last executing test programs: 8m32.908260845s ago: executing program 1 (id=275): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0xa9a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x0, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0xe90ba, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x7, 0x0, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) dup(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003"], 0x64}}, 0x4000010) 8m32.154406619s ago: executing program 1 (id=284): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) (async) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) (async) io_submit(0x0, 0x1, &(0x7f0000000940)=[0x0]) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xff000000, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x61, 0x1ff, 0x6, 0xb0e2, 0xffff, 0x84e, 0x3, 0x18, 0x8}, {0x20000000001}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x2, "ad30a0fb7b11d5c1a73d4ac270ab7a73a5f3d92f20958ac6d60047426c56"}}}, {{@ipv6={@remote, @local, [], [0x0, 0xffffff00], 'batadv0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x70}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 8m32.132860361s ago: executing program 1 (id=286): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @loopback, 0x10001}], 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000008, 0x6c033, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603f5f014ab0800000000000002000000010000809a010000380000008b00080006000000050020000000a5000100200000000000"], 0x38) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000313000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r2, 0x0) syz_io_uring_complete(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="0500000008"], 0x20) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x4}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r4, &(0x7f00000007c0)="1c", 0x1, 0x48015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 8m25.798711237s ago: executing program 1 (id=291): prlimit64(0x0, 0x6, 0x0, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x2000000000000000, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fb"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 8m19.919049988s ago: executing program 1 (id=292): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x41, 0x3, 0x218, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x180, 0x1f0, 0x1f0, 0x180, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x4, 0x0, 0x2, 0x1], 0x4, 0x5}, {0x4, [0x0, 0x0, 0x0, 0x4, 0x2, 0x5], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 8m15.921202969s ago: executing program 32 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r3, 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 8m11.701524803s ago: executing program 33 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190ec) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r4, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 8m8.140848179s ago: executing program 34 (id=290): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x48) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) pread64(r2, 0x0, 0x0, 0x101) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000080)={0x7, 'veth1_to_hsr\x00', {0x8}, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x260, 0x11, 0x148, 0x0, 0x0, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x8001, 0xf, [0x0, 0x13, 0x36, 0x34, 0x3, 0x12, 0x2e, 0x18, 0x10, 0x39, 0x3b, 0x3b, 0x39, 0x0, 0x20, 0x17], 0x2, 0x7, 0x520}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @loopback, 0xff, 0x0, '\x00', 'veth0\x00', {}, {0xff}, 0x8, 0x0, 0x4}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) socket$unix(0x1, 0x2, 0x0) getsockname$netlink(r3, &(0x7f0000000000), &(0x7f0000000040)=0xc) 8m6.306657566s ago: executing program 1 (id=297): setresuid(0xee01, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xb}, 0x10}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) setrlimit(0x3, &(0x7f0000000000)={0x2000000000000000, 0x4}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40100, 0x100) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000210425bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000180000020001280080001006772650014000280060010"], 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', r5, r0, 0x1, 0x5, 0x2}, 0x50) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) 7m55.757092056s ago: executing program 35 (id=294): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") 7m49.30098782s ago: executing program 36 (id=297): setresuid(0xee01, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xb}, 0x10}, 0x94) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) setrlimit(0x3, &(0x7f0000000000)={0x2000000000000000, 0x4}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40100, 0x100) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000210425bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000180000020001280080001006772650014000280060010"], 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1, '\x00', r5, r0, 0x1, 0x5, 0x2}, 0x50) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m55.528113608s ago: executing program 5 (id=1032): msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x70bd26}, 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x80) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="20002bbd7000fddbdf25630000000c0099008903000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x5, 0x3}, {0xf, 0xc}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c843}, 0x44080) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000280)=""/35, 0x23}], 0x3, 0x1, 0x400) (async) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x36, &(0x7f0000002180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000100900000008001100000400150001000000080003005e7fc704ca5b197d48e761f175b970c5e86c8777fe3e7110e1b96874ae60ba3010c4794f02610ae29f4001d3d5d25852b5af10b66612495e1c84", @ANYRES32=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2m55.527674378s ago: executing program 5 (id=1033): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfefffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x10020, 0x7f, 0x0, 0x7, 0xfff, 0x8001, 0xfff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000200)=""/234, 0xea}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000400)=""/142, 0x8e}], 0x7, 0x80000000, 0x6) 2m55.527362528s ago: executing program 5 (id=1034): getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x5, 0x1, @thr={&(0x7f00000000c0)="9f2c20fc3b1cc4277b4191b91fe508416411669fecf6b1a00200000000000000d364c936b707118c6b0be58a9487b60a9d05371ab9a69eb4deb752d65c5a86e7e522691aa4e0", &(0x7f00000008c0)="915afede4596cfd2ee718e66460dfebbf509c8a6f030a1e5b95d1c270dbead4112067b9a4b6e999810cf3481c355a95c36e4634c8bc35df4f4422e3347f61f34ba002187f0d62e25ba96afc2aca8fa6da0d8157fa002e85db27298c35da64581d3139666aa4b3527bac74337fc1f37cc6e7edc0652c3bd53a8c9db2d38773b8672bb2b7e22a6ff5fed6a2dded14da8bcd6d63b772759098396b0f2092fa1cc03aa59e3771ec42f05b5618e4df83e7ce9c2daa0eeb042a0ee089f"}}, &(0x7f00000001c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x82, 0x0, 0x0) mprotect(&(0x7f00006f3000/0x2000)=nil, 0x2000, 0x300000e) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@user_xattr}, {@discard}]}, 0x1, 0x513, &(0x7f0000000380)="$eJzs3c9vI1cdAPDvTOJtdjfFLiBUKlEqWpStYO2koW2EEJQLnCoB5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgf+AFSpElwQBwQIhGALBySggzwe06xjJ6GbxNn485Fe/N7MeL7vjeXn+fEyE8DEeioiXoqIqYh4NiLKxfS0SHHQS93l3rn32ko3JZFlr/w1iaSY1l9Xdx3TEXGzeNtMRHztyxHfTI7Gbe/tby43GvWdolzrNLdr7b392xvN5fX6en1rcXHhhaUXl55fms8KD9TOSj/zky99/o1Pf+t3d/5869vdan3uI1GKgXacpV7TS/m26Otuo53zCDYG/c+8NO6KAABwKt19/A9GxCfy/f9yTOV7cwOmxlEzAAAA4KxkX5iNfycRGQAAAHBlpRExG0laLcYCzEaaXivODXw4bqSNVrvzqbXW7tZqd15EJUrp2kajPl+MFa5EKemWF4oxtv3ycwPlxYh4LCK+X76el6srrcbqmM99AAAAwKS4OXD8/49ymudPNuT/BAAAAIDLqzKyAAAAAFwVDvkBAADg6hs8/n9jTPUAAAAAzsVXXn65m7L+869XX93b3Wy9enu13t6sNndXqiutne3qequ1nt+zr3nS+hqt1vZnYmv3bq1Tb3dq7b39O83W7lbnzsZ9j8AGAAAALtBjH3/z10lEHHz2ep6iuA8gwH3+MO4KAGdpatwVAMbGXbxhcpXGXQFg7JIT5hu8AwAAD7+5jx69/p9lWRbODcCVZ6wPAEwe1/9hcpWMAISJlkbEB3rZR0YtM/L6/y9PGyXLIt4qH57i/CIAAFys2TwlabU4DpiNNK1WIx6NSCtRStY2GvX54vjgV+XSI93yQv7O5MQxwwAAAAAAAAAAAAAAAAAAAAAAAABAT5Yl+fP+AAAAgKsrIv1Tkt/NP2Ku/Mzs4PmBa8k/y/HHovCjV35wd7nT2VnoTv9b/iyvaxHR+WEx/bmRjw8DAAAAzlpyMHJW7zi9eF240FoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAHeuffaSj9dZNy/fDEiKsPiT8dM/joTpYi48fckpg+9L4mIqTOIf/B6RDw+LH4S72ZZVilqMRg/jYjr5xy/km+a0fFvnkF8mGRvdvufl4Z9/9J4Kn8d/v2bLtKDGt3/pUXkx/N+blj/9+iRtTWHxnji7Z/VRsZ/PeKJ6eH9T7//TUbEf/rI2v6VZdnRGN/4+v7+qPjZjyPmhv7+JPfFqnWa27X23v7tjebyen29vrW4uPDC0otLzy/N19Y2GvXi79AY3/vYz989rv03hsT/7W96/e9x7X9m1EoH/Oftu/c+1MuWhsW/9fTQ39+ZGBE/LX77Plnku/Pn+vmDXv6wJ3/61pPHtX91xPY/6fO/dcr2P/vV7/7+lIsCABegvbe/udxo1HeOycycYpmHMfOLmUtRjf8zk32n98ldlvq830x3b/W9Kf1WXYKKHcpkFxZrKi5Jk/+XGWu3BAAAnIP3dvrHXRMAAAAAAAAAAAAAAAAAAACYXBdxO7HBmAfjaSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLH+GwAA//9yf+QF") 2m55.009773738s ago: executing program 5 (id=1047): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x4712, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000030400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYRES64, @ANYBLOB="0000004001"], 0x48}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070100000700ffff9702000008000000b703000000000028850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2b}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@abort}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @hci={0x1f, 0x0, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x7, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, r3, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r2, 0x8910, 0xffffffffffff7ffe) getdents64(r1, &(0x7f0000001400)=""/219, 0xdb) 2m54.322412328s ago: executing program 5 (id=1059): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x2000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x4000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r1, &(0x7f0000001800)=[{0x0, 0xea}, {&(0x7f0000000500)="a933872d", 0x4}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = socket(0x5, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) r5 = accept$inet6(r2, 0x0, &(0x7f0000000780)) getsockopt$inet6_buf(r5, 0x29, 0xcd, &(0x7f00000007c0)=""/65, &(0x7f0000000840)=0x41) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r7 = fsmount(r1, 0x1, 0x0) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000200)={0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001000000018000180140002006c6f000000000000000000060000000005000b0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c0000008003000500000000000a"], 