef3cc3bbc971108d826025365e0a1423aa3d77c378b4af32ff57cd28d39697ecd6748480d28b7ddb4dac70471d2dd3ab9ccb86c88b058a29bafc3a813d286ffcc40aa65cdae9799c258bee8ffefb8209013ef367e05cb0a92c1f17615ee1dfe53e66ca9ac0ecf112bfae518a8c65aa12ca313f0f1fc5ea0f1152726eef473eff2dc7e78737c491b716a77745da02c2bb3087f0ef3cbe4b0e46c84362", 0xd5}, {&(0x7f0000000980)="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", 0xfd}], 0x2}}, {{&(0x7f0000000640)={0xa, 0x4e21, 0x4b, @private0}, 0x1c, &(0x7f0000000680), 0x0, &(0x7f0000000c40)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r9}}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x0, 0xa4, 0x0, [@mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr={{0xa8, 0x29, 0x39, {0x2f, 0x12, 0x1, 0x3, 0x0, [@local, @private1, @private0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x32, 0xe, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x48, {0x0, 0x10, 0xf, 0x3, [0x1, 0x4, 0x1, 0x8115, 0x3, 0x7ff, 0x7ad, 0x7]}}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0x1d0}}], 0x2, 0x480c0) 51.137266946s ago: executing program 41 (id=4194): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14c58, 0x1, 0x0, 0x4, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x10, 0x3, 0x0) unshare(0x2040600) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESDEC], 0x15) 34.047895553s ago: executing program 2 (id=4723): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x153, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x80) socket(0x29, 0x800, 0x7fff) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae", 0x29, 0x6000000000000000, 0x0, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0xff, 0x73, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x20000000008}, 0x102200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010102, 0x4e23, 0x1, 'ovf\x00', 0x0, 0x110001, 0x6f}, 0x2c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 33.111373988s ago: executing program 2 (id=4748): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x0, 0x2e8, 0xfeffffff, 0x0, 0x218, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x40, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x40200) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$P9_RVERSION(r4, 0x0, 0x15) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000004c0)=0x104, &(0x7f0000000580)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00005da000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x4f3e, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000d, 0x5f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xd, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000f0601020000000000000001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000625ae040000000000000000020000200900010073797a30000000000900020073797a0000340001ffffffffff010000060800094000000000090032000000000900010073797a3000000000140000001100010000000000000000000900000ae3353b13291d00000000000000009c0ae649c542"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x810) semop(r2, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c46030f04059a020000000000000300060008000000e300000038000000ad01000003000000f7ff2000fecb01002faa0100ff01000000000200000084000000050000000f0000000080000003000000040000000000000070b285a84a19158b47d65e17a3f3050ebb0419371b33296eba6c079ee8b441aa4b18bc0287afbadc5d33df1c0fb9f2819bdbcd865e721ebce0c3984da60fc3fcbbc58f7041f845a58f6203b89c19fd1a1de4e954986476c46fa275308c661e2e4fc82d5cb7f51bc736cf763ea8854c57b8ffe61072e6cb670b4ab9703ae101ef7ed283d496066a819ef6673e6eaf8ec47243d99374a8015a22bb69225ef2209d5e71f98059165e27d46fd3e720a9716ae92c6c3d5686f33d1133e52aa532e37ebcb7ff072fee471538ce807e8db8685a1260caf1f75a5b491e9ca9f5d8ebda7e7117f07cfee549f3263cf83ac468a323dbd71d41dff4d8e75b74d82b8ab2a202d86bccc0bd9844aaca5b61"], 0x154) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 32.168573903s ago: executing program 2 (id=4766): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a00002804400", @ANYBLOB="89ca2507072b7e6e9ff353d292018765a242814c7640a32115cd3509e2cfb23f5fb07bb8cc62", @ANYRESHEX=r4, @ANYRES32=r3, @ANYRESHEX=r6], 0x38c}}, 0x0) close(r6) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000160001000000030000000a000000", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) 31.506793141s ago: executing program 2 (id=4781): ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800003, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000055000000b70000000000082995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0xf9, &(0x7f0000000000), 0x143}, 0x48) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x482, &(0x7f00000004c0)="$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") r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x2}) 30.953894354s ago: executing program 2 (id=4788): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x9, 0x0, 0x0, 0x0}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',\x00']) sendmmsg$inet6(r0, &(0x7f0000004540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x81, @loopback, 0xd}, 0x1c, 0x0, 0x0, 0xfffffffffffffffd}}, {{&(0x7f0000001600)={0xa, 0x4e22, 0x9, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@hopopts={{0x18, 0x29, 0x36, {0x3a}}}, @tclass={{0x14, 0x29, 0x43, 0xb}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x1, 0x3}}}], 0x48}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20010080) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x0, 0x0) close(r5) sync_file_range(r5, 0xc, 0x4, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000340)={0x1, 0x2, 0x1000, 0x6b, &(0x7f0000000080)="7e345c8d8d23f7e9074d9b4f2fff379c0a66fde33f2e1de04cabee2e91fbc27a4200f1b94026377fc587aae580481db56e896c66200d10e04cab1e99f59b527cf186981d4e0a01d4cfc33070fc3cb21f8690debe3ede9d745b0d240a13582dc5a8bd2a5b67cb7ba24f02fa", 0x5f, 0x0, &(0x7f00000002c0)="69a3b9426a38a0e11d06e1ce6dcd7cf7df9d52f54defbd3fcf54a978b19843bb4d5bc429158fe99dc3c4b40654a05493ed22382923eb7021423404928ef2a2cc2425e60e8ab829f4e60fe0a9ccbc4ebf36541ea3591966564177953ccb3a74"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c6000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, 0x264}, 0x94) 29.524023917s ago: executing program 2 (id=4799): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc1) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xff, 0x489040) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x6a855000) socket(0x2, 0x5, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000001600)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nombcache}, {@nodelalloc}, {@init_itable}, {@errors_remount}]}, 0x5, 0x577, &(0x7f0000001080)="$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") capset(0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt\x00', 0x800, 0x29) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000000000000fdffffffffffffff02000000010000004417d443d8144cd203000000000058000400000000000000a0b6e8e308d505d985ffd100000000000000000000000000000067"]) socket$unix(0x1, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r5, &(0x7f0000000400)="66e1be7b8f492148", 0x8) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ff", 0x32}, {&(0x7f0000000380)="2e366579122caa", 0x7}], 0x2, 0x0, 0x0, 0xc00e}, 0x0) 29.437320432s ago: executing program 42 (id=4799): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc1) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xff, 0x489040) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @remote, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x6a855000) socket(0x2, 0x5, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000001600)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nombcache}, {@nodelalloc}, {@init_itable}, {@errors_remount}]}, 0x5, 0x577, &(0x7f0000001080)="$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") capset(0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt\x00', 0x800, 0x29) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000000000000fdffffffffffffff02000000010000004417d443d8144cd203000000000058000400000000000000a0b6e8e308d505d985ffd100000000000000000000000000000067"]) socket$unix(0x1, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r5, &(0x7f0000000400)="66e1be7b8f492148", 0x8) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ff", 0x32}, {&(0x7f0000000380)="2e366579122caa", 0x7}], 0x2, 0x0, 0x0, 0xc00e}, 0x0) 12.486024801s ago: executing program 1 (id=5128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x0, 0x4, @local, 0xffffffff}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 12.483084761s ago: executing program 1 (id=5129): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = epoll_create(0xa) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000015c0)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x1008}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100", @ANYRES32, @ANYBLOB="14000600fe80000000000000000000000000003614000700fe", @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 12.433444454s ago: executing program 1 (id=5130): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa000000, 0xb}, 0x50) 12.413822536s ago: executing program 1 (id=5131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31662dbd7008fedbdf252e0000000c000500020204aaaaaaaaaa08000200", @ANYRES32=r1, @ANYBLOB="05002b00000000000600060002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048051) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000308000000fcdbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r5 = socket$netlink(0x10, 0x3, 0x9) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f00000002c0)=0x3, 0x4) fdatasync(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==") sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000fdffffff000000000a000000850000000e000000851dcf0bf8773395000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, 0x0, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000c0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRESHEX, @ANYBLOB="18"], 0x50) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x8000000000000001, 0x3, 0x5}) 12.33409662s ago: executing program 1 (id=5133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0), 0x3, 0x515, &(0x7f0000001140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) setuid(0xee00) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, 0x0) 12.210983277s ago: executing program 1 (id=5135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x8000000a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0xfffffffb, 0x4) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) pwrite64(r0, &(0x7f0000000180)="a2fa29c11d143c4bd424457e4f24d0051fa2a1ef0689ebf3b878e440a1c019c02e869a24a785b255900337ce64ed342d99c61af185c7b7954ea103a2b137df1f7a7489af6e5b3890eff55660bb62f4dbadabc996f39b015155dd2427965016af82fc55028eb19d22f4", 0x69, 0x9445) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x8000000a, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000040)=0xfffffffb, 0x4) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) (async) pwrite64(r0, &(0x7f0000000180)="a2fa29c11d143c4bd424457e4f24d0051fa2a1ef0689ebf3b878e440a1c019c02e869a24a785b255900337ce64ed342d99c61af185c7b7954ea103a2b137df1f7a7489af6e5b3890eff55660bb62f4dbadabc996f39b015155dd2427965016af82fc55028eb19d22f4", 0x69, 0x9445) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") (async) 4.762709912s ago: executing program 8 (id=5246): setresuid(0x0, 0xee00, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c4100000014001462726f12952cff413042616463617374"], 0x30}}, 0x0) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xa419, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r2, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f0000000180)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x40}}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb760}}]}, 0x8, 0x5fe, &(0x7f0000000ac0)="$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") syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x2, 0x6, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x10}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 4.027163584s ago: executing program 8 (id=5251): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x1}, 0x8}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c"], 0x20}}, 0x0) getpid() r3 = gettid() ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1400}], 0x1, 0x0, 0x0, 0x39) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x100, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)="3d6ee2e0", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) tkill(r3, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002700)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 2.91084577s ago: executing program 4 (id=5262): unshare(0x6a040000) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030014000000"], 0xfdef) 2.721836411s ago: executing program 4 (id=5263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100070000000000000001000000280001801400040000000200000000000000ffffac1414aa060001000a0080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.666426054s ago: executing program 4 (id=5264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x20}}}}}, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x3f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'hash:ip,port\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x4) 1.522428381s ago: executing program 9 (id=5277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000"], 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x19, 0x3, 0x4, 0x7, 0x1, r0, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x7fffffff, r1}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x6, 0x400f19, 0x2000006, 0x7ffffffc, 0x40, "6ddcff05001b4727a447afe1252d5115f91e6e", 0xd8f9, 0x3}) r6 = fcntl$dupfd(r2, 0x406, r2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x1f, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read$eventfd(r6, 0x0, 0x0) 1.487603993s ago: executing program 9 (id=5278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d8, 0x320, 0x0, 0x10040000, 0x160, 0x320, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0x4000], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'ip6gre0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) 1.390812298s ago: executing program 9 (id=5279): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000010000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES64=r0], 0x38}}, 0x10) 1.389659849s ago: executing program 9 (id=5280): set_mempolicy(0x3, &(0x7f0000000480)=0x7, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000008000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.036837149s ago: executing program 4 (id=5281): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000063113400000000"], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x98040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000680)=""/4096, 0x6, 0x0, 0x0, 0x72, &(0x7f0000000140), &(0x7f0000001680)="e01b20124e874aa6b60879e40d28511fc74e7ca215424c97793fcef77fe7fc59fe55f1c7c0f9db55d3132b4a4f2c52daaa8607d0a8f8aa2b25fd3c03238008c3310290f9dcf52c0e6bb61f388f7bca369f263d1f5eebd92407a0faedf3e41b52475ef854d0ecfb3933b51b26a4adb8c0e40d", 0x4, 0x0, 0x80000001}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) chdir(0x0) r1 = creat(&(0x7f00000002c0)='./file1\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000280)="fd72c91726872af17284cbbecb2360cff1988314f6cc09c4c07f0b44d9c16a610f294283b780b506b765d798ca8ab5adc7424057689ee5685dc17105c83aa4ed88bbfc7fef38b630105a17b9c6febfaef81e3242f4b460a05490dce8fd165641538fff4d4f46f9e24217a754881ce31e40b204d9126e3103f7aedd9c3194c82a62744ab6"}, {&(0x7f00000000c0)="6eafae9268cbdef2c4610d53e85605490ed6ed506c0b5fbe97b851b9277a5dac0ab88672b8ac5b883cff936f9216ae43f0061ee6421eade3910dc65d94f385486c94"}], 0x100000000000000b, &(0x7f0000000040), 0x4c4dbc2f6118216a}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xb030, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="2b6370752047714f2845c87fb0e60b74e6a66cbe20bb7c9807d2f0907bd122f6aa3547725cf71d2296bac6ee1ef5cc88b8be8a7ff396ae13646ba7842d24e7bea557a581386b6664d62248666dfbabc019b5a77f7d7c79f9466fc3de34e665b2643c6e8a7eb2"], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000840000000000000070000006b112f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 875.804598ms ago: executing program 5 (id=5284): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) close(r0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) close(r0) (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") (async) 