0x78}, 0x1, 0x7}, 0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) ioperm(0x8e9e, 0x7, 0x1f94) 2m53.484169266s ago: executing program 5 (id=1068): getrlimit(0x4, &(0x7f00000001c0)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000000340)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, 0x0}}], 0x1, 0x4000001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) io_setup(0x5, &(0x7f0000000240)) inotify_init() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x44c, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 2m53.483406936s ago: executing program 37 (id=1068): getrlimit(0x4, &(0x7f00000001c0)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003c00)=[{{&(0x7f0000000340)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, 0x0}}], 0x1, 0x4000001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) io_setup(0x5, &(0x7f0000000240)) inotify_init() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x44c, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2}) 2m44.292195768s ago: executing program 9 (id=1265): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x8044}, 0x4000) 2m44.285027499s ago: executing program 9 (id=1266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004000000000000000ffffffff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8efffffb702000008000000b70300000900000085000000c800000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2800}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000000)=ANY=[], 0x40, 0x321, &(0x7f00000024c0)="$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") sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002280)='net/ip_mr_vif\x00') lseek(r4, 0x10001, 0x0) mq_timedsend(r4, &(0x7f0000000000)="6d6ff47cb5f8709bd0a1ea2e156cb91b87814be31ae5a0b17c8364c29f57e914d87c20d4f1cda3c03d084c6eb6f7a1a3e765210f61674db4f83263d154ff", 0x3e, 0x10, &(0x7f0000000100)={0x0, 0x3938700}) 2m44.215472163s ago: executing program 9 (id=1268): setresuid(0xee01, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000cfeffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xb}, 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40100, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000210425bd70000000000000000000", @ANYRES32, @ANYBLOB="000000000180000020001280080001006772650014000280060010"], 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) 2m44.077788701s ago: executing program 9 (id=1275): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) io_setup(0x2, &(0x7f0000000000)) (async) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r6, 0x25, 0x4, @val=@tcx}, 0x1c) (async) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r5, r6, 0x25, 0x4, @val=@tcx}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r8, 0x4, r5}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x1, 0x61, 0x0, 0xae}, {0xc, 0xff, 0x6, 0x3}, {0x8, 0x6, 0x5, 0x9f}, {0x0, 0x7f, 0xbe}, {0x9, 0xb, 0x3, 0x8}]}) io_submit(r2, 0x3, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r8, &(0x7f00000000c0)="64c4e3c93e2145b1798f85c0d5b057d758baab51ea4c34bf97992d87e2b922e28cb7e80ac8feb4187b2508eca4fe296660234a864d6404", 0x37, 0x2, 0x0, 0x2, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x6, r9, &(0x7f0000000280)="87f005effe237d17c565a24d5226b478414fc39ec89dd4a3a1c114267ab84c09e805a9e5621697aaca0311e732a8a5fcd751c8e3c49f20acfa1a4dd984346dd4dc0a2f6e40b6f052448e055a87f7981b0f20fb1d7cc5829ba2fa5f95539640911fe693c30b82933646c6779c04ea35a425218ec594f3f16f3a2570aab866438286b2ba572e2b6f1f73121e61fbc53594b24b755cd3acd82a618f59e6a456", 0x9e, 0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xbed6, r0, &(0x7f0000000380)="95befa5410e67522467ba29620766c1aac3815d9d639ae16d11dd0dc1694a2b1c60d39e55c4b7f414227ea86b1c4e39baf2b0a6b864f1c3f11e302b7eb8b7dbf524e5160f4d7bb591fd97727d6ed7e199e8513e07a144f31846b3b7e7a2af34bb0d57aeed729291cb3a73bfaf963b2c95c017d9972eabfab24e885a44c2a44623384442ef42178bd611e7b4857139cf055fef4e25dba98b7285f1e17bb4a21632fa195d386b8fa6bb96c4ce7d61eb29c678a5e8efaa638fb5830b5beeb97fa5277aab84fb46a656b9efaf5bcd9eb35a79cc70a588488ea1e1b11f4ae40b9c398f181850b450923ce167ffdc277964ef1", 0xf0, 0x3, 0x0, 0x3, r1}]) (async) io_submit(r2, 0x3, &(0x7f00000004c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r8, &(0x7f00000000c0)="64c4e3c93e2145b1798f85c0d5b057d758baab51ea4c34bf97992d87e2b922e28cb7e80ac8feb4187b2508eca4fe296660234a864d6404", 0x37, 0x2, 0x0, 0x2, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x6, r9, &(0x7f0000000280)="87f005effe237d17c565a24d5226b478414fc39ec89dd4a3a1c114267ab84c09e805a9e5621697aaca0311e732a8a5fcd751c8e3c49f20acfa1a4dd984346dd4dc0a2f6e40b6f052448e055a87f7981b0f20fb1d7cc5829ba2fa5f95539640911fe693c30b82933646c6779c04ea35a425218ec594f3f16f3a2570aab866438286b2ba572e2b6f1f73121e61fbc53594b24b755cd3acd82a618f59e6a456", 0x9e, 0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xbed6, r0, &(0x7f0000000380)="95befa5410e67522467ba29620766c1aac3815d9d639ae16d11dd0dc1694a2b1c60d39e55c4b7f414227ea86b1c4e39baf2b0a6b864f1c3f11e302b7eb8b7dbf524e5160f4d7bb591fd97727d6ed7e199e8513e07a144f31846b3b7e7a2af34bb0d57aeed729291cb3a73bfaf963b2c95c017d9972eabfab24e885a44c2a44623384442ef42178bd611e7b4857139cf055fef4e25dba98b7285f1e17bb4a21632fa195d386b8fa6bb96c4ce7d61eb29c678a5e8efaa638fb5830b5beeb97fa5277aab84fb46a656b9efaf5bcd9eb35a79cc70a588488ea1e1b11f4ae40b9c398f181850b450923ce167ffdc277964ef1", 0xf0, 0x3, 0x0, 0x3, r1}]) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x3) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 2m43.74373967s ago: executing program 9 (id=1280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x140, 0x0) 2m43.216284101s ago: executing program 9 (id=1286): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x41, 0x3, 0x218, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x180, 0x1f0, 0x1f0, 0x180, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x4, 0x0, 0x2, 0x1], 0x4, 0x5}, {0x4, [0x0, 0x0, 0x0, 0x4, 0x2, 0x5], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 2m43.215419181s ago: executing program 38 (id=1286): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x41, 0x3, 0x218, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x180, 0x1f0, 0x1f0, 0x180, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x4, 0x0, 0x2, 0x1], 0x4, 0x5}, {0x4, [0x0, 0x0, 0x0, 0x4, 0x2, 0x5], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) 1m11.083669225s ago: executing program 2 (id=4118): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000640)="6a525265a964522c09899464a3319b3d3a8b71817d92754920064c02518627fc34cc7a822eda71b232723bd545cd7491f63a5dc784c0d6296611a3c50971812914e5ea74fef7cc54f22a609fc7e083a3037c8a393b80c9bc57abe242905a6e319e1b1acf42f33c58df7acb32ec8ce6346f2d1ca8532c3f85afe3ca00267f968f1dd284332ce1ef8717ed563e666d1113fd7e124daed457d82800"/168, 0xa8}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0xb, 0x3, 0x5, 0x10, @private2, @private2={0xfc, 0x2, '\x00', 0x21}, 0x700, 0x8191, 0x10ffff, 0x11}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c0003800743063b"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031080006400000000008000f4000000004140000001000010000000000000000000084000ae6a9853f4cf46ebb0e08ff96a0651250e99027bfcc273c7e21cffdc2f877681997309c7baf0c25617e8bf90cc5c6a8ffc4cf69f7103dc546e48e77b3afaf365dcffeeb3e7f457d19419ff7d6fa145b6369f933206e75099c1d6f70b2ee073d0565395df4143d4b6b"], 0x84}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") close_range(r1, 0xffffffffffffffff, 0x0) 1m10.031592186s ago: executing program 2 (id=4145): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1m9.907396323s ago: executing program 2 (id=4149): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffdcffffffffffff0806000108000604000100000000007fffffff00ffffffffffffffffff"], 0x0) 1m9.906615493s ago: executing program 2 (id=4151): epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0x8002, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2bd, &(0x7f0000000640)="$eJzs3T9vW1UUAPDzEr+XlAzxwISQeEMHFqKmKwOpUJAQmUAe+CNBRV2piq1KsWSpgDCd+AQMDHwPNnYkFj4DH4CNClW66Pm92CZx7DrFKUp/vyVX557je67fSzxY7+aL1/vH9x4O7j/+JqU0ispBPMmiHRtxKjUCALgWnqQUf17q8721sa6eAID1mvn8zy9I2TofemfdbQEAa/TRx598cOfo6PDDstyO6H8/7GRR/6zn79yPB9GLbtyK3Xg6/S4gpXr83vtHh9EqK+242R8NO1Vl//PfJqlFjOv3Yzfa8+v3y9pM/WjYyeOVrW6WRTw4qBq5Hbvx6rn6av7w9pz66BTx5nazyWr9vdiN37+Mh9GLe+PvNKbrf1tE+W764a+vP62Sq/psNOxsjfOm0uZVXxsAAAAAAAAAAAAAAAAAAAAAAK6vvXKiHTf7Vag5f2fz6Xh+71/z4/N1NsbzdX0WUYwHZ84HGqX46fR8nVtlWaaszp+c73OjFa+1ovXCNg4AAAAAAAAAAAAAAAAAAAD/I4NHXx3f7fW6J//JoHnIf/JY/2Vf52Am8kYsTt5aaa3YbNKrXmemvku9Xnf/18/6k0i1ics0P8zLiEU959Ugn43cqPpZ/sp/p5RSlkU832XKn2WtJYOdi/ZVR6o3+Jcfd946vpstew+3Ty/cz7NTRZwMHp25ppGt0mFa6fYrFuQUzR3zTK+z85y/RG//US/WRLIlu8hnInkziItuv+2V7uer+xsEAAAAAAAAAAAAAAAAAADUpg/9zpl8vLB0Y21NAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAVm/7//+kgzkXODEZN8fyclNJoEiniZPCCtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL4J8AAAD//8Xpby0=") r0 = socket(0x1d, 0x2, 0x6) r1 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, {0xa, 0x4e22, 0xa95, @remote, 0x4}, 0x1, {[0x9, 0x8fb, 0x80, 0xc62, 0x4, 0x4, 0x6, 0xfff]}}, 0x5c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000200)="f2aa05b2ae22", 0xfffffe9e, 0x4fed0) sendfile(r1, r2, 0x0, 0xe3aa6ea) recvfrom$x25(r0, 0x0, 0x0, 0x103, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040)=0x2, 0x4) r3 = syz_clone(0xc2042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ioprio_get$pid(0x2, r3) pivot_root(&(0x7f00000001c0)='.\x00', 0x0) ptrace(0x8, r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', r4, &(0x7f0000000100)='./file0/../file0\x00', 0x145) rt_sigtimedwait(&(0x7f0000002480)={[0x7]}, 0x0, &(0x7f0000002540), 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000005d80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)='Q', 0x1}], 0x1}}], 0x1, 0x40040d5) shutdown(r5, 0x1) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ptrace(0x4207, r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xee, &(0x7f0000000340)={@empty, @broadcast, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@llc_tr={0x11, {@snap={0x32db169ab3a73074, 0x1, "cdf0", "155620", 0x86dd, "99f00a702be28a680090fd0c2d7b0160213f4d4398d70346ff4d380597e7c5fdd34893540b2d22cde7ffdacea489e66f7e8b2fcfa929e33863cf8c43cc5d6e2d6d7373ef5223699c32ee8289c72edf53ba97dbcb5595f6abde3954fffe75058ff29d98600bfc0988b020ad5279a8808668dd3e8575ede726946b2ce4dfbaaa45f0e5c6a2d15584966895e67cf62eb9778594c0aabde8d10d28fa9ccbe58e462ab2ddd3f69a4750592ba0bd44aba83bc37f386ca0a51a848ebcbd0583536529cdc2f57223d7d073f6b00004934ec08ea418d222"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x84f, 0x5d, 0x91a, 0xc4d]}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002b00), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="4858068c395110d906000000000055fd5987a19b88d324bcfd4cb3c99a4aaccd3336acabd405800ceb24531ea527f9e5387b2c05aee1c707f5a1e92f79f38683537120b370ef1b236267a1e571390a56b107e03e20ce695b"], 0x14}}, 0x0) setpgid(r3, r3) 1m9.178652165s ago: executing program 2 (id=4158): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000007c0)) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x84884) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000740)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000010}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) r5 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000780)={[{@norecovery}]}, 0x0, 0x62c, &(0x7f00000000c0)="$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") sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x20, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x20}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000007c0)) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x84884) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000740)=0x2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000010}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000780)={[{@norecovery}]}, 0x0, 0x62c, &(0x7f00000000c0)="$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") (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x20, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x20}}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) 1m8.726146871s ago: executing program 2 (id=4164): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x24, 0x4000c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7a, 0x1, @perf_config_ext={0x3fffffffc}, 0x10020, 0x83, 0x0, 0x7, 0xfff, 0x8001, 0xfff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8c397e) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04487a84cd8045ae88943e2f4d8802bde722f8c11f5a94243dc5cd785b0ab4789cbb78fee949696ac838e3390cb925a8e55b74a4720c2fea96e1fcd4658ac56f40c97dd65d415058e5083c118b9446244c0bc4f1c2d5657a31d25fb5bc00459b81832c2368f5d05651685c7cde01b46c343720476f471c0310472739e8849dba727720cd3480505f9c96349af5dca79b4c951809723d2e306bc97eaa0a577b7e4fa689d77a181b3155be"], 0x50) 1m8.689543943s ago: executing program 39 (id=4164): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x24, 0x4000c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7a, 0x1, @perf_config_ext={0x3fffffffc}, 0x10020, 0x83, 0x0, 0x7, 0xfff, 0x8001, 0xfff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8c397e) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04487a84cd8045ae88943e2f4d8802bde722f8c11f5a94243dc5cd785b0ab4789cbb78fee949696ac838e3390cb925a8e55b74a4720c2fea96e1fcd4658ac56f40c97dd65d415058e5083c118b9446244c0bc4f1c2d5657a31d25fb5bc00459b81832c2368f5d05651685c7cde01b46c343720476f471c0310472739e8849dba727720cd3480505f9c96349af5dca79b4c951809723d2e306bc97eaa0a577b7e4fa689d77a181b3155be"], 0x50) 36.913353183s ago: executing program 6 (id=4815): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0x9, 0x5, 0x2}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x1, 0x4, 0x8, 0x8, 0x4000002, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0x1, 0xc, 0x1, 0x8, 0x7, 0x5, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x6, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0xfffffffa, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = getpid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000200)=r3) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x0, 0x3, 0x8, 0x0, 0x141, 0x41000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3}, 0x1, 0x6, 0x100, 0x2, 0x9, 0x1, 0x101, 0x0, 0x54c085e1, 0x0, 0x8}, r3, 0x0, r4, 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) 36.812607589s ago: executing program 6 (id=4818): arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) close(0x3) 36.78638251s ago: executing program 6 (id=4819): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x29}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x10d) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @private=0xa010100}, 0x18, 0x0, 0x0, 0x0, 0x58, &(0x7f0000000280)='wlan0\x00', 0x3, 0x0, 0xef87}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2}) 36.701343215s ago: executing program 6 (id=4823): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000526) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0, 0x12a) getdents64(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket(0xb, 0x800, 0x7) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {0x7}, {}, @raw32={[0x2600, 0x7]}}], 0x1c) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000040)=0x8, 0x4) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r10, 0x4b34, 0x10000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000280)={0x800, 0x14, 0x80000000, 0x400, 0x1, 0x4}) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0xa0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 36.643954248s ago: executing program 6 (id=4824): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000bdf000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mlock2(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = memfd_create(&(0x7f0000000700)='\x02A\xbb\xcc\xeb\x14\x10\xef\xa7\x16\xd7m\x14oG1\xff\xf9\x02/\xc6\xc8\xd9\xd5c\xb1E O\x04k\x9ca\x13\xd8y\xd4\xdc\xbf\xc8\x15f\x9c\x804>\xbb\x11d\xd9\x9f\x10]\xdc\xe3\x03\xa4\xeb\x99\xa5\x92=gb\x84ZY<\xc0\x827.\xf9d\xa1\xaa\f\x14\xd6j\'}&|&\x1dG\xd5\x8f\xcb\xc2Un\xe3\xa5{\xc0q\xe1\x1bW\xbf)C\x93 \xce\xf0KP\xa5&\xda\x18\n\x9a\xe3/\x9e\xa8c\xc0\x86\xe5\xe6O\xc0\x81\xf4\xa1\xdc\xf0\xdbZR[Co\x8a\xfb\xe0\xb0\x05\xbf\x18o`\xe2\x83\xcc', 0x7) fallocate(r1, 0x0, 0x800657, 0x40000b7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f000055c000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0xe3, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000a88000/0x2000)=nil, &(0x7f00007b3000/0x3000)=nil, &(0x7f00007b3000/0x3000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f000060e000/0x3000)=nil, &(0x7f00007b4000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f000060f000/0x2000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)="01c88f797e9df4848c046b36a14a3165ea1459106b661e13dc85af1c6ad96b74a647ec1d64", 0x25, r0}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x3, 0x4, 0x0, 0x0, 0x200, 0x8, 0x0, 0x8000007b, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000680)={r5, 0x9}, &(0x7f00000006c0)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209ee010073797a3100000000140000001100950000000000000000000100000a448c31733c2a"], 0x5c}, 0x1, 0x0, 0x0, 0x4048884}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000000c0)=@sr0, r6, 0x0) 35.567212011s ago: executing program 6 (id=4838): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe7}, 0x0, 0x400000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x69, 0x0, 0xfe}, {0x6}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x80000001, 0x5, {{0x10, 0x4, 0x1, 0x14, 0x40, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, {[@ssrr={0x89, 0x2b, 0xaa, [@loopback, @broadcast, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x70, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_FLOW={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) 19.537611979s ago: executing program 40 (id=4838): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe7}, 0x0, 0x400000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x69, 0x0, 0xfe}, {0x6}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x80000001, 0x5, {{0x10, 0x4, 0x1, 0x14, 0x40, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, {[@ssrr={0x89, 0x2b, 0xaa, [@loopback, @broadcast, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x70, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_FLOW={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) 3.523527515s ago: executing program 8 (id=5408): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r0}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) r1 = socket(0x18, 0x3, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r0}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) (async) socket(0x18, 0x3, 0x2) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) 3.386174134s ago: executing program 8 (id=5412): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0xf, 0x0, 0x42, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7890, 0xd, 0xc}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0x28, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x70, 0xd8, &(0x7f00000009c0)=""/216, 0x41000, 0x10, '\x00', r0, @fallback=0x1a, r1, 0x8, &(0x7f0000000ac0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x8, 0x5, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff], &(0x7f0000000c00)=[{0x1, 0x4, 0x6, 0x6}, {0x4, 0x5, 0x5, 0xc}, {0x4, 0x3, 0x7}, {0x5, 0x1, 0x9, 0x6}], 0x10, 0x81}, 0x94) 3.385718504s ago: executing program 8 (id=5413): bpf$MAP_CREATE(0x0, 0x0, 0x9b9203d927ef41ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x800, 0xf, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000080)}, 0x80000001}, {{&(0x7f00000001c0)=@qipcrtr, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000440)=""/204, 0xcc}], 0x6, &(0x7f0000000600)=""/34, 0x22}, 0x3}], 0x2, 0x2000, &(0x7f00000006c0)={0x0, 0x989680}) 2.257084969s ago: executing program 8 (id=5428): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0x2, 0x3, 0x3, 0x8, 0x0}) process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f00000001c0)=""/1, 0x1}], 0x2, &(0x7f0000000340)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x24, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2720, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r5, @ANYRES32=r8, @ANYBLOB="38002f800c0002000000000000070007000001000000000020000380"], 0x54}}, 0x4014) (async, rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) 2.111719478s ago: executing program 8 (id=5429): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) acct(&(0x7f00000005c0)='./cgroup\x00') 2.024714332s ago: executing program 8 (id=5432): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0x29, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @ldst={0x2, 0x1, 0x4, 0x4, 0x9, 0x20, 0x4}, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x8, r0, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x0, 0x5}, 0x10, r4, r3, 0x2, &(0x7f0000000980)=[r0, r0, r0, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x0, 0x3, 0x0, 0x2}, {0x4, 0x1, 0x0, 0xa}], 0x10, 0x8}, 