813.847372ms ago: executing program 4 (id=5285): sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x88, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4a12}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_team\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4841}, 0x4080000) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000140)=0x3) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x686) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010826bd7000030000000b00000008000300", @ANYRES32=r5, @ANYBLOB="faff5080080008800400010004000600"], 0x2c}}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="000f0000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf250b0000000c009900ffff000059000000"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x80) (async, rerun: 64) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (rerun: 64) 791.540963ms ago: executing program 8 (id=5286): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5d}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) open(0x0, 0x14927e, 0x20) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x5) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd2(0x0, 0x0) (async) io_getevents(0x0, 0x1, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000340)={0x1, 0x7fffffffffffffff, 0x80000000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x3e, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x4000000) 498.74643ms ago: executing program 8 (id=5287): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c80)='blkio.bfq.io_queued\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0xfffffffe, {0x0, 0x0, 0xe403, 0x0, 0x5280}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8880) syz_read_part_table(0x105e, &(0x7f0000001080)="$eJzsz7FRwzAYx9G/JR+2j2MQtmADKkoqChjDM7ABLdtkhWyRSjlHzgpJiveK73Q/naRTuK8yZ0kO78lLD1PWfWvN9PvUWk3yV3tqpebzuy5J6WFuydCXS8ZtZLiGyz1vX/O4HWyn5yTHn/K6v7uNj/8b/hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtY5AAD//xu7Dyk=") 434.727594ms ago: executing program 5 (id=5288): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000980000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c0000800800"], 0x250}}, 0x2000c000) 400.041946ms ago: executing program 9 (id=5289): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '\\\v]&\x1f'}, {0x20, 'pids.current\x00'}, {0x20, '\x00'}], 0xa, "029cd26bc9e593bc78c93c6f9f8634e6dfa6163e80dedf7765c1889e1705c2cab8c40c9f133b5bd7acf57a012c819ab722db67c6f20f9012f39b7372ebf5a8f3a33bbe8160d6e2d4bbcccd74c8f1d0207d228a747a5367388055ac8dc45784e8ab18c5e3e47afd43"}, 0x91) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x3, 0x0, 0x3, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 286.907693ms ago: executing program 5 (id=5290): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000000)) 284.878573ms ago: executing program 5 (id=5291): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=0x13, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x121000, 0x76) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x810, r2, 0x12a7000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xcc}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40084) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2ac}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xd999}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x46610404}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xcc, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4f4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2c00}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4048004}, 0x810) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x18, r8, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001010}, 0x20000081) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x24cdf50e2650d16b, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa0d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004}, 0x20048000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001100), r10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000011c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001200)=[0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x28, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000001540)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r11, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 257.533975ms ago: executing program 8 (id=5292): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x40, 0x1, 0x2, 0x2}, 0x8, 0x80000004, 0x20000008, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 107.094803ms ago: executing program 8 (id=5293): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYBLOB="050000000000000000000f0000000800", @ANYRES32, @ANYBLOB="47000e00800000000802110000000802"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200feffffff00000000300032000200000000000000000000000a000000000000000000000000000000fc020000000000000000000000000004030005000000000002000000ac1414aa0000000000000000030006000000000002000000"], 0x80}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000c80), 0x0, 0x7, 0x0, 0x1, 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000040)=[{0x4, 0xffff, 0x1000}], 0x1, 0x0) semtimedop(r5, &(0x7f0000000000)=[{0x4, 0x8000}, {0x1, 0x5, 0x1400}], 0x2, 0x0) semctl$GETZCNT(r5, 0x4, 0xf, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a50000000060a0b0400000000000000000200000024000480200001800e000100636ffa31316db65372f800000c000280080081400000007f0900010073797a30000000000900020073797a32000000000f0000001100010000000000000000000500000a"], 0x78}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x1}, 0xfe}, 0x18) close_range(r6, 0xffffffffffffffff, 0x0) 38.670968ms ago: executing program 9 (id=5294): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16=r11, @ANYBLOB="010029bd7000fed6df250200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) 38.268338ms ago: executing program 5 (id=5295): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x801787, &(0x7f0000000680)={0x0, 0x80334d, 0x2, 0x200002, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x40, 0x185100, 0x12345}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xf06f, 0x3180, 0x1, 0x283}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1}) syz_io_uring_complete(r5) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 22.059298ms ago: executing program 5 (id=5296): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge0\x00', {0x1}, 0x8}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c"], 0x20}}, 0x0) getpid() r3 = gettid() ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1400}], 0x1, 0x0, 0x0, 0x39) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xc6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x100, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)="3d6ee2e0", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) tkill(r3, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 0s ago: executing program 4 (id=5297): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) ioctl$FIONCLEX(r1, 0x5450) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x2600) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x14) kernel console output (not intermixed with test programs): beyond EOF [ 326.372998][T19235] FAT-fs (loop5): Filesystem has been set read-only [ 326.413941][T19243] netlink: 'syz.5.4617': attribute type 9 has an invalid length. [ 326.454742][T19246] netlink: 'syz.5.4618': attribute type 13 has an invalid length. [ 326.639149][T19257] FAULT_INJECTION: forcing a failure. [ 326.639149][T19257] name failslab, interval 1, probability 0, space 0, times 0 [ 326.651913][T19257] CPU: 0 UID: 0 PID: 19257 Comm: syz.5.4622 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 326.652023][T19257] Tainted: [W]=WARN [ 326.652031][T19257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.652046][T19257] Call Trace: [ 326.652054][T19257] [ 326.652139][T19257] __dump_stack+0x1d/0x30 [ 326.652168][T19257] dump_stack_lvl+0x95/0xd0 [ 326.652191][T19257] dump_stack+0x15/0x1b [ 326.652214][T19257] should_fail_ex+0x263/0x280 [ 326.652249][T19257] should_failslab+0x8c/0xb0 [ 326.652323][T19257] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 326.652486][T19257] ? __alloc_skb+0x2f0/0x4b0 [ 326.652518][T19257] __alloc_skb+0x2f0/0x4b0 [ 326.652542][T19257] ? __alloc_skb+0x219/0x4b0 [ 326.652631][T19257] sock_wmalloc+0x7e/0xc0 [ 326.652652][T19257] pppol2tp_sendmsg+0xfb/0x440 [ 326.652681][T19257] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 326.652758][T19257] sock_sendmsg+0x254/0x280 [ 326.652791][T19257] splice_to_socket+0x6e2/0xa80 [ 326.652813][T19257] ? avc_has_perm+0x101/0x190 [ 326.652886][T19257] ? __pfx_splice_to_socket+0x10/0x10 [ 326.652913][T19257] direct_splice_actor+0x156/0x2a0 [ 326.652936][T19257] ? shmem_file_open+0x31/0x40 [ 326.652973][T19257] splice_direct_to_actor+0x311/0x670 [ 326.652996][T19257] ? __pfx_direct_splice_actor+0x10/0x10 [ 326.653141][T19257] do_splice_direct+0x119/0x1a0 [ 326.653162][T19257] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 326.653190][T19257] do_sendfile+0x382/0x650 [ 326.653287][T19257] __x64_sys_sendfile64+0x105/0x150 [ 326.653315][T19257] x64_sys_call+0x2db1/0x3000 [ 326.653343][T19257] do_syscall_64+0xc0/0x2a0 [ 326.653446][T19257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.653505][T19257] RIP: 0033:0x7ffa1b68aeb9 [ 326.653520][T19257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.653539][T19257] RSP: 002b:00007ffa1a0e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 326.653603][T19257] RAX: ffffffffffffffda RBX: 00007ffa1b905fa0 RCX: 00007ffa1b68aeb9 [ 326.653619][T19257] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 326.653631][T19257] RBP: 00007ffa1a0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.653644][T19257] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000001 [ 326.653657][T19257] R13: 00007ffa1b906038 R14: 00007ffa1b905fa0 R15: 00007fffeb716308 [ 326.653692][T19257] [ 326.931589][T19269] sg_write: data in/out 33947872/224 bytes for SCSI command 0x0-- guessing data in; [ 326.931589][T19269] program syz.5.4629 not setting count and/or reply_len properly [ 326.954443][T19271] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 326.997449][T19275] random: crng reseeded on system resumption [ 327.070005][ T23] tipc: Node number set to 2813155390 [ 327.125904][T19290] infiniband !yz!: set down [ 327.131548][T19290] infiniband !yz!: added team_slave_0 [ 327.146478][T19290] RDS/IB: !yz!: added [ 327.150820][T19290] smc: adding ib device !yz! with port count 1 [ 327.157756][T19290] smc: ib device !yz! port 1 has no pnetid [ 327.188413][T19299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.276365][T19306] FAULT_INJECTION: forcing a failure. [ 327.276365][T19306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.289610][T19306] CPU: 1 UID: 0 PID: 19306 Comm: syz.1.4641 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 327.289643][T19306] Tainted: [W]=WARN [ 327.289649][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.289661][T19306] Call Trace: [ 327.289709][T19306] [ 327.289719][T19306] __dump_stack+0x1d/0x30 [ 327.289756][T19306] dump_stack_lvl+0x95/0xd0 [ 327.289780][T19306] dump_stack+0x15/0x1b [ 327.289840][T19306] should_fail_ex+0x263/0x280 [ 327.289874][T19306] should_fail+0xb/0x20 [ 327.289899][T19306] should_fail_usercopy+0x1a/0x20 [ 327.289967][T19306] _copy_from_user+0x1c/0xb0 [ 327.289992][T19306] ___sys_sendmsg+0xc1/0x1e0 [ 327.290087][T19306] __x64_sys_sendmsg+0xd4/0x160 [ 327.290108][T19306] x64_sys_call+0x17ba/0x3000 [ 327.290132][T19306] do_syscall_64+0xc0/0x2a0 [ 327.290208][T19306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.290369][T19306] RIP: 0033:0x7fc73c93aeb9 [ 327.290384][T19306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.290401][T19306] RSP: 002b:00007fc73b397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.290426][T19306] RAX: ffffffffffffffda RBX: 00007fc73cbb5fa0 RCX: 00007fc73c93aeb9 [ 327.290443][T19306] RDX: 0000000004000012 RSI: 0000200000000200 RDI: 0000000000000003 [ 327.290460][T19306] RBP: 00007fc73b397090 R08: 0000000000000000 R09: 0000000000000000 [ 327.290475][T19306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.290531][T19306] R13: 00007fc73cbb6038 R14: 00007fc73cbb5fa0 R15: 00007fff6f69ea18 [ 327.290577][T19306] [ 327.293966][T18414] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.547111][T19319] EXT4-fs: Ignoring removed nobh option [ 327.552880][T19319] EXT4-fs: Ignoring removed bh option [ 327.584607][T19319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.764652][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.327642][T19372] set_capacity_and_notify: 7 callbacks suppressed [ 328.327657][T19372] loop1: detected capacity change from 0 to 512 [ 328.396418][T19372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.438306][T19372] EXT4-fs (loop1): 1 truncate cleaned up [ 328.449426][T19372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.534910][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.534975][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535033][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535132][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535199][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535281][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535328][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535400][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535442][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.535519][T19397] netlink: 'syz.9.4671': attribute type 10 has an invalid length. [ 328.596644][T19401] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 328.624946][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.851029][T19422] loop5: detected capacity change from 0 to 1024 [ 328.857801][T19422] ext4: Unknown parameter 'audit' [ 328.978988][T19442] ip6erspan0: entered promiscuous mode [ 329.014798][T19442] bridge1: entered promiscuous mode [ 329.097652][T19457] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19457 comm=syz.5.4695 [ 329.132049][T19459] bridge0: port 3(team0) entered blocking state [ 329.138394][T19459] bridge0: port 3(team0) entered disabled state [ 329.173194][T19459] team0: entered allmulticast mode [ 329.178449][T19459] team_slave_0: entered allmulticast mode [ 329.184291][T19459] team_slave_1: entered allmulticast mode [ 329.223869][T19459] team0: entered promiscuous mode [ 329.228988][T19459] team_slave_0: entered promiscuous mode [ 329.234779][T19459] team_slave_1: entered promiscuous mode [ 329.268659][T19459] bridge0: port 3(team0) entered blocking state [ 329.275197][T19459] bridge0: port 3(team0) entered forwarding state [ 329.526664][T19476] loop1: detected capacity change from 0 to 512 [ 329.540372][T19476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.579429][T19476] EXT4-fs (loop1): 1 truncate cleaned up [ 329.604306][T19476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.010583][T19498] __nla_validate_parse: 28 callbacks suppressed [ 330.010602][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4711'. [ 330.040576][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4712'. [ 330.068752][T19512] FAULT_INJECTION: forcing a failure. [ 330.068752][T19512] name failslab, interval 1, probability 0, space 0, times 0 [ 330.081533][T19512] CPU: 0 UID: 0 PID: 19512 Comm: syz.9.4713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 330.081570][T19512] Tainted: [W]=WARN [ 330.081578][T19512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.081592][T19512] Call Trace: [ 330.081600][T19512] [ 330.081608][T19512] __dump_stack+0x1d/0x30 [ 330.081672][T19512] dump_stack_lvl+0x95/0xd0 [ 330.081691][T19512] dump_stack+0x15/0x1b [ 330.081713][T19512] should_fail_ex+0x263/0x280 [ 330.081744][T19512] should_failslab+0x8c/0xb0 [ 330.081823][T19512] __kmalloc_cache_noprof+0x64/0x4a0 [ 330.081849][T19512] ? kernfs_fop_open+0x438/0x640 [ 330.081929][T19512] kernfs_fop_open+0x438/0x640 [ 330.081963][T19512] ? __pfx_kernfs_fop_open+0x10/0x10 [ 330.082071][T19512] do_dentry_open+0x54b/0xa60 [ 330.082100][T19512] vfs_open+0x37/0x1e0 [ 330.082122][T19512] path_openat+0x1de9/0x23c0 [ 330.082260][T19512] ? iput+0x423/0x650 [ 330.082313][T19512] do_file_open_root+0x22e/0x460 [ 330.082401][T19512] file_open_root+0xfd/0x130 [ 330.082431][T19512] do_handle_open+0x6b6/0x790 [ 330.082457][T19512] __x64_sys_open_by_handle_at+0x44/0x50 [ 330.082557][T19512] x64_sys_call+0x2b6a/0x3000 [ 330.082585][T19512] do_syscall_64+0xc0/0x2a0 [ 330.082618][T19512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.082710][T19512] RIP: 0033:0x7faea1abaeb9 [ 330.082725][T19512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.082743][T19512] RSP: 002b:00007faea0517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 330.082803][T19512] RAX: ffffffffffffffda RBX: 00007faea1d35fa0 RCX: 00007faea1abaeb9 [ 330.082848][T19512] RDX: 000000000008ce00 RSI: 0000200000000140 RDI: 0000000000000003 [ 330.082862][T19512] RBP: 00007faea0517090 R08: 0000000000000000 R09: 0000000000000000 [ 330.082875][T19512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 330.082887][T19512] R13: 00007faea1d36038 R14: 00007faea1d35fa0 R15: 00007ffcc9a9d9b8 [ 330.082907][T19512] [ 330.311078][T19515] loop9: detected capacity change from 0 to 512 [ 330.318881][T19515] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 330.345293][T19515] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.4714: inode has both inline data and extents flags [ 330.361501][T19515] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4714: couldn't read orphan inode 15 (err -117) [ 330.376957][T19515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.423206][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.459568][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 330.459583][ T29] audit: type=1400 audit(316.001:5348): avc: denied { mount } for pid=19518 comm="syz.1.4715" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 330.619396][ T29] audit: type=1400 audit(316.151:5349): avc: denied { create } for pid=19514 comm="syz.9.4714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_scsitransport_socket permissive=1 [ 330.668051][ T29] audit: type=1400 audit(316.188:5350): avc: denied { create } for pid=19514 comm="syz.9.4714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 330.687970][ T29] audit: type=1400 audit(316.188:5351): avc: denied { write } for pid=19514 comm="syz.9.4714" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 330.708916][ T29] audit: type=1400 audit(316.188:5352): avc: denied { setopt } for pid=19514 comm="syz.9.4714" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 330.736343][T19528] loop2: detected capacity change from 0 to 512 [ 330.743123][T19528] EXT4-fs: Ignoring removed i_version option [ 330.749190][T19528] EXT4-fs: Ignoring removed bh option [ 330.780482][T19528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.801157][T13824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.834062][T18414] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.905657][T19542] loop9: detected capacity change from 0 to 512 [ 330.914503][T19544] program syz.2.4723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.931302][T19542] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4722: bad orphan inode 13 [ 330.942805][T19542] ext4_test_bit(bit=12, block=4) = 1 [ 330.948285][T19542] is_bad_inode(inode)=0 [ 330.952532][T19542] NEXT_ORPHAN(inode)=0 [ 330.956629][T19542] max_ino=32 [ 330.959829][T19542] i_nlink=1 [ 330.965414][ T29] audit: type=1326 audit(316.469:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.4.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f02aeb9 code=0x7ffc0000 [ 330.966582][T19542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.988553][ T29] audit: type=1326 audit(316.469:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.4.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f02aeb9 code=0x7ffc0000 [ 331.024555][ T29] audit: type=1326 audit(316.506:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.4.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f178f02aeb9 code=0x7ffc0000 [ 331.047631][ T29] audit: type=1326 audit(316.506:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.4.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f02aeb9 code=0x7ffc0000 [ 331.070505][ T29] audit: type=1326 audit(316.506:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19546 comm="syz.4.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f02aeb9 code=0x7ffc0000 [ 331.093995][T13824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.187086][T19559] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4725'. [ 331.444222][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4731'. [ 331.462994][T19575] bond2: (slave bridge10): Enslaving as an active interface with an up link [ 331.512278][T19581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4733'. [ 331.521300][T19581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4733'. [ 331.530273][T19581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4733'. [ 331.540770][T19581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4733'. [ 331.549820][T19581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4733'. [ 331.558751][T19581] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4733'. [ 331.788517][T19615] loop4: detected capacity change from 0 to 512 [ 331.803546][T19615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.839742][T19615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.859501][T19622] bridge_slave_1: left allmulticast mode [ 331.865209][T19622] bridge_slave_1: left promiscuous mode [ 331.870943][T19622] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.880664][T19622] bridge_slave_0: left allmulticast mode [ 331.881989][T19625] xt_TCPMSS: Only works on TCP SYN packets [ 331.886476][T19622] bridge_slave_0: left promiscuous mode [ 331.898053][T19622] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.978565][T19626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9478 sclass=netlink_route_socket pid=19626 comm=syz.2.4748 [ 331.994277][T17562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.097394][T19642] sg_write: data in/out 33947872/78 bytes for SCSI command 0x0-- guessing data in; [ 332.097394][T19642] program syz.4.4755 not setting count and/or reply_len properly [ 332.127161][T19637] loop5: detected capacity change from 0 to 8192 [ 332.144993][T19637] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.255075][T19654] loop9: detected capacity change from 0 to 128 [ 332.278411][T19654] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.297615][T19654] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.401200][T19663] bridge0: entered promiscuous mode [ 332.408001][T19663] bridge5: port 1(macvlan2) entered blocking state [ 332.414702][T19663] bridge5: port 1(macvlan2) entered disabled state [ 332.421876][T19663] macvlan2: entered allmulticast mode [ 332.427345][T19663] bridge0: entered allmulticast mode [ 332.771084][T19672] loop5: detected capacity change from 0 to 128 [ 332.792381][T19672] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.4765: No space for directory leaf checksum. Please run e2fsck -D. [ 332.807773][T19672] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.4765: Directory block failed checksum [ 332.821129][T19674] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.4765: No space for directory leaf checksum. Please run e2fsck -D. [ 332.836677][T19674] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.4765: checksumming directory block 0 [ 332.851199][T19674] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.4765: No space for directory leaf checksum. Please run e2fsck -D. [ 332.866673][T19674] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.4765: checksumming directory block 0 [ 332.879747][T15415] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 332.895285][T15415] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz-executor: Directory block failed checksum [ 332.946220][T19678] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 332.957242][T19678] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 332.990351][T19678] JBD2: no valid journal superblock found [ 332.996328][T19678] EXT4-fs (loop2): Could not load journal inode [ 333.009373][T19683] EXT4-fs: Ignoring removed bh option [ 333.018138][T19683] EXT4-fs (loop5): inodes count not valid: 41 vs 32 [ 333.075848][T19687] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4769: invalid indirect mapped block 4294967295 (level 1) [ 333.100112][T19687] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4769: invalid indirect mapped block 4294967295 (level 1) [ 333.124988][T19687] EXT4-fs (loop5): 2 truncates cleaned up [ 333.192722][T19691] EXT4-fs: Ignoring removed nobh option [ 333.419552][T19717] EXT4-fs (loop9): Invalid log block size: 2147483646 [ 333.644376][T19728] msdos: Unknown parameter 'cUict' [ 333.681702][T19728] set_capacity_and_notify: 7 callbacks suppressed [ 333.681720][T19728] loop5: detected capacity change from 0 to 2048 [ 333.748104][T19735] loop2: detected capacity change from 0 to 512 [ 333.755418][ T5298] loop5: p3 p4 < > [ 333.759298][ T5298] loop5: p3 start 11362048 is beyond EOD, truncated [ 333.773877][T19728] loop5: p3 p4 < > [ 333.778128][T19728] loop5: p3 start 11362048 is beyond EOD, truncated [ 333.796597][T19735] EXT4-fs (loop2): 1 orphan inode deleted [ 333.933483][T19742] loop1: detected capacity change from 0 to 1024 [ 333.980867][T19742] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 334.020431][T19742] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 334.036492][T15415] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 334.040845][T18414] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 334.047515][T15415] CPU: 0 UID: 0 PID: 15415 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 334.047556][T15415] Tainted: [W]=WARN [ 334.047563][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.047613][T15415] Call Trace: [ 334.047619][T15415] [ 334.047628][T15415] __dump_stack+0x1d/0x30 [ 334.047654][T15415] dump_stack_lvl+0x95/0xd0 [ 334.047696][T15415] dump_stack+0x15/0x1b [ 334.047718][T15415] dump_header+0x80/0x240 [ 334.047740][T15415] oom_kill_process+0x295/0x350 [ 334.047767][T15415] out_of_memory+0x97d/0xb80 [ 334.047888][T15415] try_charge_memcg+0x62e/0xa10 [ 334.047916][T15415] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 334.047954][T15415] __read_swap_cache_async+0x17b/0x2d0 [ 334.048017][T15415] swap_cluster_readahead+0x362/0x3c0 [ 334.048055][T15415] swapin_readahead+0xde/0x840 [ 334.048099][T15415] ? __perf_event_task_sched_in+0xa65/0xad0 [ 334.048127][T15415] ? __rcu_read_unlock+0x4e/0x70 [ 334.048158][T15415] ? swap_cache_get_folio+0x26f/0x280 [ 334.048269][T15415] do_swap_page+0x59b/0x2a50 [ 334.048301][T15415] ? finish_task_switch+0x79/0x280 [ 334.048331][T15415] ? __schedule+0x82d/0xc90 [ 334.048351][T15415] ? __rcu_read_lock+0x36/0x50 [ 334.048453][T15415] ? __pfx_default_wake_function+0x10/0x10 [ 334.048560][T15415] handle_mm_fault+0xb40/0x3030 [ 334.048611][T15415] ? vma_start_read+0x1c7/0x2c0 [ 334.048717][T15415] do_user_addr_fault+0x62f/0x1050 [ 334.048749][T15415] exc_page_fault+0x62/0xa0 [ 334.048773][T15415] asm_exc_page_fault+0x26/0x30 [ 334.048795][T15415] RIP: 0033:0x7ffa1b6460d7 [ 334.048813][T15415] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 334.048844][T15415] RSP: 002b:00007fffeb716600 EFLAGS: 00010202 [ 334.048862][T15415] RAX: 0000000000000000 RBX: 000055556a9bf500 RCX: 00007ffa1b6460d7 [ 334.048877][T15415] RDX: 00007fffeb716640 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.048892][T15415] RBP: 00007fffeb7166ac R08: 0000000000000000 R09: 0000000000000000 [ 334.048906][T15415] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 334.048920][T15415] R13: 00000000000927c0 R14: 000000000004d353 R15: 00007fffeb716700 [ 334.048965][T15415] [ 334.048973][T15415] memory: usage 307200kB, limit 307200kB, failcnt 401 [ 334.206868][T18414] EXT4-fs (loop2): Remounting filesystem read-only [ 334.211218][T15415] memory+swap: usage 180412kB, limit 9007199254740988kB, failcnt 0 [ 334.211235][T15415] kmem: usage 178744kB, limit 9007199254740988kB, failcnt 0 [ 334.322654][T15415] Memory cgroup stats for /syz5: [ 334.326781][T19742] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 334.326905][T15415] cache 0 [ 334.334787][T19742] EXT4-fs (loop1): orphan cleanup on readonly fs [ 334.339741][T15415] rss 20480 [ 334.339752][T15415] shmem 0 [ 334.339758][T15415] mapped_file 0 [ 334.339766][T15415] dirty 0 [ 334.339773][T15415] writeback 0 [ 334.345166][T19742] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.4787: Inode bitmap for bg 0 marked uninitialized [ 334.349004][T15415] workingset_refault_anon 11 [ 334.380029][T19742] EXT4-fs (loop1): Remounting filesystem read-only [ 334.381969][T15415] workingset_refault_file 0 [ 334.381995][T15415] swap 1425408 [ 334.396400][T15415] swapcached 4096 [ 334.400034][T15415] pgpgin 71914 [ 334.403524][T15415] pgpgout 71907 [ 334.407027][T15415] pgfault 87955 [ 334.410488][T15415] pgmajfault 8 [ 334.413962][T15415] inactive_anon 0 [ 334.417738][T15415] active_anon 8192 [ 334.421482][T15415] inactive_file 0 [ 334.425144][T15415] active_file 8192 [ 334.428853][T15415] unevictable 12288 [ 334.432656][T15415] hierarchical_memory_limit 314572800 [ 334.439121][T15415] hierarchical_memsw_limit 9223372036854771712 [ 334.445539][T15415] total_cache 0 [ 334.449114][T15415] total_rss 20480 [ 334.452763][T15415] total_shmem 0 [ 334.456234][T15415] total_mapped_file 0 [ 334.460301][T15415] total_dirty 0 [ 334.463842][T15415] total_writeback 0 [ 334.468555][T15415] total_workingset_refault_anon 11 [ 334.473699][T15415] total_workingset_refault_file 0 [ 334.478847][T15415] total_swap 1425408 [ 334.482731][T15415] total_swapcached 4096 [ 334.486899][T15415] total_pgpgin 71914 [ 334.490858][T15415] total_pgpgout 71907 [ 334.494984][T15415] total_pgfault 87955 [ 334.499171][T15415] total_pgmajfault 8 [ 334.503124][T15415] total_inactive_anon 0 [ 334.507436][T15415] total_active_anon 8192 [ 334.511795][T15415] total_inactive_file 0 [ 334.515952][T15415] total_active_file 8192 [ 334.520471][T15415] total_unevictable 12288 [ 334.524825][T15415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4782,pid=19727,uid=0 [ 334.539652][T15415] Memory cgroup out of memory: Killed process 19727 (syz.5.4782) total-vm:94132kB, anon-rss:1184kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 334.575247][T19751] FAULT_INJECTION: forcing a failure. [ 334.575247][T19751] name failslab, interval 1, probability 0, space 0, times 0 [ 334.588071][T19751] CPU: 1 UID: 0 PID: 19751 Comm: syz.1.4790 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 334.588165][T19751] Tainted: [W]=WARN [ 334.588173][T19751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.588185][T19751] Call Trace: [ 334.588193][T19751] [ 334.588201][T19751] __dump_stack+0x1d/0x30 [ 334.588292][T19751] dump_stack_lvl+0x95/0xd0 [ 334.588314][T19751] dump_stack+0x15/0x1b [ 334.588333][T19751] should_fail_ex+0x263/0x280 [ 334.588373][T19751] should_failslab+0x8c/0xb0 [ 334.588400][T19751] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 334.588443][T19751] ? __alloc_skb+0x2f0/0x4b0 [ 334.588476][T19751] __alloc_skb+0x2f0/0x4b0 [ 334.588573][T19751] ? __alloc_skb+0x219/0x4b0 [ 334.588627][T19751] netlink_alloc_large_skb+0xbf/0xf0 [ 334.588659][T19751] netlink_sendmsg+0x40c/0x6f0 [ 334.588683][T19751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.588781][T19751] ____sys_sendmsg+0x5af/0x600 [ 334.588803][T19751] ___sys_sendmsg+0x195/0x1e0 [ 334.588834][T19751] __x64_sys_sendmsg+0xd4/0x160 [ 334.588860][T19751] x64_sys_call+0x17ba/0x3000 [ 334.588940][T19751] do_syscall_64+0xc0/0x2a0 [ 334.588972][T19751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.589073][T19751] RIP: 0033:0x7fc73c93aeb9 [ 334.589089][T19751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.589106][T19751] RSP: 002b:00007fc73b397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.589125][T19751] RAX: ffffffffffffffda RBX: 00007fc73cbb5fa0 RCX: 00007fc73c93aeb9 [ 334.589177][T19751] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 334.589193][T19751] RBP: 00007fc73b397090 R08: 0000000000000000 R09: 0000000000000000 [ 334.589209][T19751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.589240][T19751] R13: 00007fc73cbb6038 R14: 00007fc73cbb5fa0 R15: 00007fff6f69ea18 [ 334.589258][T19751] [ 334.822849][T19679] syz_tun (unregistering): left allmulticast mode [ 334.887933][T19762] option changes via remount are deprecated (pid=19752 comm=syz.9.4791) [ 334.906931][T19762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.106625][T19770] loop5: detected capacity change from 0 to 512 [ 335.120207][T19770] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 335.130589][T19770] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 335.141882][T19770] EXT4-fs (loop5): group descriptors corrupted! [ 335.220754][ T5768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.295090][ T5768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.348266][ T5768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.422974][ T5768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.513546][ T5768] team0: left allmulticast mode [ 335.518563][ T5768] team_slave_0: left allmulticast mode [ 335.524068][ T5768] team_slave_1: left allmulticast mode [ 335.529741][ T5768] team0: left promiscuous mode [ 335.534523][ T5768] team_slave_0: left promiscuous mode [ 335.540079][ T5768] team_slave_1: left promiscuous mode [ 335.545788][ T5768] bridge0: port 3(team0) entered disabled state [ 335.555303][ T5768] bridge_slave_1: left allmulticast mode [ 335.561028][ T5768] bridge_slave_1: left promiscuous mode [ 335.566718][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.598593][ T5768] bridge_slave_0: left allmulticast mode [ 335.604360][ T5768] bridge_slave_0: left promiscuous mode [ 335.610068][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.774989][ T5768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.797291][T19783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.804580][T19783] IPv6: NLM_F_CREATE should be set when creating new route [ 335.811789][T19783] IPv6: NLM_F_CREATE should be set when creating new route [ 335.819011][T19783] IPv6: NLM_F_CREATE should be set when creating new route [ 335.851796][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 335.851813][ T29] audit: type=1400 audit(322.046:5368): avc: denied { nlmsg_read } for pid=19782 comm="syz.9.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 335.880109][ T5768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.912299][ T5768] bond0 (unregistering): Released all slaves [ 335.936218][T19793] SELinux: Context : is not valid (left unmapped). [ 335.957325][ T29] audit: type=1400 audit(322.084:5369): avc: denied { create } for pid=19787 comm="syz.5.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 335.977564][ T29] audit: type=1400 audit(322.084:5370): avc: denied { setopt } for pid=19787 comm="syz.5.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 335.997782][ T29] audit: type=1400 audit(322.084:5371): avc: denied { write } for pid=19787 comm="syz.5.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 336.018014][ T29] audit: type=1400 audit(322.121:5372): avc: denied { relabelto } for pid=19791 comm="syz.4.4808" name="rdma.current" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 336.041982][ T29] audit: type=1400 audit(322.131:5373): avc: denied { associate } for pid=19791 comm="syz.4.4808" name="rdma.current" dev="tmpfs" ino=850 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 336.089463][ T29] audit: type=1400 audit(322.159:5374): avc: denied { ioctl } for pid=19787 comm="syz.5.4805" path="socket:[66605]" dev="sockfs" ino=66605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 336.114974][ T29] audit: type=1400 audit(322.224:5375): avc: denied { unlink } for pid=17562 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 336.142920][ T5768] hsr_slave_0: left promiscuous mode [ 336.150916][ T5768] hsr_slave_1: left promiscuous mode [ 336.156561][ T5768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.164095][ T5768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.171996][T19795] __nla_validate_parse: 15 callbacks suppressed [ 336.172009][T19795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4805'. [ 336.211378][ T5768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.218892][ T5768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.247902][ T5768] veth1_macvtap: left promiscuous mode [ 336.258523][ T5768] veth0_macvtap: left promiscuous mode [ 336.273693][ T5768] veth1_vlan: left promiscuous mode [ 336.291735][ T5768] veth0_vlan: left promiscuous mode [ 336.342457][T19816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4807'. [ 336.354406][T19817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4812'. [ 336.382818][ T5768] team0 (unregistering): Port device team_slave_1 removed [ 336.392411][ T5768] team0 (unregistering): Port device team_slave_0 removed [ 336.545197][T19835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.552470][T19835] IPv6: NLM_F_CREATE should be set when creating new route [ 336.559705][T19835] IPv6: NLM_F_CREATE should be set when creating new route [ 336.585108][ T29] audit: type=1326 audit(322.720:5376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.4816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73c93aeb9 code=0x7ffc0000 [ 336.608185][ T29] audit: type=1326 audit(322.720:5377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.4816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73c93aeb9 code=0x7ffc0000 [ 336.637738][T19835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.684491][T19774] chnl_net:caif_netlink_parms(): no params data found [ 336.705234][T19856] loop5: detected capacity change from 0 to 512 [ 336.752966][T19856] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4819: corrupted xattr block 6: invalid header [ 336.770874][T19856] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 336.780195][T19856] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4819: corrupted xattr block 6: invalid header [ 336.794412][T19856] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 336.803739][T19856] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4819: corrupted xattr block 6: invalid header [ 336.809048][T19774] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.817362][T19856] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 336.824046][T19774] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.824364][T19774] bridge_slave_0: entered allmulticast mode [ 336.833770][T19856] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4819: corrupted xattr block 6: invalid header [ 336.842196][T19774] bridge_slave_0: entered promiscuous mode [ 336.862655][T19856] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 336.873828][T19774] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.874466][T19856] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4819: corrupted xattr block 6: invalid header [ 336.881012][T19774] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.894142][T19856] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 336.909432][T19774] bridge_slave_1: entered allmulticast mode [ 336.925002][T19856] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.4819: corrupted xattr block 6: invalid header [ 336.925670][T19774] bridge_slave_1: entered promiscuous mode [ 336.979935][T19774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.991276][T19774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.018537][T19774] team0: Port device team_slave_0 added [ 337.022283][T19886] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 337.031848][T19774] team0: Port device team_slave_1 added [ 337.097148][T19774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.104437][T19774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.130465][T19774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.151109][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4825'. [ 337.160646][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4825'. [ 337.162319][T19774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.176651][T19774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.202578][T19774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.234667][T19774] hsr_slave_0: entered promiscuous mode [ 337.241061][T19774] hsr_slave_1: entered promiscuous mode [ 337.249289][T19774] debugfs: 'hsr0' already exists in 'hsr' [ 337.255053][T19774] Cannot create hsr debugfs directory [ 337.443518][T19933] xt_TCPMSS: Only works on TCP SYN packets [ 337.622543][T19960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4840'. [ 337.633815][T19960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4840'. [ 337.634323][T19774] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 337.642867][T19960] validate_nla: 34 callbacks suppressed [ 337.642881][T19960] netlink: 'syz.4.4840': attribute type 7 has an invalid length. [ 337.662951][T19960] netlink: 'syz.4.4840': attribute type 8 has an invalid length. [ 337.670828][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4840'. [ 337.682702][T19774] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 337.721762][T19774] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 337.759954][T19774] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 337.767330][T19969] loop5: detected capacity change from 0 to 512 [ 337.779797][T19969] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 337.788152][T19969] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4842: invalid indirect mapped block 2683928664 (level 1) [ 337.802416][T19969] EXT4-fs (loop5): Remounting filesystem read-only [ 337.809592][T19969] EXT4-fs (loop5): 1 truncate cleaned up [ 337.902506][T19774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.915341][T20003] netlink: 'syz.4.4849': attribute type 27 has an invalid length. [ 337.936478][T19774] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.966582][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.973750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.028967][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.036190][ T5766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.084295][T20018] loop9: detected capacity change from 0 to 512 [ 338.090869][T20018] EXT4-fs: inline encryption not supported [ 338.179698][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4859'. [ 338.188944][T20018] EXT4-fs (loop9): 1 orphan inode deleted [ 338.195391][T20039] chnl_net:caif_netlink_parms(): no params data found [ 338.217527][ T5767] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 338.289534][T20050] loop1: detected capacity change from 0 to 1024 [ 338.334577][T20058] netlink: 'syz.9.4860': attribute type 1 has an invalid length. [ 338.337753][T20061] netlink: 'syz.4.4862': attribute type 3 has an invalid length. [ 338.343605][T19774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.350156][T20061] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4862'. [ 338.565839][T20058] bond3: entered promiscuous mode [ 338.591254][T20058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.635814][T20076] bond3: (slave bridge6): making interface the new active one [ 338.643528][T20076] bridge6: entered promiscuous mode [ 338.651332][T20076] bridge6: left promiscuous mode [ 339.151439][T19774] veth0_vlan: entered promiscuous mode [ 339.167966][T19774] veth1_vlan: entered promiscuous mode [ 339.187801][T20118] IPv6: addrconf: prefix option has invalid lifetime [ 339.213866][T19774] veth0_macvtap: entered promiscuous mode [ 339.228132][T19774] veth1_macvtap: entered promiscuous mode [ 339.252813][T19774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.275075][T19774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.328438][T20125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.339043][T20125] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.353135][T20125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.370992][ T5767] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.385855][ T5767] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.406357][ T5767] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.429750][ T5767] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.523687][T20139] loop8: detected capacity change from 0 to 8192 [ 339.551384][T20139] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.692467][T20171] netlink: 'syz.8.4875': attribute type 1 has an invalid length. [ 339.978412][T20212] FAULT_INJECTION: forcing a failure. [ 339.978412][T20212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.991622][T20212] CPU: 1 UID: 0 PID: 20212 Comm: syz.9.4884 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 339.991654][T20212] Tainted: [W]=WARN [ 339.991675][T20212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.991686][T20212] Call Trace: [ 339.991692][T20212] [ 339.991701][T20212] __dump_stack+0x1d/0x30 [ 339.991726][T20212] dump_stack_lvl+0x95/0xd0 [ 339.991751][T20212] dump_stack+0x15/0x1b [ 339.991770][T20212] should_fail_ex+0x263/0x280 [ 339.991826][T20212] should_fail+0xb/0x20 [ 339.991912][T20212] should_fail_usercopy+0x1a/0x20 [ 339.991944][T20212] _copy_from_user+0x1c/0xb0 [ 339.991967][T20212] __ia32_sys_rt_sigreturn+0x127/0x350 [ 339.992043][T20212] x64_sys_call+0x274a/0x3000 [ 339.992107][T20212] do_syscall_64+0xc0/0x2a0 [ 339.992141][T20212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.992162][T20212] RIP: 0033:0x7faea1a5c2d9 [ 339.992178][T20212] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 339.992196][T20212] RSP: 002b:00007faea0516a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 339.992216][T20212] RAX: ffffffffffffffda RBX: 00007faea1d35fa0 RCX: 00007faea1a5c2d9 [ 339.992265][T20212] RDX: 00007faea0516a80 RSI: 00007faea0516bb0 RDI: 0000000000000021 [ 339.992280][T20212] RBP: 00007faea0517090 R08: 0000000000000000 R09: 0000000000000000 [ 339.992294][T20212] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 339.992330][T20212] R13: 00007faea1d36038 R14: 00007faea1d35fa0 R15: 00007ffcc9a9d9b8 [ 339.992348][T20212] [ 340.241291][T20219] loop9: detected capacity change from 0 to 8192 [ 340.267793][T20219] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.355534][T20232] loop1: detected capacity change from 0 to 512 [ 340.390409][T20236] loop4: detected capacity change from 0 to 128 [ 340.422905][T20232] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4889: inode has both inline data and extents flags [ 340.435619][T20241] netlink: 'syz.9.4887': attribute type 4 has an invalid length. [ 340.466011][T20232] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4889: couldn't read orphan inode 15 (err -117) [ 340.479359][T20236] EXT4-fs mount: 18 callbacks suppressed [ 340.479377][T20236] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 340.519154][T20232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.569571][T20236] netlink: 'syz.4.4890': attribute type 39 has an invalid length. [ 340.604072][T19774] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 340.615097][T19774] CPU: 0 UID: 0 PID: 19774 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.615128][T19774] Tainted: [W]=WARN [ 340.615135][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.615187][T19774] Call Trace: [ 340.615193][T19774] [ 340.615201][T19774] __dump_stack+0x1d/0x30 [ 340.615224][T19774] dump_stack_lvl+0x95/0xd0 [ 340.615250][T19774] dump_stack+0x15/0x1b [ 340.615269][T19774] dump_header+0x80/0x240 [ 340.615343][T19774] oom_kill_process+0x295/0x350 [ 340.615368][T19774] out_of_memory+0x97d/0xb80 [ 340.615443][T19774] try_charge_memcg+0x62e/0xa10 [ 340.615485][T19774] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 340.615599][T19774] __read_swap_cache_async+0x17b/0x2d0 [ 340.615693][T19774] swap_cluster_readahead+0x362/0x3c0 [ 340.615726][T19774] swapin_readahead+0xde/0x840 [ 340.615756][T19774] ? __perf_event_task_sched_in+0xa65/0xad0 [ 340.615793][T19774] ? __rcu_read_unlock+0x4e/0x70 [ 340.615820][T19774] ? swap_cache_get_folio+0x26f/0x280 [ 340.615849][T19774] do_swap_page+0x59b/0x2a50 [ 340.615951][T19774] ? finish_task_switch+0x79/0x280 [ 340.615978][T19774] ? __schedule+0x82d/0xc90 [ 340.615997][T19774] ? __rcu_read_lock+0x36/0x50 [ 340.616022][T19774] ? __pfx_default_wake_function+0x10/0x10 [ 340.616092][T19774] handle_mm_fault+0xb40/0x3030 [ 340.616197][T19774] ? vma_start_read+0x1c7/0x2c0 [ 340.616223][T19774] do_user_addr_fault+0x62f/0x1050 [ 340.616255][T19774] exc_page_fault+0x62/0xa0 [ 340.616311][T19774] asm_exc_page_fault+0x26/0x30 [ 340.616330][T19774] RIP: 0033:0x7f470e8560d7 [ 340.616346][T19774] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 340.616411][T19774] RSP: 002b:00007ffc9f662770 EFLAGS: 00010202 [ 340.616428][T19774] RAX: 0000000000000000 RBX: 00005555751a9500 RCX: 00007f470e8560d7 [ 340.616442][T19774] RDX: 