0x94) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000004640)='>', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r5, 0x40f, &(0x7f0000000100)={0x2, 0x4, 0xffffffffffffffcf, 0xde}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x7, 0x1, 0x1, 0xfc, 0x3b, 0x3, 0xa, 0x8, 0x83, [0x8001, 0x0, 0x8001, 0x1, 0x1000, 0x5, 0x5, 0x9], [0xfffffff2, 0x4, 0x6, 0x9, 0xa0e]}}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYBLOB="11"], 0x14) fchdir(r8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) 1.72862197s ago: executing program 7 (id=5436): fsopen(&(0x7f0000000200)='securityfs\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7fffeff9) 1.584313278s ago: executing program 7 (id=5442): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) acct(&(0x7f00000005c0)='./cgroup\x00') 1.539761701s ago: executing program 7 (id=5445): r0 = socket$kcm(0x2, 0xa, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) 1.304055315s ago: executing program 7 (id=5446): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0xf, 0x0, 0x42, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7890, 0xd, 0xc}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0x28, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x70, 0xd8, &(0x7f00000009c0)=""/216, 0x41000, 0x10, '\x00', r0, @fallback=0x1a, r1, 0x8, &(0x7f0000000ac0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x8, 0x5, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff], &(0x7f0000000c00)=[{0x1, 0x4, 0x6, 0x6}, {0x4, 0x5, 0x5, 0xc}, {0x4, 0x3, 0x7}, {0x5, 0x1, 0x9, 0x6}], 0x10, 0x81}, 0x94) 1.303581755s ago: executing program 0 (id=5447): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0xc88d}, 0x24000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x27e2, 0x0, 0xbc, 0x0, 0x0) 1.256088057s ago: executing program 7 (id=5448): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d", 0x7}], 0x1}}], 0x1, 0x2004000) 1.236146838s ago: executing program 0 (id=5449): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0x29, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @ldst={0x2, 0x1, 0x4, 0x4, 0x9, 0x20, 0x4}, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x8, r0, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x0, 0x5}, 0x10, 0x0, r3, 0x2, &(0x7f0000000980)=[r0, r0, r0, r4], &(0x7f00000009c0)=[{0x0, 0x3, 0x0, 0x2}, {0x4, 0x1, 0x0, 0xa}], 0x10, 0x8}, 0x94) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000004640)='>', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r5, 0x40f, &(0x7f0000000100)={0x2, 0x4, 0xffffffffffffffcf, 0xde}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x7, 0x1, 0x1, 0xfc, 0x3b, 0x3, 0xa, 0x8, 0x83, [0x8001, 0x0, 0x8001, 0x1, 0x1000, 0x5, 0x5, 0x9], [0xfffffff2, 0x4, 0x6, 0x9, 0xa0e]}}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYBLOB="11"], 0x14) fchdir(r8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) 1.010369411s ago: executing program 0 (id=5451): socket(0x2, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 848.468811ms ago: executing program 0 (id=5455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfa}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 803.891893ms ago: executing program 0 (id=5456): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) sigaltstack(&(0x7f0000001540)={0x0, 0x100000003}, &(0x7f0000001d80)={0x0}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_read_part_table(0x1056, &(0x7f0000001080)="$eJzsz7GNwkAUBNBZW/bZyekKuJ6IiAnIaAI3QCN0QiWkFIBkZGOgAyB4L/mj0WilDR9V2uw2dUnSJxme9XKbOZVXkfZ++uTwO4Xq79yUyzj7SXLaPpb19OIqybjP/3WuhnTTplsW1fr4nl8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHe7BQAA//+j4A+2") bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}, 0x1}}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0xfffffffffffffe20, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x20004050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000101010100000000000000000a0000011c001980000001000008000008000100030a000000000100200200002400198019000200"], 0x54}, 0x1, 0x0, 0x0, 0x24008851}, 0x20048000) socket$inet_udp(0x2, 0x2, 0x0) 622.959784ms ago: executing program 4 (id=5460): r0 = socket$qrtr(0x2a, 0x2, 0x0) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x4, 0x8, 0x5, 0x1e, 0x4, 0x35, 0xd}, 0xc) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x2, 0x9, 0xfe, &(0x7f0000000040)=""/254}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x800, 0x10) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000001c0), 0x4) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x10, 0x0, @void}, 0x10) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000240)) sendto$inet_nvme_icreq_pdu(r2, &(0x7f0000000280)={{0x0, 0x4, 0x80, 0x81}, 0x0, 0x0, 0x1, 0x4}, 0x80, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001000)=@broute={'broute\x00', 0x20, 0x6, 0xcac, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000340], 0x0, &(0x7f0000000300), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x20, 0x80f3, 'netpci0\x00', 'veth1_virt_wifi\x00', 'veth1\x00', 'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, [0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xce, 0x11e, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x886f}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x9, {0xbba}}}}}, {0x14, 0x46, 0x884c, 'macvlan1\x00', 'vxcan1\x00', 'gre0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0xa6, 0x156, 0x18e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x3, 0x7ff}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xfffff3a0, 0x7ff, 0xf991, 0x1, 0x0, "5628b9ab24b2355c04b7be2017024e258caae0e8b0dbabe34dc33a98c61d602b547839f31bb29a0a44e5b32b856d233c0f6b31bb8041081b982af6529e19cb30"}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x22, 0x10, 0x18, 'veth0_to_bond\x00', 'ip6_vti0\x00', 'veth1_vlan\x00', 'veth1_to_bond\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff], 0xde, 0x12e, 0x15e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x6, 0x800, 0xb, {0x8}}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [@common=@log={'log\x00', 0x28, {{0x8, "40c5472204574f17fa04dafc6ff897fc1a4d82e05965c9314dd0bd68df3a", 0x4}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0x0, 0x1, [{0x9, 0x22, 0x8917, 'pim6reg0\x00', 'gretap0\x00', 'ip6gretap0\x00', 'vlan1\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff], 0x1d6, 0x20e, 0x33e, [@time={{'time\x00', 0x0, 0x18}, {{0x9, 0xb9, 0x4682, 0xdc07, 0xfffff89b, 0x3}}}, @comment={{'comment\x00', 0x0, 0x100}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x35b, 'system_u:object_r:crack_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0x0, 0x2, [{0x11, 0x0, 0x19, 'ipvlan1\x00', 'batadv_slave_0\x00', 'wlan1\x00', 'veth0_to_team\x00', @empty, [0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, [0x0, 0xff, 0x0, 0x0, 0xff], 0xfe, 0xfe, 0x14e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x1000, 0x3}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x108, 0x82a8, 0x2, @empty, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, 0xffffff00, @link_local, [0x0, 0xff, 0x0, 0xff, 0x1fe], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xc4, 0x61}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1900000, 'syz0\x00', {0x9ce}}}}}, {0x3, 0x2, 0x888e, 'netpci0\x00', 'team_slave_0\x00', 'veth1_to_bond\x00', 'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff], 0x2f6, 0x326, 0x356, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@private=0xa010102, [0xff, 0xff, 0xffffff00], 0x4e20, 0x4, 0x4, 0x4e23, 0x20}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x18, [{0xc11, 0x4, 0x3, 0x8000}, {0x7, 0x1, 0x1, 0x1}, {0x8001, 0x9, 0xf5, 0x81}, {0x7, 0xfc, 0x10, 0xf}, {0x29, 0x2, 0x5}, {0x2, 0x1, 0xfe, 0x3}, {0x3, 0xf, 0x9, 0xc}, {0xffff, 0xc0, 0x7, 0xb660}, {0x4, 0x4, 0x63, 0xfffff000}, {0x100, 0x0, 0x4c, 0xfffffff7}, {0x0, 0x9, 0x0, 0x2}, {0x6, 0xe1, 0x2, 0x401}, {0x5, 0x4, 0x9, 0x1}, {0x1, 0x40, 0xb9, 0x1}, {0xd320, 0xf, 0x9, 0xc}, {0xa, 0xa, 0xf9, 0x7}, {0x4, 0x0, 0x3}, {0x0, 0x2, 0xe, 0xde97}, {0xfff, 0x1, 0x2, 0x2}, {0x10, 0x8, 0x8, 0x1}, {0x800, 0x7, 0xd, 0x41f5e535}, {0x9, 0x9, 0x1, 0x5}, {0x3, 0xf, 0x0, 0x7}, {0x5, 0x8, 0x0, 0x96f0}, {0x6, 0x81, 0x6}, {0x80, 0x25, 0x8, 0x37f}, {0xb, 0xd, 0x0, 0x5}, {0x6, 0x9, 0x4, 0x9}, {0x5, 0x1, 0x5, 0x9}, {0x408, 0x76, 0x9, 0xeb4}, {0x10, 0x1, 0x2, 0x200}, {0xf591, 0x5, 0x7, 0x2dd}, {0x0, 0x9, 0xb, 0x800}, {0xfff7, 0xc8, 0x1, 0x2}, {0x2, 0x4, 0x3b, 0x8}, {0x4, 0xfc, 0xa, 0x80}, {0x6, 0x8, 0x7, 0x7}, {0x8, 0x6, 0x1, 0xc494}, {0x2534, 0x2c, 0x6, 0x40}, {0x7, 0x1, 0x1, 0x100}, {0x7, 0x2, 0x8, 0xa9d}, {0x1, 0x3, 0x9, 0x1}, {0x5, 0x2, 0x3, 0x400}, {0x1000, 0x57, 0x8, 0x200}, {0x8, 0x9d, 0x9, 0x8}, {0x26, 0x80, 0xf9, 0x800}, {0x1, 0xf, 0x5, 0xadac}, {0x9, 0x3, 0xb}, {0x9542, 0x3a, 0x28, 0x10000}, {0x9, 0xc, 0x7, 0x8}, {0x314, 0x4, 0x9, 0x7fffffff}, {0x5, 0x0, 0xf, 0xc1}, {0x9, 0x2, 0x2, 0x9d}, {0xa, 0x9, 0x5, 0x4}, {0x8000, 0xff, 0x7f, 0x1}, {0x2, 0x6, 0x9, 0x8}, {0x2, 0x81, 0x12, 0x2}, {0x5, 0x8, 0x27, 0x64231a4d}, {0x1, 0x8a, 0x82, 0x3}, {0x6, 0x1, 0x9}, {0x41d, 0x1, 0x44, 0x9}, {0x5, 0x3, 0xfd, 0x37f2}, {0xc, 0x3, 0x1, 0xc}, {0x5, 0x47, 0xff, 0xe}], {0xd83a0000000}}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}]}, 0xd24) r4 = shmget(0x1, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001080), 0x8000, 0x0) ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f00000010c0)={'\x00', 0xf0, 0x2, 0x7}) r6 = shmget(0x2, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) r7 = openat$incfs(r2, &(0x7f0000001140)='.log\x00', 0x8000, 0x20) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000001180)=0x2, 0x4) futex(&(0x7f00000011c0)=0x1, 0xc, 0x1, &(0x7f0000001200)={0x0, 0x989680}, &(0x7f0000001240), 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r7) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000011}, 0x4045) getrandom(&(0x7f00000013c0)=""/225, 0xe1, 0x3) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_lsm={0x1d, 0x4, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000001500)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000001540)=""/187, 0x40f00, 0x14, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x5, 0x5, 0x7fffffff, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001640)=[r2, r2, r7], &(0x7f0000001680)=[{0x0, 0x3, 0x7, 0x8}, {0x4, 0x3, 0x6, 0x1}, {0x5, 0x3, 0x7, 0x3}, {0x1, 0x1, 0xa, 0xc}, {0x5, 0x2, 0xc, 0x9}, {0x4, 0x1, 0x3, 0xb}, {0x0, 0x4, 0x1, 0x7}], 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r10, 0x0, 0x1000, 0x2e, &(0x7f00000017c0)="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", &(0x7f00000027c0)=""/46, 0xffff, 0x0, 0x76, 0x81, &(0x7f0000002800)="8a0f91e040ebbfcdfffea87b52fbb3203ca65dce688fb8be6508463113956fb47e9ca730cb609213110584c6faac0917cfdfecbe1d41f2e7e1884e5d41c4d52a47344176a72f6d141308697dfad4cf9026862d053a586a61b36ec5c61bcbcdb07d670bf662259da94f710e2b10ce5bea6ca6b5f4663b", &(0x7f0000002880)="3c403b7747eeda72763554f0e9dbbcd4bea176da8fa039a050eedbcc6873dacbdde976520f49338bfec1bbffc270a4cc2f6c681b8c4613320d1f033c2af20f1fca311a287a23465079ef6fb07cafedc0f874033fdddcf2c00e228a7c36ea7a2b0f648b19db77fcc5e14f83eedc96cbcaf116915c2487cbf0a64c67fdc6dd2404c6", 0x1, 0x0, 0xfffffffb}, 0x50) fcntl$setlease(r2, 0x400, 0x2) fcntl$setpipe(r8, 0x407, 0x5) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000003400)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000033c0)={&(0x7f0000002a00)={0x9bc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x970, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}]}, {0x424, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c8f4fb6064cb80ffdf750782a6b432c8f6c7aedc0eb218b8a3d29e7d2a416009"}, @WGPEER_A_ALLOWEDIPS={0x320, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @mcast1, 0x61}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @local, 0x8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9000d11751cfc74c03e2e7965fec979423ce19da684420c00ef824dfa8937d94"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eaef7f3518aceb5ee2e28ec5134e1dad16d3bb88f9ce69eeba36c64615acda15"}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private0, 0x3}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdc0}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x328, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @mcast1, 0x4}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x9bc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) shmctl$SHM_LOCK(r4, 0xb) 556.279818ms ago: executing program 4 (id=5461): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) sigaltstack(&(0x7f0000001540)={0x0, 0x100000003}, &(0x7f0000001d80)={0x0}) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_read_part_table(0x1056, &(0x7f0000001080)="$eJzsz7GNwkAUBNBZW/bZyekKuJ6IiAnIaAI3QCN0QiWkFIBkZGOgAyB4L/mj0WilDR9V2uw2dUnSJxme9XKbOZVXkfZ++uTwO4Xq79yUyzj7SXLaPpb19OIqybjP/3WuhnTTplsW1fr4nl8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHe7BQAA//+j4A+2") bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}, 0x1}}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2}}, 0xfffffffffffffe20, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="14ec", 0x2}], 0x1, 0x0, 0x0, 0x20010080}, 0x20004050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000101010100000000000000000a0000011c001980000001000008000008000100030a000000000100200200002400198019000200"], 0x54}, 0x1, 0x0, 0x0, 0x24008851}, 0x20048000) socket$inet_udp(0x2, 0x2, 0x0) 507.90532ms ago: executing program 0 (id=5462): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000640)="6a525265a964522c09899464a3319b3d3a8b71817d92754920064c02518627fc34cc7a822eda71b232723bd545cd7491f63a5dc784c0d6296611a3c50971812914e5ea74fef7cc54f22a609fc7e083a3037c8a393b80c9bc57abe242905a6e319e1b1acf42f33c58df7acb32ec8ce6346f2d1ca8532c3f85afe3ca00267f968f1dd284332ce1ef8717ed563e666d1113fd7e124daed457d82800"/168, 0xa8}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0xb, 0x3, 0x5, 0x10, @private2, @private2={0xfc, 0x2, '\x00', 0x21}, 0x700, 0x8191, 0x10ffff, 0x11}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c0003800743063b"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031080006400000000008000f4000000004140000001000010000000000000000000084000ae6a9853f4cf46ebb0e08ff96a0651250e99027bfcc273c7e21cffdc2f877681997309c7baf0c25617e8bf90cc5c6a8ffc4cf69f7103dc546e48e77b3afaf365dcffeeb3e7f457d19419ff7d6fa145b6369f933206e75099c1d6f70b2ee073d0565395df4143d4b6b"], 0x84}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}], [{@subj_role={'subj_role', 0x3d, '^#{]#@&&'}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 381.510748ms ago: executing program 3 (id=5463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004897}, 0x80) 358.809059ms ago: executing program 3 (id=5464): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 292.321963ms ago: executing program 3 (id=5465): socket(0x2, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 292.068073ms ago: executing program 7 (id=5466): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497", 0x4}], 0x1}}], 0x1, 0x2004000) 225.367347ms ago: executing program 3 (id=5467): r0 = memfd_create(&(0x7f00000006c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6\xcf\xcc\xe0\x04\x93>\xb8\x88\xc0\xad\x97\xd3.\x04\xc4n\x83Sb\x83\xf6L\xb7$\xb4\xeb\x91\x88\xcfn\xccwN\x9c\x8a\xb7\xfd\x83G\x18[\x00\xee\xfe\x9e\xab\xc4\xb3\x1d-q]\vep\xee\x18\xa9\x86\xa5\x1a\xd5\x92\n,\x14\x96~\x0fW\xbb\x8a:\xf5\xa3\x9b\x004\xd8\xf8_\x0e\xee\xbe>\xd7\x90\x95\xcb^\xe2a\xf4\xe5Z5\x92~@ \x00\x9b\xca\xea\xa8\xc0,\xcc\xe9s\xca\xd3\"\x14\xf3\x11\xe5\x0e\x93\x9aY\xb6\xa2|\xe8\xfe0\x9e\xc2\x99b\xd7\xd9\xa6\x15oO\xe2\xfe\xd0F\xcc\xeb\x1a\x84\x06E\xec\xf5\x9e\xea\xccB\xdd\xd84f\xb2O\r\x12\x1a\x1d\xb8\x92Q)=\xaa?\x13T\x82\xdf-E\xa4>c\xcd\xf57\xde\x17_\xfa\x9dd]-\xdd3.\x91\xd9/r\xc6>\xe4]\x8b', 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000680)=[{&(0x7f0000001800)='\x00', 0x1}, {&(0x7f0000000580)="d18a9a05176f84109d4e9eef60cc248315aad1a6996f80a76e8b099e3032e8671cd088517e917ce79ee2e1626745da51959a92a7d092252f648b5f08dabf2b644dcf0358e8d8232b1e094ec7528d08b0f68fbc2660fd61b4dfa9faf75213ef36154fb1a4bf339650fb7eec09347e6beb09b864d6749761291dd0d55238500ec732401a667a15dfe7e292b97ac5f72d66f0614dca7ab33f27d7b2478dc9a8c95350f1e6c9c26ab9b575900b5926d500167e61712fffa4008f0b0924bcd43b8032a52ae17d56d20d59cf", 0xc9}], 0x2, 0x2) splice(r1, 0x0, r0, 0x0, 0x25a5, 0x4) 179.70207ms ago: executing program 3 (id=5468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x800, 0x5fc}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 150.080861ms ago: executing program 4 (id=5469): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x4040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 138.999332ms ago: executing program 3 (id=5470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) 95.124104ms ago: executing program 4 (id=5471): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0xf, 0x0, 0x42, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7890, 0xd, 0xc}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0x28, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x70, 0xd8, &(0x7f00000009c0)=""/216, 0x41000, 0x10, '\x00', r0, @fallback=0x1a, r1, 0x8, &(0x7f0000000ac0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x8, 0x5, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff], &(0x7f0000000c00)=[{0x1, 0x4, 0x6, 0x6}, {0x4, 0x5, 0x5, 0xc}, {0x4, 0x3, 0x7}, {0x5, 0x1, 0x9, 0x6}], 0x10, 0x81}, 0x94) 68.156046ms ago: executing program 4 (id=5472): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@loopback={0xfc00}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x6, 0x0, 0x6, 0x500, 0x4000000000000009, 0x710202}) 0s ago: executing program 4 (id=5473): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4080) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r7, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1015) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket(0x1, 0x803, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r10, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818) sendmsg$sock(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000004c0)) kernel console output (not intermixed with test programs): e/Google Compute Engine, BIOS Google 10/25/2025 [ 516.606372][T18708] Call Trace: [ 516.606380][T18708] [ 516.606391][T18708] __dump_stack+0x1d/0x30 [ 516.606500][T18708] dump_stack_lvl+0x95/0xd0 [ 516.606542][T18708] dump_stack+0x15/0x1b [ 516.606624][T18708] should_fail_ex+0x263/0x280 [ 516.606648][T18708] should_fail+0xb/0x20 [ 516.606678][T18708] should_fail_usercopy+0x1a/0x20 [ 516.606704][T18708] _copy_from_user+0x1c/0xb0 [ 516.606731][T18708] ___sys_recvmsg+0xaa/0x3b0 [ 516.606767][T18708] do_recvmmsg+0x1ef/0x560 [ 516.606869][T18708] ? fput+0x8f/0xc0 [ 516.606917][T18708] __x64_sys_recvmmsg+0xe5/0x170 [ 516.606990][T18708] x64_sys_call+0x2b75/0x3000 [ 516.607018][T18708] do_syscall_64+0xc0/0x2a0 [ 516.607046][T18708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.607070][T18708] RIP: 0033:0x7f5ef6cdacb9 [ 516.607086][T18708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.607103][T18708] RSP: 002b:00007f5ef5737028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 516.607122][T18708] RAX: ffffffffffffffda RBX: 00007f5ef6f55fa0 RCX: 00007f5ef6cdacb9 [ 516.607186][T18708] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000004 [ 516.607200][T18708] RBP: 00007f5ef5737090 R08: 0000000000000000 R09: 0000000000000000 [ 516.607212][T18708] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 516.607223][T18708] R13: 00007f5ef6f56038 R14: 00007f5ef6f55fa0 R15: 00007ffff3afc3e8 [ 516.607244][T18708] [ 516.784184][T18710] EXT4-fs: inline encryption not supported [ 516.790117][T18710] EXT4-fs: Ignoring removed bh option [ 516.805949][T18710] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 516.820911][T18712] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 516.821692][T18710] EXT4-fs (loop8): orphan cleanup on readonly fs [ 516.843844][T18710] EXT4-fs error (device loop8): ext4_quota_enable:7177: comm syz.8.4766: inode #2304: comm syz.8.4766: iget: illegal inode # [ 516.858351][T18712] net_ratelimit: 81 callbacks suppressed [ 516.858367][T18712] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 516.897214][T18710] EXT4-fs (loop8): Remounting filesystem read-only [ 516.903759][T18710] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 516.918792][T18710] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 516.929039][T18710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 516.974222][T18719] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4771: bad orphan inode 17 [ 516.985063][T18721] iso9660: Unknown parameter 'che' [ 517.001214][T18719] ext4_test_bit(bit=16, block=4) = 1 [ 517.006568][T18719] is_bad_inode(inode)=0 [ 517.010759][T18719] NEXT_ORPHAN(inode)=0 [ 517.014836][T18719] max_ino=32 [ 517.018026][T18719] i_nlink=1 [ 517.043279][T18719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.072220][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.084011][T18724] Restarting kernel threads ... [ 517.089145][T18724] Done restarting kernel threads. [ 517.114422][T14293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.237527][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.266164][T18739] lo speed is unknown, defaulting to 1000 [ 517.288109][T18748] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4784'. [ 517.380891][T18755] Restarting kernel threads ... [ 517.385939][T18755] Done restarting kernel threads. [ 517.489455][T18768] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 517.497873][T18768] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 517.714671][T18786] Restarting kernel threads ... [ 517.724927][T18786] Done restarting kernel threads. [ 517.803047][T18769] lo speed is unknown, defaulting to 1000 [ 517.846433][T18811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4810'. [ 518.126616][T18826] Restarting kernel threads ... [ 518.133396][T18826] Done restarting kernel threads. [ 518.149483][T18830] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.172907][T18830] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.218177][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.269996][T18840] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4821'. [ 518.452071][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 518.452086][ T29] audit: type=1400 audit(1769353676.489:4823): avc: denied { mounton } for pid=18847 comm="syz.6.4824" path="/172/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 518.529569][T18852] EXT4-fs: Invalid want_extra_isize 9 [ 518.726437][ T29] audit: type=1400 audit(1769353676.760:4824): avc: denied { create } for pid=18857 comm="syz.8.