00007ffc9f6627b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.616455][T19774] RBP: 00007ffc9f66281c R08: 0000000000000000 R09: 0000000000000000 [ 340.616468][T19774] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 340.616525][T19774] R13: 00000000000927c0 R14: 000000000004e95f R15: 00007ffc9f662870 [ 340.616542][T19774] [ 340.616549][T19774] memory: usage 307200kB, limit 307200kB, failcnt 823 [ 340.642847][T20254] loop5: detected capacity change from 0 to 1024 [ 340.645571][T19774] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 340.712494][T20254] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4893: Failed to acquire dquot type 0 [ 340.712968][T19774] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 340.721243][T20254] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, [ 340.722965][T19774] Memory cgroup stats for /syz8: [ 340.799192][T19774] cache 0 [ 340.806352][T20254] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 340.814384][T19774] rss 0 [ 340.814396][T19774] shmem 0 [ 340.814402][T19774] mapped_file 0 [ 340.814409][T19774] dirty 0 [ 340.814416][T19774] writeback 0 [ 340.854050][T20254] EXT4-fs (loop5): 1 truncate cleaned up [ 340.854658][T19774] workingset_refault_anon 168 [ 340.863283][T20254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.873711][T19774] workingset_refault_file 0 [ 340.873722][T19774] swap 188416 [ 340.873730][T19774] swapcached 0 [ 340.873737][T19774] pgpgin 48766 [ 340.873745][T19774] pgpgout 48764 [ 340.900641][T20259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27611 sclass=netlink_route_socket pid=20259 comm=syz.9.4895 [ 340.905672][T19774] pgfault 67500 [ 340.905685][T19774] pgmajfault 125 [ 340.905693][T19774] inactive_anon 0 [ 340.905700][T19774] active_anon 0 [ 340.905707][T19774] inactive_file 0 [ 340.905715][T19774] active_file 8192 [ 340.905723][T19774] unevictable 0 [ 340.932669][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.943966][T19774] hierarchical_memory_limit 314572800 [ 341.014218][T19774] hierarchical_memsw_limit 9223372036854771712 [ 341.020816][T19774] total_cache 0 [ 341.024361][T19774] total_rss 0 [ 341.027639][T19774] total_shmem 0 [ 341.031092][T19774] total_mapped_file 0 [ 341.035126][T19774] total_dirty 0 [ 341.038583][T19774] total_writeback 0 [ 341.042388][T19774] total_workingset_refault_anon 168 [ 341.047620][T19774] total_workingset_refault_file 0 [ 341.052644][T19774] total_swap 188416 [ 341.056576][T19774] total_swapcached 0 [ 341.060621][T19774] total_pgpgin 48766 [ 341.064538][T19774] total_pgpgout 48764 [ 341.068682][T19774] total_pgfault 67500 [ 341.072658][T19774] total_pgmajfault 125 [ 341.076815][T19774] total_inactive_anon 0 [ 341.080957][T19774] total_active_anon 0 [ 341.084944][T19774] total_inactive_file 0 [ 341.089135][T19774] total_active_file 8192 [ 341.093364][T19774] total_unevictable 0 [ 341.097363][T19774] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4882,pid=20205,uid=0 [ 341.112193][T19774] Memory cgroup out of memory: Killed process 20205 (syz.8.4882) total-vm:94000kB, anon-rss:1332kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 341.164843][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.269275][T17562] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.327691][T20283] loop8: detected capacity change from 0 to 8192 [ 341.391056][T20283] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.408072][T20307] netlink: 'syz.9.4904': attribute type 3 has an invalid length. [ 341.508829][T20315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20315 comm=syz.9.4906 [ 341.524361][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 341.524376][ T29] audit: type=1326 audit(327.350:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.596772][ T29] audit: type=1326 audit(327.378:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.619769][ T29] audit: type=1326 audit(327.378:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.642939][ T29] audit: type=1326 audit(327.378:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.666374][ T29] audit: type=1326 audit(327.378:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.689586][ T29] audit: type=1326 audit(327.378:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.712578][ T29] audit: type=1326 audit(327.378:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.712606][ T29] audit: type=1326 audit(327.378:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.748709][T20335] loop1: detected capacity change from 0 to 512 [ 341.758656][ T29] audit: type=1326 audit(327.378:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.787637][ T29] audit: type=1326 audit(327.378:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20312 comm="syz.9.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea1abaeb9 code=0x7ffc0000 [ 341.833764][T20335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.837341][T20333] __nla_validate_parse: 6 callbacks suppressed [ 341.837358][T20333] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.4909'. [ 341.920425][T20350] netlink: 'syz.5.4912': attribute type 9 has an invalid length. [ 342.001066][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.069074][T20360] loop8: detected capacity change from 0 to 1024 [ 342.075832][T20368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20368 comm=syz.9.4918 [ 342.109782][T20360] ext4: Unknown parameter 'func' [ 342.175111][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4921'. [ 342.178841][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4922'. [ 342.193191][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4922'. [ 342.229952][T20372] loop1: detected capacity change from 0 to 8192 [ 342.248516][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4922'. [ 342.269523][T20385] loop4: detected capacity change from 0 to 1024 [ 342.283604][T20372] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.327474][T20385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.398690][T20394] FAULT_INJECTION: forcing a failure. [ 342.398690][T20394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.411985][T20394] CPU: 0 UID: 0 PID: 20394 Comm: syz.9.4927 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 342.412018][T20394] Tainted: [W]=WARN [ 342.412024][T20394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.412036][T20394] Call Trace: [ 342.412042][T20394] [ 342.412049][T20394] __dump_stack+0x1d/0x30 [ 342.412137][T20394] dump_stack_lvl+0x95/0xd0 [ 342.412161][T20394] dump_stack+0x15/0x1b [ 342.412184][T20394] should_fail_ex+0x263/0x280 [ 342.412219][T20394] should_fail+0xb/0x20 [ 342.412254][T20394] should_fail_usercopy+0x1a/0x20 [ 342.412325][T20394] _copy_from_user+0x1c/0xb0 [ 342.412349][T20394] kstrtouint_from_user+0x69/0xf0 [ 342.412386][T20394] proc_fail_nth_write+0x50/0x160 [ 342.412498][T20394] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 342.412529][T20394] vfs_write+0x269/0x9f0 [ 342.412609][T20394] ? __rcu_read_unlock+0x4e/0x70 [ 342.412643][T20394] ? __fget_files+0x184/0x1c0 [ 342.412668][T20394] ? kfree+0x10a/0x3b0 [ 342.412702][T20394] ? mutex_lock+0x57/0x90 [ 342.412729][T20394] ksys_write+0xdc/0x1a0 [ 342.412752][T20394] __x64_sys_write+0x40/0x50 [ 342.412775][T20394] x64_sys_call+0x2847/0x3000 [ 342.412813][T20394] do_syscall_64+0xc0/0x2a0 [ 342.412903][T20394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.412928][T20394] RIP: 0033:0x7faea1a7b78e [ 342.412947][T20394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 342.412968][T20394] RSP: 002b:00007faea0516fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.413031][T20394] RAX: ffffffffffffffda RBX: 00007faea05176c0 RCX: 00007faea1a7b78e [ 342.413103][T20394] RDX: 0000000000000001 RSI: 00007faea05170a0 RDI: 0000000000000005 [ 342.413123][T20394] RBP: 00007faea0517090 R08: 0000000000000000 R09: 0000000000000000 [ 342.413139][T20394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.413154][T20394] R13: 00007faea1d36038 R14: 00007faea1d35fa0 R15: 00007ffcc9a9d9b8 [ 342.413254][T20394] [ 342.622259][T20387] EXT4-fs: Ignoring removed orlov option [ 342.792982][T20387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.813038][T17562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.885974][T20404] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 342.920751][T20408] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 342.939998][T20404] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 342.961836][T20404] EXT4-fs (loop9): orphan cleanup on readonly fs [ 342.970484][T20404] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4931: bg 0: block 4: invalid block bitmap [ 342.985016][T20404] EXT4-fs (loop9): Remounting filesystem read-only [ 342.991701][T20404] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 343.005039][T20404] EXT4-fs (loop9): 1 truncate cleaned up [ 343.011353][T20404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 343.066170][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.084262][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4939'. [ 343.093437][T20429] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4939'. [ 343.103677][T13824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.182024][T20434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.249860][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.359020][T20439] syz.8.4943 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 343.373394][T20439] CPU: 1 UID: 0 PID: 20439 Comm: syz.8.4943 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 343.373440][T20439] Tainted: [W]=WARN [ 343.373449][T20439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.373465][T20439] Call Trace: [ 343.373473][T20439] [ 343.373535][T20439] __dump_stack+0x1d/0x30 [ 343.373562][T20439] dump_stack_lvl+0x95/0xd0 [ 343.373590][T20439] dump_stack+0x15/0x1b [ 343.373647][T20439] dump_header+0x80/0x240 [ 343.373671][T20439] oom_kill_process+0x295/0x350 [ 343.373765][T20439] out_of_memory+0x97d/0xb80 [ 343.373800][T20439] try_charge_memcg+0x62e/0xa10 [ 343.373890][T20439] obj_cgroup_charge_pages+0x23/0xc0 [ 343.373928][T20439] __memcg_kmem_charge_page+0x9e/0x170 [ 343.374031][T20439] __alloc_frozen_pages_noprof+0x18a/0x350 [ 343.374138][T20439] alloc_pages_mpol+0xb3/0x260 [ 343.374211][T20439] alloc_pages_noprof+0x8f/0x130 [ 343.374264][T20439] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 343.374318][T20439] __kvmalloc_node_noprof+0x471/0x680 [ 343.374355][T20439] ? ip_set_alloc+0x24/0x30 [ 343.374405][T20439] ? ip_set_alloc+0x24/0x30 [ 343.374441][T20439] ip_set_alloc+0x24/0x30 [ 343.374557][T20439] hash_netiface_create+0x282/0x740 [ 343.374598][T20439] ? __pfx_hash_netiface_create+0x10/0x10 [ 343.374648][T20439] ip_set_create+0x3cf/0x970 [ 343.374696][T20439] ? __nla_parse+0x40/0x60 [ 343.374749][T20439] nfnetlink_rcv_msg+0x509/0x5d0 [ 343.374802][T20439] netlink_rcv_skb+0x123/0x220 [ 343.374916][T20439] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 343.374958][T20439] nfnetlink_rcv+0x167/0x1720 [ 343.375015][T20439] ? __kfree_skb+0x109/0x150 [ 343.375095][T20439] ? nlmon_xmit+0x4f/0x60 [ 343.375133][T20439] ? consume_skb+0x49/0x140 [ 343.375171][T20439] ? nlmon_xmit+0x4f/0x60 [ 343.375229][T20439] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 343.375333][T20439] ? __dev_queue_xmit+0x139a/0x1f20 [ 343.375435][T20439] ? __dev_queue_xmit+0x148/0x1f20 [ 343.375480][T20439] ? ref_tracker_free+0x37d/0x3e0 [ 343.375533][T20439] ? __netlink_deliver_tap+0x4dc/0x500 [ 343.375633][T20439] netlink_unicast+0x5c0/0x690 [ 343.375675][T20439] netlink_sendmsg+0x5c8/0x6f0 [ 343.375702][T20439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.375728][T20439] ____sys_sendmsg+0x5af/0x600 [ 343.375819][T20439] ___sys_sendmsg+0x195/0x1e0 [ 343.375917][T20439] __x64_sys_sendmsg+0xd4/0x160 [ 343.375991][T20439] x64_sys_call+0x17ba/0x3000 [ 343.376020][T20439] do_syscall_64+0xc0/0x2a0 [ 343.376109][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.376132][T20439] RIP: 0033:0x7f470e89aeb9 [ 343.376178][T20439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.376198][T20439] RSP: 002b:00007f470d2f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.376219][T20439] RAX: ffffffffffffffda RBX: 00007f470eb15fa0 RCX: 00007f470e89aeb9 [ 343.376234][T20439] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 343.376275][T20439] RBP: 00007f470e908c1f R08: 0000000000000000 R09: 0000000000000000 [ 343.376289][T20439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.376302][T20439] R13: 00007f470eb16038 R14: 00007f470eb15fa0 R15: 00007ffc9f662478 [ 343.376330][T20439] [ 343.376338][T20439] memory: usage 307200kB, limit 307200kB, failcnt 922 [ 343.414613][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4948'. [ 343.417383][T20439] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 343.417402][T20439] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 343.417418][T20439] Memory cgroup stats for /syz8: [ 343.727537][T20439] cache 0 [ 343.735537][T20439] rss 0 [ 343.738416][T20439] shmem 0 [ 343.741389][T20439] mapped_file 0 [ 343.744998][T20439] dirty 0 [ 343.748033][T20439] writeback 0 [ 343.751321][T20439] workingset_refault_anon 207 [ 343.756023][T20439] workingset_refault_file 0 [ 343.760543][T20439] swap 188416 [ 343.763822][T20439] swapcached 0 [ 343.767232][T20439] pgpgin 56476 [ 343.770670][T20439] pgpgout 56474 [ 343.774246][T20439] pgfault 74640 [ 343.777682][T20439] pgmajfault 151 [ 343.781235][T20439] inactive_anon 0 [ 343.784951][T20439] active_anon 0 [ 343.788403][T20439] inactive_file 0 [ 343.792192][T20439] active_file 8192 [ 343.795963][T20439] unevictable 0 [ 343.799398][T20439] hierarchical_memory_limit 314572800 [ 343.804904][T20439] hierarchical_memsw_limit 9223372036854771712 [ 343.811059][T20439] total_cache 0 [ 343.814534][T20439] total_rss 0 [ 343.817855][T20439] total_shmem 0 [ 343.821299][T20439] total_mapped_file 0 [ 343.825361][T20439] total_dirty 0 [ 343.828874][T20439] total_writeback 0 [ 343.832682][T20439] total_workingset_refault_anon 207 [ 343.837908][T20439] total_workingset_refault_file 0 [ 343.843005][T20439] total_swap 188416 [ 343.846825][T20439] total_swapcached 0 [ 343.850771][T20439] total_pgpgin 56476 [ 343.854736][T20439] total_pgpgout 56474 [ 343.858710][T20439] total_pgfault 74640 [ 343.862774][T20439] total_pgmajfault 151 [ 343.866929][T20439] total_inactive_anon 0 [ 343.871077][T20439] total_active_anon 0 [ 343.875070][T20439] total_inactive_file 0 [ 343.879567][T20439] total_active_file 8192 [ 343.884068][T20439] total_unevictable 0 [ 343.888139][T20439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4943,pid=20433,uid=0 [ 343.905195][T20439] Memory cgroup out of memory: Killed process 20433 (syz.8.4943) total-vm:94000kB, anon-rss:1204kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 343.935722][T20459] syzkaller0: entered promiscuous mode [ 343.941335][T20459] syzkaller0: entered allmulticast mode [ 343.998071][T20472] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.030922][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.037375][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.043964][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.051377][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.105321][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4954'. [ 344.114833][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.123800][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.140505][T20484] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 344.151070][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.165312][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 344.170859][T20484] EXT4-fs (loop9): orphan file too big: 8388608 [ 344.180135][T20484] EXT4-fs (loop9): mount failed [ 344.284683][T20495] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 344.294067][T20495] FAT-fs (loop8): Filesystem has been set read-only [ 344.349635][T20502] EXT4-fs: test_dummy_encryption option not supported [ 344.388489][T20507] netlink: 332 bytes leftover after parsing attributes in process `syz.5.4959'. [ 344.400961][T20507] netlink: 'syz.5.4959': attribute type 9 has an invalid length. [ 344.487984][T20515] netlink: 'syz.9.4962': attribute type 1 has an invalid length. [ 344.509535][T20515] netlink: 'syz.9.4962': attribute type 12 has an invalid length. [ 344.517422][T20515] netlink: 'syz.9.4962': attribute type 5 has an invalid length. [ 