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 518.833484][T18864] Restarting kernel threads ... [ 518.842242][T18864] Done restarting kernel threads. [ 518.870334][T18866] set_capacity_and_notify: 7 callbacks suppressed [ 518.870352][T18866] loop8: detected capacity change from 0 to 512 [ 518.885591][T18868] FAULT_INJECTION: forcing a failure. [ 518.885591][T18868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.898708][T18868] CPU: 0 UID: 0 PID: 18868 Comm: syz.4.4830 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 518.898744][T18868] Tainted: [W]=WARN [ 518.898752][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.898766][T18868] Call Trace: [ 518.898773][T18868] [ 518.898782][T18868] __dump_stack+0x1d/0x30 [ 518.898809][T18868] dump_stack_lvl+0x95/0xd0 [ 518.898846][T18868] dump_stack+0x15/0x1b [ 518.898869][T18868] should_fail_ex+0x263/0x280 [ 518.898891][T18868] should_fail+0xb/0x20 [ 518.898953][T18868] should_fail_usercopy+0x1a/0x20 [ 518.898978][T18868] _copy_to_user+0x20/0xa0 [ 518.899007][T18868] simple_read_from_buffer+0xb5/0x130 [ 518.899069][T18868] proc_fail_nth_read+0x10e/0x150 [ 518.899106][T18868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 518.899139][T18868] vfs_read+0x1ab/0x7f0 [ 518.899206][T18868] ? __rcu_read_unlock+0x4e/0x70 [ 518.899228][T18868] ? __fget_files+0x184/0x1c0 [ 518.899252][T18868] ? mutex_lock+0x57/0x90 [ 518.899324][T18868] ksys_read+0xdc/0x1a0 [ 518.899359][T18868] __x64_sys_read+0x40/0x50 [ 518.899456][T18868] x64_sys_call+0x2889/0x3000 [ 518.899484][T18868] do_syscall_64+0xc0/0x2a0 [ 518.899544][T18868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.899569][T18868] RIP: 0033:0x7f021d44b58e [ 518.899587][T18868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 518.899618][T18868] RSP: 002b:00007f021bee6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 518.899640][T18868] RAX: ffffffffffffffda RBX: 00007f021bee76c0 RCX: 00007f021d44b58e [ 518.899656][T18868] RDX: 000000000000000f RSI: 00007f021bee70a0 RDI: 0000000000000004 [ 518.899711][T18868] RBP: 00007f021bee7090 R08: 0000000000000000 R09: 0000000000000000 [ 518.899725][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.899740][T18868] R13: 00007f021d706038 R14: 00007f021d705fa0 R15: 00007ffecb3e9b68 [ 518.899815][T18868] [ 519.119152][ T29] audit: type=1400 audit(1769353677.125:4825): avc: denied { read write } for pid=18865 comm="syz.8.4831" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 519.142635][ T29] audit: type=1400 audit(1769353677.125:4826): avc: denied { open } for pid=18865 comm="syz.8.4831" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 519.241659][T18880] loop4: detected capacity change from 0 to 512 [ 519.262308][T18880] EXT4-fs: Ignoring removed nobh option [ 519.273013][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4835'. [ 519.282096][T18882] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4835'. [ 519.292686][T18880] EXT4-fs (loop4): orphan cleanup on readonly fs [ 519.306885][ T4349] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.315761][ T4349] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.325105][T18880] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.4834: ea_inode file size=4 entry size=6 [ 519.346456][T18885] loop3: detected capacity change from 0 to 512 [ 519.352787][ T4349] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.370654][T18880] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 519.387526][ T29] audit: type=1400 audit(1769353677.368:4827): avc: denied { unmount } for pid=15697 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 519.395363][ T4349] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.416565][T18880] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.4834: corrupted inode contents [ 519.455423][T18887] FAULT_INJECTION: forcing a failure. [ 519.455423][T18887] name failslab, interval 1, probability 0, space 0, times 0 [ 519.468122][T18887] CPU: 1 UID: 0 PID: 18887 Comm: syz.8.4837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.468177][T18887] Tainted: [W]=WARN [ 519.468185][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.468199][T18887] Call Trace: [ 519.468206][T18887] [ 519.468214][T18887] __dump_stack+0x1d/0x30 [ 519.468240][T18887] dump_stack_lvl+0x95/0xd0 [ 519.468342][T18887] dump_stack+0x15/0x1b [ 519.468365][T18887] should_fail_ex+0x263/0x280 [ 519.468388][T18887] should_failslab+0x8c/0xb0 [ 519.468463][T18887] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 519.468484][T18887] ? __alloc_skb+0x2f0/0x4b0 [ 519.468571][T18887] __alloc_skb+0x2f0/0x4b0 [ 519.468592][T18887] ? __alloc_skb+0x219/0x4b0 [ 519.468610][T18887] netlink_alloc_large_skb+0xbf/0xf0 [ 519.468631][T18887] netlink_sendmsg+0x40c/0x6f0 [ 519.468704][T18887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.468754][T18887] __sock_sendmsg+0x145/0x170 [ 519.468878][T18887] ____sys_sendmsg+0x345/0x4a0 [ 519.468907][T18887] ___sys_sendmsg+0x195/0x1e0 [ 519.469014][T18887] __sys_sendmmsg+0x185/0x320 [ 519.469124][T18887] __x64_sys_sendmmsg+0x57/0x70 [ 519.469185][T18887] x64_sys_call+0x1e28/0x3000 [ 519.469212][T18887] do_syscall_64+0xc0/0x2a0 [ 519.469269][T18887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.469291][T18887] RIP: 0033:0x7fac398facb9 [ 519.469306][T18887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.469323][T18887] RSP: 002b:00007fac38357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 519.469358][T18887] RAX: ffffffffffffffda RBX: 00007fac39b75fa0 RCX: 00007fac398facb9 [ 519.469375][T18887] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 519.469460][T18887] RBP: 00007fac38357090 R08: 0000000000000000 R09: 0000000000000000 [ 519.469474][T18887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.469486][T18887] R13: 00007fac39b76038 R14: 00007fac39b75fa0 R15: 00007ffe247a8068 [ 519.469509][T18887] [ 519.682909][T18885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.717875][T18880] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.4834: mark_inode_dirty error [ 519.728795][T18885] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.730061][T18880] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.4834: corrupted inode contents [ 519.759195][T18880] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.4834: mark_inode_dirty error [ 519.772772][T18880] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.4834: mark inode dirty (error -117) [ 519.801395][T17765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.810601][T18880] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 519.844643][T18880] EXT4-fs (loop4): 1 orphan inode deleted [ 519.944122][T18880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 520.028726][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.175490][T18911] loop8: detected capacity change from 0 to 8192 [ 520.251754][T18911] loop8: p1 p2 p4 [ 520.259430][T18911] loop8: p1 start 4294967280 is beyond EOD, truncated [ 520.266355][T18911] loop8: p2 size 590592 extends beyond EOD, truncated [ 520.285267][ T36] kernel write not supported for file [eventfd] (pid: 36 comm: kworker/1:1) [ 520.296453][T18911] loop8: p4 size 33554432 extends beyond EOD, truncated [ 520.313962][ T29] audit: type=1400 audit(1769353678.238:4828): avc: denied { create } for pid=18913 comm="syz.4.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 520.339587][T18909] netlink: 'syz.8.4847': attribute type 2 has an invalid length. [ 520.361479][ T29] audit: type=1400 audit(1769353678.238:4829): avc: denied { nlmsg_read } for pid=18913 comm="syz.4.4849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 520.447424][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 520.447965][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 520.487170][ T29] audit: type=1326 audit(1769353678.388:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.8.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 520.510822][ T29] audit: type=1326 audit(1769353678.388:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.8.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 520.529478][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 520.534427][ T29] audit: type=1326 audit(1769353678.388:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.8.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 520.545462][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 520.702031][T18936] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 520.812485][T18946] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 520.905146][T18943] loop8: detected capacity change from 0 to 8192 [ 520.970421][T18943] loop8: p1 p2 p4 [ 520.974245][T18943] loop8: p1 start 4294967280 is beyond EOD, truncated [ 520.981067][T18943] loop8: p2 size 590592 extends beyond EOD, truncated [ 520.988307][T18950] loop7: detected capacity change from 0 to 1024 [ 521.001001][T18950] EXT4-fs: Ignoring removed orlov option [ 521.006753][T18950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.013748][T18943] loop8: p4 size 33554432 extends beyond EOD, truncated [ 521.014638][T18950] ext4: Unknown parameter 'subj_role' [ 521.059011][T18940] netlink: 'syz.8.4861': attribute type 2 has an invalid length. [ 521.181721][T18970] netlink: 'syz.3.4873': attribute type 1 has an invalid length. [ 521.209869][T18972] __nla_validate_parse: 3 callbacks suppressed [ 521.209885][T18972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4874'. [ 521.227202][T18970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.234259][T18972] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 521.244931][T18968] lo speed is unknown, defaulting to 1000 [ 521.246804][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4873'. [ 521.263935][T18972] loop4: detected capacity change from 0 to 512 [ 521.282759][T18972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 521.291884][T18972] System zones: 1-12 [ 521.298879][T18970] netlink: 'syz.3.4873': attribute type 13 has an invalid length. [ 521.310516][T18972] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.4874: Directory hole found for htree index block 0 [ 521.310573][T18970] gretap0: refused to change device tx_queue_len [ 521.330013][T18970] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 521.345866][T18972] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 521.354133][T18972] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.4874: Directory hole found for htree index block 0 [ 521.367218][T18972] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 521.376319][T18972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.411034][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.703352][T18997] loop3: detected capacity change from 0 to 8192 [ 521.722380][T19002] netlink: 'syz.4.4884': attribute type 1 has an invalid length. [ 521.774794][T18997] loop3: p1 p2 p4 [ 521.779127][T18997] loop3: p1 start 4294967280 is beyond EOD, truncated [ 521.785964][T18997] loop3: p2 size 590592 extends beyond EOD, truncated [ 521.804948][T19002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.811890][T18997] loop3: p4 size 33554432 extends beyond EOD, truncated [ 521.846746][T18993] netlink: 'syz.3.4881': attribute type 2 has an invalid length. [ 521.876155][T19006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.921676][T19006] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 521.961923][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 521.963934][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 521.976270][T19006] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 522.072662][T19010] lo speed is unknown, defaulting to 1000 [ 522.102154][T19011] gretap1: entered promiscuous mode [ 522.107892][T19011] bond1: (slave gretap1): making interface the new active one [ 522.108124][T19011] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 522.333653][T19002] macvlan3: entered promiscuous mode [ 522.339091][T19002] macvlan3: entered allmulticast mode [ 522.349010][T19002] bond1: entered promiscuous mode [ 522.354435][T19002] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 522.392204][T19002] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 522.407063][T19025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4892'. [ 522.418801][T19002] bond1: left promiscuous mode [ 522.566740][T19039] loop3: detected capacity change from 0 to 8192 [ 522.616114][ T8006] loop3: p1 p2 p4 [ 522.620073][ T8006] loop3: p1 start 4294967280 is beyond EOD, truncated [ 522.623279][T19038] lo speed is unknown, defaulting to 1000 [ 522.626863][ T8006] loop3: p2 size 590592 extends beyond EOD, truncated [ 522.648428][ T8006] loop3: p4 size 33554432 extends beyond EOD, truncated [ 522.669471][T19039] loop3: p1 p2 p4 [ 522.674817][T19039] loop3: p1 start 4294967280 is beyond EOD, truncated [ 522.681660][T19039] loop3: p2 size 590592 extends beyond EOD, truncated [ 522.715631][T19039] loop3: p4 size 33554432 extends beyond EOD, truncated [ 522.758102][T19036] netlink: 'syz.3.4897': attribute type 2 has an invalid length. [ 522.865029][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 522.871064][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 522.941834][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 522.943197][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 523.098435][T19067] loop7: detected capacity change from 0 to 512 [ 523.123785][T19067] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4899: bg 0: block 393: padding at end of block bitmap is not set [ 523.165161][T19067] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 523.202150][T19067] EXT4-fs (loop7): 2 truncates cleaned up [ 523.227052][T19067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.258887][T19078] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4913'. [ 523.272071][T19078] IPVS: set_ctl: invalid protocol: 136 172.30.1.9:20003 [ 523.296294][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4899'. [ 523.352316][T14293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.365178][T19082] bio_check_eod: 28 callbacks suppressed [ 523.365213][T19082] syz.8.4914: attempt to access beyond end of device [ 523.365213][T19082] loop8: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 523.462488][T19085] syz.8.4914: attempt to access beyond end of device [ 523.462488][T19085] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 523.476537][T19085] syz.8.4914: attempt to access beyond end of device [ 523.476537][T19085] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 523.495557][T19085] syz.8.4914: attempt to access beyond end of device [ 523.495557][T19085] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 523.509205][T19085] syz.8.4914: attempt to access beyond end of device [ 523.509205][T19085] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 523.524165][T19085] syz.8.4914: attempt to access beyond end of device [ 523.524165][T19085] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 523.548246][T19085] syz.8.4914: attempt to access beyond end of device [ 523.548246][T19085] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 523.569709][T19085] syz.8.4914: attempt to access beyond end of device [ 523.569709][T19085] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 523.595117][T19085] syz.8.4914: attempt to access beyond end of device [ 523.595117][T19085] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 523.611111][T19082] xt_ecn: cannot match TCP bits for non-tcp packets [ 523.725112][ T53] kworker/u8:4: attempt to access beyond end of device [ 523.725112][ T53] loop8: rw=8388609, sector=153, nr_sectors = 1 limit=128 [ 523.739026][ T53] buffer_io_error: 7 callbacks suppressed [ 523.739041][ T53] Buffer I/O error on dev loop8, logical block 153, lost async page write [ 524.030168][T19110] lo speed is unknown, defaulting to 1000 [ 524.204305][T19143] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4938'. [ 524.231155][T19141] lo speed is unknown, defaulting to 1000 [ 524.244510][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 524.244525][ T29] audit: type=1326 audit(1769353681.924:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.253930][T19140] set_capacity_and_notify: 3 callbacks suppressed [ 524.253946][T19140] loop4: detected capacity change from 0 to 2048 [ 524.274108][ T29] audit: type=1326 audit(1769353681.924:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.310373][ T29] audit: type=1326 audit(1769353681.924:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.333844][ T29] audit: type=1326 audit(1769353681.924:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.357346][ T29] audit: type=1326 audit(1769353681.924:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.381105][ T29] audit: type=1326 audit(514.851:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.403986][ T29] audit: type=1326 audit(514.851:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.426943][ T29] audit: type=1326 audit(514.851:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.449794][ T29] audit: type=1326 audit(514.851:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f021d48acb9 code=0x7ffc0000 [ 524.472757][ T29] audit: type=1326 audit(514.851:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19138 comm="syz.4.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f021d484ad7 code=0x7ffc0000 [ 524.511759][T19150] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4939'. [ 524.554352][ T8006] Alternate GPT is invalid, using primary GPT. [ 524.560616][ T8006] loop4: p1 p2 p3 [ 524.564396][ T8006] loop4: partition table partially beyond EOD, truncated [ 524.598199][T19140] Alternate GPT is invalid, using primary GPT. [ 524.604502][T19140] loop4: p1 p2 p3 [ 524.608212][T19140] loop4: partition table partially beyond EOD, truncated [ 524.906536][T19171] netlink: 'syz.7.4949': attribute type 1 has an invalid length. [ 524.935110][T19174] loop4: detected capacity change from 0 to 512 [ 524.947807][T19171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.955933][T19174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.990405][T19171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.998594][T19171] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 524.998679][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.010557][T19171] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 525.227730][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4957'. [ 525.249084][T19193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4956'. [ 525.345521][T19204] loop8: detected capacity change from 0 to 512 [ 525.381125][T19204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.512996][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.578684][T19212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4964'. [ 525.828086][T19223] netlink: 'syz.8.4967': attribute type 1 has an invalid length. [ 525.843819][T19223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.867715][T19223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.875154][T19223] bond0: (slave vxcan13): The slave device specified does not support setting the MAC address [ 525.887003][T19223] bond0: (slave vxcan13): Error -95 calling set_mac_address [ 526.110261][T19230] loop7: detected capacity change from 0 to 128 [ 526.174954][T19236] loop4: detected capacity change from 0 to 512 [ 526.209623][T19236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.278945][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.370835][T19229] Buffer I/O error on dev loop7, logical block 153, async page read [ 526.391308][T19229] Buffer I/O error on dev loop7, logical block 154, async page read [ 526.399373][T19229] Buffer I/O error on dev