344.525173][T20515] netlink: 'syz.9.4962': attribute type 2 has an invalid length. [ 344.533069][T20515] netlink: 'syz.9.4962': attribute type 7 has an invalid length. [ 344.571533][T20494] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 344.637813][T20539] netlink: 'syz.4.4971': attribute type 4 has an invalid length. [ 344.717356][T20553] 9pnet_fd: Insufficient options for proto=fd [ 344.792683][T20559] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 344.805429][T20559] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 344.805545][T20559] EXT4-fs (loop5): 1 truncate cleaned up [ 344.806248][T20559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.857535][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.968937][T20586] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 345.042610][T20570] bond1: (slave netdevsim0): Releasing backup interface [ 345.081843][T20600] sg_write: data in/out 33947872/224 bytes for SCSI command 0x0-- guessing data in; [ 345.081843][T20600] program syz.8.4991 not setting count and/or reply_len properly [ 345.193249][T20610] set_capacity_and_notify: 12 callbacks suppressed [ 345.193266][T20610] loop1: detected capacity change from 0 to 512 [ 345.214435][T20616] loop4: detected capacity change from 0 to 512 [ 345.235977][T20615] loop8: detected capacity change from 0 to 512 [ 345.240206][T20610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.261706][T20616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.289359][T20621] FAULT_INJECTION: forcing a failure. [ 345.289359][T20621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.293597][T20610] EXT4-fs (loop1): 1 truncate cleaned up [ 345.302666][T20621] CPU: 0 UID: 0 PID: 20621 Comm: syz.9.4998 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.302703][T20621] Tainted: [W]=WARN [ 345.302709][T20621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.302720][T20621] Call Trace: [ 345.302728][T20621] [ 345.302736][T20621] __dump_stack+0x1d/0x30 [ 345.302765][T20621] dump_stack_lvl+0x95/0xd0 [ 345.302803][T20621] dump_stack+0x15/0x1b [ 345.302826][T20621] should_fail_ex+0x263/0x280 [ 345.302870][T20621] should_fail+0xb/0x20 [ 345.302898][T20621] should_fail_usercopy+0x1a/0x20 [ 345.302942][T20621] _copy_from_user+0x1c/0xb0 [ 345.303036][T20621] __copy_msghdr+0x244/0x300 [ 345.303194][T20621] ___sys_sendmsg+0x10c/0x1e0 [ 345.303224][T20621] __x64_sys_sendmsg+0xd4/0x160 [ 345.303313][T20621] x64_sys_call+0x17ba/0x3000 [ 345.303339][T20621] do_syscall_64+0xc0/0x2a0 [ 345.303451][T20621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.303476][T20621] RIP: 0033:0x7faea1abaeb9 [ 345.303494][T20621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.303575][T20621] RSP: 002b:00007faea0517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.303597][T20621] RAX: ffffffffffffffda RBX: 00007faea1d35fa0 RCX: 00007faea1abaeb9 [ 345.303612][T20621] RDX: 0000000004000012 RSI: 0000200000000200 RDI: 0000000000000003 [ 345.303627][T20621] RBP: 00007faea0517090 R08: 0000000000000000 R09: 0000000000000000 [ 345.303642][T20621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.303655][T20621] R13: 00007faea1d36038 R14: 00007faea1d35fa0 R15: 00007ffcc9a9d9b8 [ 345.303709][T20621] [ 345.391174][T20616] EXT4-fs (loop4): 1 truncate cleaned up [ 345.395924][T20610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.401954][T20616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.686445][T17562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.704296][T20645] sg_write: data in/out 33947872/224 bytes for SCSI command 0x0-- guessing data in; [ 345.704296][T20645] program syz.9.5007 not setting count and/or reply_len properly [ 345.741563][T20648] loop4: detected capacity change from 0 to 128 [ 345.768469][T20648] FAT-fs (loop4): bogus sectors per cluster 0 [ 345.774670][T20648] FAT-fs (loop4): Can't find a valid FAT filesystem [ 345.843742][T20656] loop9: detected capacity change from 0 to 1024 [ 345.852063][T20656] EXT4-fs: Ignoring removed nobh option [ 345.857816][T20656] EXT4-fs: Ignoring removed bh option [ 345.894214][T20656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.963869][ T7974] IPVS: starting estimator thread 0... [ 345.981837][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.037576][T20671] netlink: 'syz.8.5015': attribute type 27 has an invalid length. [ 346.052822][T20673] netlink: 'syz.1.5014': attribute type 1 has an invalid length. [ 346.056531][T20664] IPVS: using max 2304 ests per chain, 115200 per kthread [ 346.075202][T20673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.082639][T20661] netlink: 'syz.5.5002': attribute type 4 has an invalid length. [ 346.196960][T20678] loop4: detected capacity change from 0 to 1024 [ 346.207274][T20671] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.214465][T20671] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.242624][T20678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.294851][T20678] EXT4-fs warning (device loop4): ext4_rmdir:3185: inode #11: comm syz.4.5016: empty directory 'file1' has too many links (111) [ 346.378113][T20671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.391253][T17562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.446448][T20671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.624506][T20695] loop4: detected capacity change from 0 to 128 [ 346.663285][T20695] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.5021: iget: checksum invalid [ 346.688224][T20675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.696042][T20675] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.720012][T20695] EXT4-fs (loop4): get root inode failed [ 346.725704][T20695] EXT4-fs (loop4): mount failed [ 346.731179][T13824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.743328][T20675] net_ratelimit: 24 callbacks suppressed [ 346.743341][T20675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.777955][ T3322] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.822539][ T3322] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.851951][ T3322] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.880269][ T3322] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.957208][T20702] loop9: detected capacity change from 0 to 8192 [ 346.987290][T20711] loop4: detected capacity change from 0 to 128 [ 347.000826][T20711] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.020283][ T5298] loop9: p3 < > [ 347.032221][T20702] loop9: p3 < > [ 347.064470][T20714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=20714 comm=syz.8.5028 [ 347.126549][ T5298] udevd[5298]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 347.174358][ T5298] udevd[5298]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 347.205539][T20717] loop9: detected capacity change from 0 to 1024 [ 347.266670][T20717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.406834][T13824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.436979][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 347.436996][ T29] audit: type=1326 audit(332.878:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.481641][T20722] sg_write: data in/out 33947872/224 bytes for SCSI command 0x0-- guessing data in; [ 347.481641][T20722] program syz.8.5030 not setting count and/or reply_len properly [ 347.522489][ T29] audit: type=1326 audit(332.916:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.545462][ T29] audit: type=1326 audit(332.916:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.568436][ T29] audit: type=1326 audit(332.916:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.591407][ T29] audit: type=1326 audit(332.916:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.614284][ T29] audit: type=1326 audit(332.916:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.637481][ T29] audit: type=1326 audit(332.916:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.660727][ T29] audit: type=1326 audit(332.916:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.683726][ T29] audit: type=1326 audit(332.916:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.706637][ T29] audit: type=1326 audit(332.916:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.8.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f470e89aeb9 code=0x7ffc0000 [ 347.740527][T20726] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.770572][T20726] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.813430][T17562] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.838284][ T5766] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 348.046592][T20751] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 348.054092][T20752] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 348.065786][T20752] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 348.085960][T20752] EXT4-fs (loop4): orphan cleanup on readonly fs [ 348.092890][T20752] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.5041: bad orphan inode 15 [ 348.103748][T20752] ext4_test_bit(bit=14, block=18) = 1 [ 348.109176][T20752] is_bad_inode(inode)=0 [ 348.113419][T20752] NEXT_ORPHAN(inode)=1023 [ 348.117821][T20752] max_ino=32 [ 348.121052][T20752] i_nlink=0 [ 348.128317][T20752] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.5041: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 348.132615][T20751] EXT4-fs (loop9): 1 truncate cleaned up [ 348.152654][T20751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.161293][T20752] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 348.192394][T20752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 348.216260][T17562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.307926][T13824] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.393230][T20772] ext4: Unknown parameter 'smackfshat' [ 348.486001][T20784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.617136][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.627468][T20806] __nla_validate_parse: 11 callbacks suppressed [ 348.627487][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5058'. [ 348.642763][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5058'. [ 348.677961][T20810] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5061'. [ 348.699002][T20813] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5062'. [ 348.712108][T20815] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5063'. [ 348.721782][T20815] FAULT_INJECTION: forcing a failure. [ 348.721782][T20815] name failslab, interval 1, probability 0, space 0, times 0 [ 348.734545][T20815] CPU: 0 UID: 0 PID: 20815 Comm: syz.9.5063 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.734581][T20815] Tainted: [W]=WARN [ 348.734588][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.734602][T20815] Call Trace: [ 348.734610][T20815] [ 348.734620][T20815] __dump_stack+0x1d/0x30 [ 348.734779][T20815] dump_stack_lvl+0x95/0xd0 [ 348.734799][T20815] dump_stack+0x15/0x1b [ 348.734821][T20815] should_fail_ex+0x263/0x280 [ 348.734880][T20815] should_failslab+0x8c/0xb0 [ 348.734906][T20815] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 348.734936][T20815] ? __alloc_skb+0x2f0/0x4b0 [ 348.735019][T20815] __alloc_skb+0x2f0/0x4b0 [ 348.735067][T20815] ? __alloc_skb+0x219/0x4b0 [ 348.735094][T20815] netlink_alloc_large_skb+0xbf/0xf0 [ 348.735188][T20815] netlink_sendmsg+0x40c/0x6f0 [ 348.735208][T20815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.735289][T20815] __sys_sendto+0x470/0x4d0 [ 348.735324][T20815] __x64_sys_sendto+0x76/0x90 [ 348.735369][T20815] x64_sys_call+0x29a7/0x3000 [ 348.735443][T20815] do_syscall_64+0xc0/0x2a0 [ 348.735476][T20815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.735510][T20815] RIP: 0033:0x7faea1abaeb9 [ 348.735528][T20815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.735546][T20815] RSP: 002b:00007faea0517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 348.735567][T20815] RAX: ffffffffffffffda RBX: 00007faea1d35fa0 RCX: 00007faea1abaeb9 [ 348.735582][T20815] RDX: 0000000000000090 RSI: 0000200000000180 RDI: 0000000000000003 [ 348.735595][T20815] RBP: 00007faea0517090 R08: 0000000000000000 R09: 0000000000000000 [ 348.735647][T20815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.735659][T20815] R13: 00007faea1d36038 R14: 00007faea1d35fa0 R15: 00007ffcc9a9d9b8 [ 348.735677][T20815] [ 348.746211][T20818] tipc: Enabled bearer , priority 0 [ 348.970735][T20822] syzkaller0: entered promiscuous mode [ 348.976306][T20822] syzkaller0: entered allmulticast mode [ 348.982287][T20822] tipc: Resetting bearer [ 348.994752][T20822] tipc: Resetting bearer [ 349.010280][T20822] tipc: Disabling bearer [ 349.080215][T20830] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.092556][T20830] EXT4-fs (loop4): 1 truncate cleaned up [ 349.099113][T20830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.136164][T20837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.144642][T20837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.368287][T17562] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.400160][T20842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5072'. [ 349.409497][T20842] bridge0: port 3(team0) entered blocking state [ 349.416055][T20842] bridge0: port 3(team0) entered disabled state [ 349.422733][T20842] team0: entered allmulticast mode [ 349.427925][T20842] team_slave_0: entered allmulticast mode [ 349.433759][T20842] team_slave_1: entered allmulticast mode [ 349.440269][T20842] team0: entered promiscuous mode [ 349.445405][T20842] team_slave_0: entered promiscuous mode [ 349.451095][T20842] team_slave_1: entered promiscuous mode [ 349.471833][T20844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5073'. [ 349.593936][T20854] netlink: 268 bytes leftover after parsing attributes in process `syz.1.5078'. [ 349.599915][T20855] netlink: 1300 bytes leftover after parsing attributes in process `syz.4.5076'. [ 349.704966][T20859] lo speed is unknown, defaulting to 1000 [ 349.710759][T20859] lo speed is unknown, defaulting to 1000 [ 349.716880][T20859] lo speed is unknown, defaulting to 1000 [ 349.723630][T20859] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 349.733168][T20859] lo speed is unknown, defaulting to 1000 [ 349.739974][T20859] lo speed is unknown, defaulting to 1000 [ 349.746141][T20859] lo speed is unknown, defaulting to 1000 [ 349.752297][T20859] lo speed is unknown, defaulting to 1000 [ 349.758418][T20859] lo speed is unknown, defaulting to 1000 [ 349.764349][T20859] lo speed is unknown, defaulting to 1000 [ 349.770499][T20859] lo speed is unknown, defaulting to 1000 [ 349.776605][T20859] lo speed is unknown, defaulting to 1000 [ 349.783103][T20859] lo speed is unknown, defaulting to 1000 [ 349.834698][T20868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 349.846013][T20868] EXT4-fs (loop5): 1 truncate cleaned up [ 349.852607][T20868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.948200][ T7980] usb usb6-port1: attempt power cycle [ 350.128537][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.175735][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5085'. [ 350.196180][T20878] tmpfs: Unknown parameter '/dev/ppp' [ 350.470770][T20893] validate_nla: 3 callbacks suppressed [ 350.470784][T20893] netlink: 'syz.5.5090': attribute type 13 has an invalid length. [ 350.526620][T20900] FAULT_INJECTION: forcing a failure. [ 350.526620][T20900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.539890][T20900] CPU: 1 UID: 0 PID: 20900 Comm: syz.1.5093 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 350.539978][T20900] Tainted: [W]=WARN [ 350.539982][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.539990][T20900] Call Trace: [ 350.539994][T20900] [ 350.540031][T20900] __dump_stack+0x1d/0x30 [ 350.540047][T20900] dump_stack_lvl+0x95/0xd0 [ 350.540060][T20900] dump_stack+0x15/0x1b [ 350.540072][T20900] should_fail_ex+0x263/0x280 [ 350.540153][T20900] should_fail+0xb/0x20 [ 350.540169][T20900] should_fail_usercopy+0x1a/0x20 [ 350.540187][T20900] _copy_to_user+0x20/0xa0 [ 350.540212][T20900] simple_read_from_buffer+0xb5/0x130 [ 350.540233][T20900] proc_fail_nth_read+0x10e/0x150 [ 350.540250][T20900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.540340][T20900] vfs_read+0x1ab/0x7f0 [ 350.540351][T20900] ? __rcu_read_unlock+0x4e/0x70 [ 350.540369][T20900] ? __fget_files+0x184/0x1c0 [ 350.540383][T20900] ? mutex_lock+0x57/0x90 [ 350.540420][T20900] ksys_read+0xdc/0x1a0 [ 350.540432][T20900] __x64_sys_read+0x40/0x50 [ 350.540444][T20900] x64_sys_call+0x2889/0x3000 [ 350.540497][T20900] do_syscall_64+0xc0/0x2a0 [ 350.540519][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.540533][T20900] RIP: 0033:0x7fc73c8fb78e [ 350.540543][T20900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.540555][T20900] RSP: 002b:00007fc73b396fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.540588][T20900] RAX: ffffffffffffffda RBX: 00007fc73b3976c0 RCX: 00007fc73c8fb78e [ 350.540597][T20900] RDX: 000000000000000f RSI: 00007fc73b3970a0 RDI: 0000000000000004 [ 350.540605][T20900] RBP: 00007fc73b397090 R08: 0000000000000000 R09: 0000000000000000 [ 350.540647][T20900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.540719][T20900] R13: 00007fc73cbb6038 R14: 00007fc73cbb5fa0 R15: 00007fff6f69ea18 [ 350.540731][T20900] [ 350.747302][T20902] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 350.765151][T20902] EXT4-fs (loop5): 1 truncate cleaned up [ 350.767034][T20904] set_capacity_and_notify: 8 callbacks suppressed [ 350.767051][T20904] loop1: detected capacity change from 0 to 512 [ 350.771581][T20902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.799314][T20904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.823362][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.857812][T20911] loop1: detected capacity change from 0 to 1024 [ 350.864659][T20911] EXT4-fs: Ignoring removed bh option [ 350.881490][T20911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.907438][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.069080][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.936582][ T7980] usb usb6-port1: unable to enumerate USB device [ 352.018498][T20942] loop1: detected capacity change from 0 to 2048 [ 352.025716][T20942] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.044722][T20942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.169987][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.225179][T20964] loop8: detected capacity change from 0 to 512 [ 352.235342][T20964] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 352.281655][T20971] loop1: detected capacity change from 0 to 128 [ 352.283037][T20964] EXT4-fs (loop8): 1 truncate cleaned up [ 352.288745][T20971] vfat: Unknown parameter 'g큻df^xi)7+(ҭhmІ{uRh3X:s0#1$n<ڱn3p9. `toZo;o_%v;t1s0G00000000000000000002152j00000000000000000002152j00000000000000001128' [ 352.316209][T20964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.331775][T20964] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 352.355320][T19774] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.374478][T20979] sg_write: data in/out 33947872/78 bytes for SCSI command 0x0-- guessing data in; [ 352.374478][T20979] program syz.8.5120 not setting count and/or reply_len properly [ 352.515830][T21008] loop1: detected capacity change from 0 to 512 [ 352.522908][T21008] EXT4-fs: Invalid want_extra_isize 65536 [ 352.532967][T21008] ip6gre1: entered promiscuous mode [ 352.538328][T21008] ip6gre1: entered allmulticast mode [ 352.585519][T21012] loop1: detected capacity change from 0 to 512 [ 352.597439][T21012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.614961][T21012] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21012 comm=syz.1.5131 [ 352.625661][T21015] netlink: 'syz.5.5132': attribute type 21 has an invalid length. [ 352.635912][T21015] netlink: 'syz.5.5132': attribute type 1 has an invalid length. [ 352.650817][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.695038][T21020] loop1: detected capacity change from 0 to 512 [ 352.706736][T21020] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5133: invalid indirect mapped block 4294967295 (level 1) [ 352.726553][T21020] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5133: invalid indirect mapped block 4294967295 (level 1) [ 352.741116][T21020] EXT4-fs (loop1): 2 truncates cleaned up [ 352.747595][T21020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.779254][T13479] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.842279][T21024] loop5: detected capacity change from 0 to 512 [ 352.860600][T21024] EXT4-fs: Ignoring removed nobh option [ 352.880662][T21024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.906002][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.007774][T21034] loop5: detected capacity change from 0 to 128 [ 353.014994][T21034] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.029646][T21034] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.059026][ T55] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.160161][T21037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.182820][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.253357][T21045] netlink: 'syz.5.5144': attribute type 13 has an invalid length. [ 353.268266][ T3422] lo speed is unknown, defaulting to 1000 [ 353.274122][ T3422] syz2: Port: 1 Link DOWN [ 353.313869][T21048] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.328773][T21048] EXT4-fs (loop5): 1 truncate cleaned up [ 353.335109][T21048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.359911][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.488190][T21065] sg_write: data in/out 8156/154 bytes for SCSI command 0x0-- guessing data in; [ 353.488190][T21065] program syz.5.5148 not setting count and/or reply_len properly [ 353.530316][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 353.530334][ T29] audit: type=1326 audit(338.584:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.565700][ T29] audit: type=1326 audit(338.584:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.588706][ T29] audit: type=1326 audit(338.584:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.611596][ T29] audit: type=1326 audit(338.584:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.634930][ T29] audit: type=1326 audit(338.584:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.658146][ T29] audit: type=1326 audit(338.584:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.681015][ T29] audit: type=1326 audit(338.584:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.703906][ T29] audit: type=1326 audit(338.584:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.726818][ T29] audit: type=1326 audit(338.584:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.749841][ T29] audit: type=1326 audit(338.584:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21069 comm="syz.5.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 353.792026][T21070] netlink: zone id is out of range [ 353.797231][T21070] netlink: zone id is out of range [ 353.803068][T21070] netlink: zone id is out of range [ 353.809069][T21070] netlink: zone id is out of range [ 353.814200][T21070] netlink: zone id is out of range [ 353.819405][T21070] netlink: zone id is out of range [ 353.824629][T21070] netlink: zone id is out of range [ 353.831114][T21070] netlink: zone id is out of range [ 353.836226][T21070] netlink: zone id is out of range [ 353.841814][T21070] netlink: zone id is out of range [ 353.925036][ T36] usb usb6-port1: attempt power cycle [ 353.967867][T21090] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 353.997684][T21090] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(16) [ 354.004316][T21090] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.012087][T21090] vhci_hcd vhci_hcd.0: Device attached [ 354.172041][T21093] vhci_hcd: connection closed [ 354.172847][ T5766] vhci_hcd vhci_hcd.5: stop threads [ 354.183224][ T5766] vhci_hcd vhci_hcd.5: release socket [ 354.188754][ T5766] vhci_hcd vhci_hcd.5: disconnect device [ 354.213475][ T7982] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 354.264093][T21120] EXT4-fs (loop9): Invalid log block size: 4294967295 [ 354.737726][T21129] __nla_validate_parse: 17 callbacks suppressed [ 354.737742][T21129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5153'. [ 354.918709][T21133] EXT4-fs: Ignoring removed nobh option [ 354.924364][T21133] EXT4-fs: inline encryption not supported [ 354.942345][T21133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.960313][T21133] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 354.988916][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.024827][T21137] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 355.042995][T21137] EXT4-fs (loop5): 1 truncate cleaned up [ 355.050385][T21137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.076145][T15415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.131607][T21142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.154417][T21142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.167181][T21142] 9p: Bad value for 'rfdno' [ 355.203734][T21146] pim6reg: entered allmulticast mode [ 355.209903][T21146] pim6reg: left allmulticast mode [ 355.429707][ T7982] Process accounting resumed [ 355.435737][T21159] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 355.445108][T21159] x_tables: duplicate underflow at hook 2 [ 355.530461][T21167] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 355.542280][T21167] EXT4-fs (loop5): 1 truncate cleaned up [ 355.659967][T21170] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 355.686247][T21170] EXT4-fs (loop5): orphan cleanup on readonly fs [ 355.746671][T21170] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.5168: Allocating blocks 41-42 which overlap fs metadata [ 355.772216][T21175] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 355.781103][T21170] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.5168: Failed to acquire dquot type 1 [ 355.794482][T21175] EXT4-fs (loop8): orphan cleanup on readonly fs [ 355.802599][T21175] EXT4-fs error (device loop8): ext4_quota_enable:7173: comm syz.8.5170: Bad quota inum: 5, type: 1 [ 355.822444][T21170] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 355.838896][T21175] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 355.859615][T21170] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.5168: corrupted inode contents [ 355.875596][ T36] usb usb6-port1: unable to enumerate USB device [ 355.905692][T21175] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 355.925667][T21170] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.5168: mark_inode_dirty error [ 355.975924][T21170] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.5168: corrupted inode contents [ 355.998473][T21170] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.5168: mark_inode_dirty error [ 356.025618][T21170] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.5168: corrupted inode contents [ 356.040638][T21170] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 356.052560][T21170] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.5168: corrupted inode contents [ 356.054750][T21194] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5176'. [ 356.117391][T21170] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.5168: mark_inode_dirty error [ 356.159537][T21170] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 356.159607][T21203] set_capacity_and_notify: 10 callbacks suppressed [ 356.159622][T21203] loop8: detected capacity change from 0 to 512 [ 356.164451][T21203] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 356.200907][T21170] EXT4-fs (loop5): 1 truncate cleaned up [ 356.217785][T21203] EXT4-fs (loop8): 1 truncate cleaned up [ 356.279849][T21209] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 356.590228][T21239] loop5: detected capacity change from 0 to 512 [ 356.619624][T21239] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.644607][T21239] EXT4-fs (loop5): 1 truncate cleaned up [ 356.777112][T21256] loop5: detected capacity change from 0 to 512 [ 356.793320][T21256] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.827598][T21256] EXT4-fs (loop5): 1 truncate cleaned up [ 356.846197][T21261] netlink: 260 bytes leftover after parsing attributes in process `syz.8.5199'. [ 356.856011][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5199'. [ 357.036859][T21269] netlink: 'syz.8.5202': attribute type 27 has an invalid length. [ 357.401337][T21271] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5203'. [ 357.418313][T21271] loop8: detected capacity change from 0 to 2048 [ 357.467769][T21271] Alternate GPT is invalid, using primary GPT. [ 357.474312][T21271] loop8: p2 p3 p7 [ 357.551855][T21277] netlink: 'syz.8.5206': attribute type 8 has an invalid length. [ 357.586626][ T6474] udevd[6474]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 357.598301][ T5298] udevd[5298]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 357.609582][ T7188] udevd[7188]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 357.624553][T21279] syzkaller1: entered promiscuous mode [ 357.630107][T21279] syzkaller1: entered allmulticast mode [ 357.651597][T21281] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5208'. [ 357.763501][T21286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.772108][T21286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.778544][T21293] loop4: detected capacity change from 0 to 1024 [ 357.892364][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5215'. [ 357.929319][T21303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21303 comm=syz.8.5216 [ 358.010694][T21286] lo speed is unknown, defaulting to 1000 [ 358.075402][T21312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.090366][T21312] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.291530][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5222'. [ 358.386215][T21330] loop4: detected capacity change from 0 to 128 [ 358.742321][T21338] netlink: 'syz.4.5226': attribute type 1 has an invalid length. [ 358.764360][T21338] bond2: (slave bridge1): making interface the new active one [ 358.773091][T21338] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 358.916181][T21353] FAULT_INJECTION: forcing a failure. [ 358.916181][T21353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.929372][T21353] CPU: 1 UID: 0 PID: 21353 Comm: syz.5.5231 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.929434][T21353] Tainted: [W]=WARN [ 358.929442][T21353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.929456][T21353] Call Trace: [ 358.929464][T21353] [ 358.929473][T21353] __dump_stack+0x1d/0x30 [ 358.929579][T21353] dump_stack_lvl+0x95/0xd0 [ 358.929605][T21353] dump_stack+0x15/0x1b [ 358.929623][T21353] should_fail_ex+0x263/0x280 [ 358.929708][T21353] should_fail+0xb/0x20 [ 358.929732][T21353] should_fail_usercopy+0x1a/0x20 [ 358.929764][T21353] fpu__restore_sig+0x12c/0xa80 [ 358.929788][T21353] ? x86_task_fpu+0x36/0x60 [ 358.929864][T21353] ? should_fail_ex+0xd9/0x280 [ 358.929928][T21353] __ia32_sys_rt_sigreturn+0x29e/0x350 [ 358.929959][T21353] x64_sys_call+0x274a/0x3000 [ 358.929982][T21353] do_syscall_64+0xc0/0x2a0 [ 358.930012][T21353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.930078][T21353] RIP: 0033:0x7ffa1b68aeb7 [ 358.930096][T21353] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 358.930116][T21353] RSP: 002b:00007ffa1a0e7028 EFLAGS: 00000246 [ 358.930177][T21353] RAX: 0000000000000013 RBX: 00007ffa1b905fa0 RCX: 00007ffa1b68aeb9 [ 358.930190][T21353] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 358.930204][T21353] RBP: 00007ffa1a0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 358.930269][T21353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.930281][T21353] R13: 00007ffa1b906038 R14: 00007ffa1b905fa0 R15: 00007fffeb716308 [ 358.930300][T21353] [ 359.136812][T21359] syzkaller0: entered promiscuous mode [ 359.142398][T21359] syzkaller0: entered allmulticast mode [ 359.166863][T21360] net_ratelimit: 57 callbacks suppressed [ 359.166878][T21360] IPv6: addrconf: prefix option has invalid lifetime [ 359.236557][T21366] netlink: 'syz.8.5237': attribute type 4 has an invalid length. [ 359.281212][T21368] dummy0: entered promiscuous mode [ 359.338641][T21373] loop5: detected capacity change from 0 to 8192 [ 359.348491][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 359.359765][T21373] vfat: Unknown parameter '0xffffffffffffffff' [ 359.366145][T21374] loop8: detected capacity change from 0 to 2048 [ 359.377234][ T36] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.398745][T21374] ext4: Unknown parameter 'noacl' [ 359.443903][T21373] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5240'. [ 359.487303][T21370] loop8: detected capacity change from 0 to 512 [ 359.503358][T21370] EXT4-fs: Ignoring removed oldalloc option [ 359.562504][T21370] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5239: bg 0: block 217: padding at end of block bitmap is not set [ 359.708568][T21388] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(14) [ 359.715302][T21388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 359.722882][T21388] vhci_hcd vhci_hcd.0: Device attached [ 359.818387][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 359.818405][ T29] audit: type=1326 audit(344.393:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.847423][ T29] audit: type=1326 audit(344.393:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.850386][T21388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 359.870409][ T29] audit: type=1326 audit(344.393:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.870438][ T29] audit: type=1326 audit(344.393:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.870504][ T29] audit: type=1326 audit(344.393:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.947311][ T29] audit: type=1326 audit(344.393:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.970305][ T29] audit: type=1326 audit(344.393:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.993322][ T29] audit: type=1326 audit(344.393:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 359.997427][ T3930] usb 19-6: new low-speed USB device number 5 using vhci_hcd [ 360.016381][ T29] audit: type=1326 audit(344.393:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 360.047045][ T29] audit: type=1326 audit(344.393:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21372 comm="syz.5.5240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ffa1b68aeb9 code=0x7ffc0000 [ 360.081863][T21393] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(19) [ 360.088503][T21393] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.096355][T21393] vhci_hcd vhci_hcd.0: Device attached [ 360.112400][T21394] vhci_hcd: connection closed [ 360.112689][T21389] vhci_hcd: connection reset by peer [ 360.124629][ T5277] vhci_hcd vhci_hcd.9: stop threads [ 360.130085][ T5277] vhci_hcd vhci_hcd.9: release socket [ 360.135599][ T5277] vhci_hcd vhci_hcd.9: disconnect device [ 360.142155][ T5277] vhci_hcd vhci_hcd.9: stop threads [ 360.147395][ T5277] vhci_hcd vhci_hcd.9: release socket [ 360.152799][ T5277] vhci_hcd vhci_hcd.9: disconnect device [ 360.225182][T21405] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 360.231834][T21405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 360.239426][T21405] vhci_hcd vhci_hcd.0: Device attached [ 360.288140][T21405] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 360.312109][T21409] No such timeout policy "syz1" [ 360.337998][T21414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27611 sclass=netlink_route_socket pid=21414 comm=syz.5.5248 [ 360.338013][T21405] FAULT_INJECTION: forcing a failure. [ 360.338013][T21405] name failslab, interval 1, probability 0, space 0, times 0 [ 360.338046][T21405] CPU: 0 UID: 0 PID: 21405 Comm: syz.4.5245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 360.338100][T21405] Tainted: [W]=WARN [ 360.338108][T21405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.338119][T21405] Call Trace: [ 360.338126][T21405] [ 360.338135][T21405] __dump_stack+0x1d/0x30 [ 360.338163][T21405] dump_stack_lvl+0x95/0xd0 [ 360.338187][T21405] dump_stack+0x15/0x1b [ 360.338262][T21405] should_fail_ex+0x263/0x280 [ 360.338294][T21405] ? __pfx_sock_alloc_inode+0x10/0x10 [ 360.338371][T21405] should_failslab+0x8c/0xb0 [ 360.338396][T21405] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 360.338471][T21405] ? sock_alloc_inode+0x34/0xa0 [ 360.338498][T21405] ? __pfx_sock_alloc_inode+0x10/0x10 [ 360.338565][T21405] sock_alloc_inode+0x34/0xa0 [ 360.338619][T21405] alloc_inode+0x40/0x170 [ 360.338668][T21405] __sock_create+0x120/0x580 [ 360.338738][T21405] __sys_socketpair+0x16f/0x420 [ 360.338772][T21405] ? ksys_write+0x194/0x1a0 [ 360.338795][T21405] __x64_sys_socketpair+0x52/0x60 [ 360.338829][T21405] x64_sys_call+0x2df3/0x3000 [ 360.338855][T21405] do_syscall_64+0xc0/0x2a0 [ 360.338887][T21405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.338977][T21405] RIP: 0033:0x7f178f02c77a [ 360.338995][T21405] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.339015][T21405] RSP: 002b:00007f178d764f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 360.339038][T21405] RAX: ffffffffffffffda RBX: 00007f178f2a6000 RCX: 00007f178f02c77a [ 360.339102][T21405] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 360.339116][T21405] RBP: 00007f178d765090 R08: 0000000000000000 R09: 0000000000000000 [ 360.339130][T21405] R10: 00007f178d764f88 R11: 0000000000000246 R12: 0000000000000003 [ 360.339145][T21405] R13: 00007f178f2a6128 R14: 00007f178f2a6090 R15: 00007ffce53c7ec8 [ 360.339228][T21405] [ 360.339322][T21405] socket: no more sockets [ 360.585044][ T36] usb 9-6: new low-speed USB device number 4 using vhci_hcd [ 360.592864][T21406] vhci_hcd: connection closed [ 360.593099][ T5277] vhci_hcd vhci_hcd.4: stop threads [ 360.603125][ T5277] vhci_hcd vhci_hcd.4: release socket [ 360.608609][ T5277] vhci_hcd vhci_hcd.4: disconnect device [ 360.855236][T21421] loop9: detected capacity change from 0 to 128 [ 360.985791][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5251'. [ 361.026182][T21421] netlink: 'syz.9.5250': attribute type 3 has an invalid length. [ 361.034062][T21421] netlink: 'syz.9.5250': attribute type 3 has an invalid length. [ 361.218158][T21436] netlink: 'syz.4.5254': attribute type 3 has an invalid length. [ 361.441264][T21418] syz.5.5249 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 361.452466][T21418] CPU: 1 UID: 0 PID: 21418 Comm: syz.5.5249 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.452543][T21418] Tainted: [W]=WARN [ 361.452550][T21418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.452562][T21418] Call Trace: [ 361.452569][T21418] [ 361.452589][T21418] __dump_stack+0x1d/0x30 [ 361.452616][T21418] dump_stack_lvl+0x95/0xd0 [ 361.452648][T21418] dump_stack+0x15/0x1b [ 361.452671][T21418] dump_header+0x80/0x240 [ 361.452697][T21418] oom_kill_process+0x295/0x350 [ 361.452720][T21418] out_of_memory+0x97d/0xb80 [ 361.452743][T21418] try_charge_memcg+0x62e/0xa10 [ 361.452847][T21418] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 361.452879][T21418] __read_swap_cache_async+0x17b/0x2d0 [ 361.452913][T21418] swap_cluster_readahead+0x262/0x3c0 [ 361.452951][T21418] swapin_readahead+0xde/0x840 [ 361.453060][T21418] ? __rcu_read_unlock+0x33/0x70 [ 361.453094][T21418] ? __rcu_read_unlock+0x4e/0x70 [ 361.453125][T21418] ? swap_cache_get_folio+0x26f/0x280 [ 361.453203][T21418] do_swap_page+0x59b/0x2a50 [ 361.453238][T21418] ? __rcu_read_lock+0x36/0x50 [ 361.453300][T21418] ? __pfx_default_wake_function+0x10/0x10 [ 361.453329][T21418] handle_mm_fault+0xb40/0x3030 [ 361.453362][T21418] ? vma_start_read+0x1c7/0x2c0 [ 361.453389][T21418] do_user_addr_fault+0x62f/0x1050 [ 361.453427][T21418] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 361.453461][T21418] ? irqentry_exit+0x3c/0x510 [ 361.453492][T21418] exc_page_fault+0x62/0xa0 [ 361.453520][T21418] asm_exc_page_fault+0x26/0x30 [ 361.453540][T21418] RIP: 0033:0x7ffa1b558921 [ 361.453563][T21418] Code: ff e8 b3 88 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d 7e cd ed 00 e8 03 00 00 48 8d 1d 7f d6 3a 00 ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 361.453581][T21418] RSP: 002b:00007fffeb716470 EFLAGS: 00010206 [ 361.453598][T21418] RAX: 000000000005377c RBX: 00007ffa1b905fa0 RCX: 0000000000053408 [ 361.453616][T21418] RDX: 0000000000000374 RSI: 00007fffeb716450 RDI: 00000000000003e8 [ 361.453633][T21418] RBP: 00007ffa1b907da0 R08: 0000000034b2844d R09: 7fffffffffffffff [ 361.453694][T21418] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000053833 [ 361.453707][T21418] R13: 00007ffa1b905fac R14: 0000000000053552 R15: 00007fffeb716570 [ 361.453726][T21418] [ 361.453733][T21418] memory: usage 307200kB, limit 307200kB, failcnt 788 [ 361.548140][T21445] loop4: detected capacity change from 0 to 2048 [ 361.549535][T21418] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 361.635378][T21448] loop9: detected capacity change from 0 to 512 [ 361.635614][T21418] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 361.675950][T21448] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 361.678641][T21418] Memory cgroup stats for [ 361.693171][T21448] EXT4-fs (loop9): 1 truncate cleaned up [ 361.699664][T21418] /syz5: [ 361.700045][T21418] cache 0 [ 361.739264][T21418] rss 16384 [ 361.742445][T21418] shmem 0 [ 361.745368][T21418] mapped_file 0 [ 361.748803][T21418] dirty 0 [ 361.751767][T21418] writeback 4096 [ 361.755369][T21418] workingset_refault_anon 99 [ 361.759945][T21418] workingset_refault_file 0 [ 361.764504][T21418] swap 471040 [ 361.767783][T21418] swapcached 4096 [ 361.771433][T21418] pgpgin 127041 [ 361.775043][T21418] pgpgout 127035 [ 361.778675][T21418] pgfault 130464 [ 361.782272][T21418] pgmajfault 77 [ 361.785824][T21418] inactive_anon 4096 [ 361.789716][T21418] active_anon 0 [ 361.793248][T21418] inactive_file 8192 [ 361.797215][T21418] active_file 0 [ 361.800661][T21418] unevictable 12288 [ 361.804484][T21418] hierarchical_memory_limit 314572800 [ 361.809844][T21418] hierarchical_memsw_limit 9223372036854771712 [ 361.816054][T21418] total_cache 0 [ 361.819504][T21418] total_rss 16384 [ 361.823130][T21418] total_shmem 0 [ 361.826645][T21418] total_mapped_file 0 [ 361.830663][T21418] total_dirty 0 [ 361.834113][T21418] total_writeback 4096 [ 361.838358][T21418] total_workingset_refault_anon 99 [ 361.843625][T21418] total_workingset_refault_file 0 [ 361.848727][T21418] total_swap 471040 [ 361.852538][T21418] total_swapcached 4096 [ 361.857025][T21418] total_pgpgin 127041 [ 361.861137][T21418] total_pgpgout 127035 [ 361.865202][T21418] total_pgfault 130464 [ 361.869640][T21418] total_pgmajfault 77 [ 361.873612][T21418] total_inactive_anon 4096 [ 361.878060][T21418] total_active_anon 0 [ 361.882141][T21418] total_inactive_file 8192 [ 361.886552][T21418] total_active_file 0 [ 361.890547][T21418] total_unevictable 12288 [ 361.894883][T21418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=5925,uid=0 [ 361.909471][T21418] Memory cgroup out of memory: Killed process 5926 (syz.5.783) total-vm:94132kB, anon-rss:1188kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 362.133545][T21462] lo speed is unknown, defaulting to 1000 [ 362.271872][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5263'. [ 362.281074][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5263'. [ 362.292134][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5263'. [ 362.346506][T21467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5264'. [ 362.402843][T21468] tipc: Cannot configure node identity twice [ 363.140892][T21496] netlink: 54775 bytes leftover after parsing attributes in process `syz.9.5275'. [ 363.331002][T21498] loop9: detected capacity change from 0 to 512 [ 363.356261][T21498] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5276: invalid indirect mapped block 4294967295 (level 1) [ 363.391007][T21498] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5276: invalid indirect mapped block 4294967295 (level 1) [ 363.426823][T21498] EXT4-fs (loop9): 2 truncates cleaned up [ 363.512061][T21504] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 364.135545][T21522] loop5: detected capacity change from 0 to 512 [ 364.148300][ T30] oom_reaper: reaped process 5926 (syz.5.783), now anon-rss:0kB, file-rss:21192kB, shmem-rss:0kB [ 364.182519][T21526] loop4: detected capacity change from 0 to 512 [ 364.229712][T21522] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.5284: corrupted inode contents [ 364.252817][T21522] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #3: comm syz.5.5284: mark_inode_dirty error [ 364.264604][T21522] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.5284: corrupted inode contents [ 364.277065][T21522] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.5284: mark_inode_dirty error [ 364.288606][T21522] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.5284: Failed to acquire dquot type 0 [ 364.300516][T21522] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.5284: corrupted inode contents [ 364.312618][T21522] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.5284: mark_inode_dirty error [ 364.326846][T21522] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.5284: corrupted inode contents [ 364.350000][T21522] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.5284: mark_inode_dirty error [ 364.399083][T21522] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.5284: corrupted inode contents [ 364.434281][T21522] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 364.457668][T21537] loop8: detected capacity change from 0 to 128 [ 364.464860][T21522] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.5284: corrupted inode contents [ 364.478724][T21537] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 364.494979][T21522] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.5284: mark_inode_dirty error [ 364.519587][T21522] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 364.534021][T21522] EXT4-fs (loop5): 1 truncate cleaned up [ 364.585446][T21540] netlink: 332 bytes leftover after parsing attributes in process `syz.5.5288'. [ 364.608529][T21540] netlink: 'syz.5.5288': attribute type 9 has an invalid length. [ 364.616405][T21540] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5288'. [ 364.750582][T21550] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 364.758105][T21550] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.808096][T21550] vhci_hcd vhci_hcd.0: default hub control req: 4001 v0002 i0002 l0 [ 364.937036][T21524] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 364.989414][T21561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5296'. [ 365.008845][ T2999] ================================================================== [ 365.016955][ T2999] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 365.023733][ T2999] [ 365.026043][ T2999] write to 0xffff888102184618 of 8 bytes by task 17562 on cpu 0: [ 365.033744][ T2999] inc_diskseq+0x2d/0x40 [ 365.037992][ T2999] disk_force_media_change+0x9e/0xe0 [ 365.043447][ T2999] lo_release+0x2eb/0x420 [ 365.047851][ T2999] bdev_release+0x373/0x3d0 [ 365.052350][ T2999] blkdev_release+0x15/0x20 [ 365.056858][ T2999] __fput+0x29b/0x650 [ 365.060847][ T2999] fput_close_sync+0xad/0x190 [ 365.065545][ T2999] __x64_sys_close+0x55/0xf0 [ 365.070153][ T2999] x64_sys_call+0x2c25/0x3000 [ 365.074828][ T2999] do_syscall_64+0xc0/0x2a0 [ 365.079330][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.085211][ T2999] [ 365.087521][ T2999] read to 0xffff888102184618 of 8 bytes by task 2999 on cpu 1: [ 365.095135][ T2999] block_uevent+0x31/0x50 [ 365.099465][ T2999] dev_uevent+0x375/0x400 [ 365.103799][ T2999] uevent_show+0x11a/0x200 [ 365.108215][ T2999] dev_attr_show+0x3f/0xa0 [ 365.112655][ T2999] sysfs_kf_seq_show+0x1a3/0x280 [ 365.117670][ T2999] kernfs_seq_show+0x82/0xa0 [ 365.122264][ T2999] seq_read_iter+0x31e/0x940 [ 365.126852][ T2999] kernfs_fop_read_iter+0xc1/0x330 [ 365.131961][ T2999] vfs_read+0x6c0/0x7f0 [ 365.136189][ T2999] ksys_read+0xdc/0x1a0 [ 365.140366][ T2999] __x64_sys_read+0x40/0x50 [ 365.144872][ T2999] x64_sys_call+0x2889/0x3000 [ 365.149543][ T2999] do_syscall_64+0xc0/0x2a0 [ 365.154041][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.159939][ T2999] [ 365.162249][ T2999] value changed: 0x00000000000005cc -> 0x00000000000005d0 [ 365.169429][ T2999] [ 365.171736][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 365.177966][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.189069][ T2999] Tainted: [W]=WARN [ 365.192861][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.203277][ T2999] ================================================================== [ 365.427919][ T3930] usb 19-6: enqueue for inactive port 5 [ 365.434512][ T3930] usb 19-6: enqueue for inactive port 5 [ 365.513437][ T3930] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 365.941091][ T36] usb 9-6: enqueue for inactive port 5 [ 365.946614][ T36] usb 9-6: enqueue for inactive port 5 [ 366.026586][ T36] vhci_hcd vhci_hcd.4: vhci_device speed not set