loop7, logical block 155, async page read [ 526.434599][T19229] Buffer I/O error on dev loop7, logical block 156, async page read [ 526.459796][T19229] Buffer I/O error on dev loop7, logical block 157, async page read [ 526.467951][T19229] Buffer I/O error on dev loop7, logical block 158, async page read [ 526.476178][T19229] Buffer I/O error on dev loop7, logical block 159, async page read [ 526.495796][T19229] Buffer I/O error on dev loop7, logical block 160, async page read [ 526.508758][T19230] Buffer I/O error on dev loop7, logical block 153, async page read [ 526.520536][T19251] bridge_slave_0: left allmulticast mode [ 526.526215][T19251] bridge_slave_0: left promiscuous mode [ 526.528183][T19256] netlink: 'syz.8.4976': attribute type 10 has an invalid length. [ 526.532081][T19251] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.552403][T19251] bridge_slave_1: left allmulticast mode [ 526.558051][T19251] bridge_slave_1: left promiscuous mode [ 526.563840][T19251] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.584559][T19250] loop4: detected capacity change from 0 to 512 [ 526.620633][T19250] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4977: bg 0: block 393: padding at end of block bitmap is not set [ 526.657189][T19250] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 526.678219][T19250] EXT4-fs (loop4): 2 truncates cleaned up [ 526.682587][T19251] team0: Port device team_slave_0 removed [ 526.684374][T19250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.770559][T19255] loop3: detected capacity change from 0 to 8192 [ 526.776090][T19251] team0: Port device team_slave_1 removed [ 526.792788][T19250] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.793480][T19251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.799208][T19250] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.806598][T19251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.816278][T19250] __nla_validate_parse: 1 callbacks suppressed [ 526.816294][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'. [ 526.839871][T19251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.847288][T19251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.855131][T19255] loop3: p1 p2 p4 [ 526.858982][T19255] loop3: p1 start 4294967280 is beyond EOD, truncated [ 526.865786][T19255] loop3: p2 size 590592 extends beyond EOD, truncated [ 526.875897][T19255] loop3: p4 size 33554432 extends beyond EOD, truncated [ 526.887340][T19255] netlink: 'syz.3.4979': attribute type 2 has an invalid length. [ 526.897412][T19256] team0: entered promiscuous mode [ 526.935725][T19256] bridge0: port 1(team0) entered blocking state [ 526.942146][T19256] bridge0: port 1(team0) entered disabled state [ 526.966952][T19256] team0: entered allmulticast mode [ 526.973167][T19256] bridge0: port 1(team0) entered blocking state [ 526.975088][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 526.979545][T19256] bridge0: port 1(team0) entered forwarding state [ 526.998511][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 527.008993][ T4350] bridge0: port 1(team0) entered disabled state [ 527.027726][T19250] hsr_slave_0: left promiscuous mode [ 527.034002][T19250] hsr_slave_1: left promiscuous mode [ 527.103752][T19266] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4982'. [ 527.170044][T19250] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.191592][T19273] loop3: detected capacity change from 0 to 512 [ 527.216947][T19273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.238281][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4987'. [ 527.318384][T17765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.369732][T19275] loop7: detected capacity change from 0 to 1024 [ 527.424046][T19275] EXT4-fs: Ignoring removed orlov option [ 527.429769][T19275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 527.447616][T19287] lo speed is unknown, defaulting to 1000 [ 527.467530][T19275] ext4: Unknown parameter 'subj_role' [ 527.857019][T19318] loop3: detected capacity change from 0 to 256 [ 528.025897][T19324] loop3: p1 p2 p4 [ 528.034271][T19324] loop3: p1 start 4294967280 is beyond EOD, truncated [ 528.041088][T19324] loop3: p2 size 590592 extends beyond EOD, truncated [ 528.050773][T19324] loop3: p4 size 33554432 extends beyond EOD, truncated [ 528.064114][T19324] netlink: 'syz.3.5003': attribute type 2 has an invalid length. [ 528.120549][T19334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5007'. [ 528.158368][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 528.168732][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 528.205417][T19338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.309013][T19338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.333477][T19346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.422839][T14293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.533712][T19367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5019'. [ 528.560053][ T8007] loop7: p1 p2 p4 [ 528.563888][ T8007] loop7: p1 start 4294967280 is beyond EOD, truncated [ 528.570724][ T8007] loop7: p2 size 590592 extends beyond EOD, truncated [ 528.578430][ T8007] loop7: p4 size 33554432 extends beyond EOD, truncated [ 528.595529][T19365] loop7: p1 p2 p4 [ 528.599500][T19365] loop7: p1 start 4294967280 is beyond EOD, truncated [ 528.606302][T19365] loop7: p2 size 590592 extends beyond EOD, truncated [ 528.615731][T19365] loop7: p4 size 33554432 extends beyond EOD, truncated [ 528.658338][T19365] netlink: 'syz.7.5018': attribute type 2 has an invalid length. [ 528.707488][T19370] pimreg: tun_chr_ioctl cmd 1074025677 [ 528.713895][T19370] pimreg: linktype set to 6 [ 528.726973][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 528.738224][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 529.010440][T19334] bio_check_eod: 27006 callbacks suppressed [ 529.010459][T19334] syz.3.5007: attempt to access beyond end of device [ 529.010459][T19334] loop3: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 529.031227][T19334] syz.3.5007: attempt to access beyond end of device [ 529.031227][T19334] loop3: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 529.046382][T19334] syz.3.5007: attempt to access beyond end of device [ 529.046382][T19334] loop3: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 529.060665][T19334] syz.3.5007: attempt to access beyond end of device [ 529.060665][T19334] loop3: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 529.344994][T19385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.363984][T19390] batman_adv: batadv0: Adding interface: ipvlan2 [ 529.370335][T19390] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.395826][T19390] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 529.407028][T17765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.422645][T19367] syz.4.5019: attempt to access beyond end of device [ 529.422645][T19367] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 529.436438][T19367] buffer_io_error: 25705 callbacks suppressed [ 529.436457][T19367] Buffer I/O error on dev loop4, logical block 69, async page read [ 529.489168][T19367] syz.4.5019: attempt to access beyond end of device [ 529.489168][T19367] loop4: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 529.502878][T19367] Buffer I/O error on dev loop4, logical block 70, async page read [ 529.521300][T19367] syz.4.5019: attempt to access beyond end of device [ 529.521300][T19367] loop4: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 529.535036][T19367] Buffer I/O error on dev loop4, logical block 71, async page read [ 529.543986][T19395] Bluetooth: hci0: Frame reassembly failed (-84) [ 529.550400][ T4349] Bluetooth: hci0: Frame reassembly failed (-84) [ 529.564709][T19367] syz.4.5019: attempt to access beyond end of device [ 529.564709][T19367] loop4: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 529.578521][T19367] Buffer I/O error on dev loop4, logical block 72, async page read [ 529.640145][ T8006] loop8: p1 p2 p4 [ 529.644080][ T8006] loop8: p1 start 4294967280 is beyond EOD, truncated [ 529.650888][ T8006] loop8: p2 size 590592 extends beyond EOD, truncated [ 529.658639][ T8006] loop8: p4 size 33554432 extends beyond EOD, truncated [ 529.668863][T19396] loop8: p1 p2 p4 [ 529.672696][T19396] loop8: p1 start 4294967280 is beyond EOD, truncated [ 529.679515][T19396] loop8: p2 size 590592 extends beyond EOD, truncated [ 529.687081][T19396] loop8: p4 size 33554432 extends beyond EOD, truncated [ 529.696188][T19396] netlink: 'syz.8.5030': attribute type 2 has an invalid length. [ 529.760616][T19399] set_capacity_and_notify: 10 callbacks suppressed [ 529.760635][T19399] loop8: detected capacity change from 0 to 512 [ 529.777697][T19399] EXT4-fs: Ignoring removed i_version option [ 529.779051][T19401] netlink: 'syz.4.5032': attribute type 1 has an invalid length. [ 529.783781][T19399] EXT4-fs: Ignoring removed orlov option [ 529.797131][T19399] EXT4-fs: Ignoring removed bh option [ 529.809173][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 529.820735][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 529.850217][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 529.861366][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 529.876574][T19399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.895514][T19401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 529.928382][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.010878][T19413] loop8: detected capacity change from 0 to 256 [ 530.022951][T19407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.067813][T19407] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 530.095036][T19407] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 530.186342][T19401] macvlan3: entered promiscuous mode [ 530.191816][T19401] macvlan3: entered allmulticast mode [ 530.252920][T19401] bond2: entered promiscuous mode [ 530.259096][T19401] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 530.283675][T19401] bond2: left promiscuous mode [ 530.293327][T19425] loop8: detected capacity change from 0 to 1024 [ 530.301053][T19425] EXT4-fs: Ignoring removed orlov option [ 530.306848][T19425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.331926][T19425] ext4: Unknown parameter 'subj_role' [ 530.408430][T19436] loop7: detected capacity change from 0 to 256 [ 530.417322][T19436] FAT-fs (loop7): Directory bread(block 1285) failed [ 530.543560][T19440] loop7: detected capacity change from 0 to 1024 [ 530.550383][T19440] EXT4-fs: Ignoring removed orlov option [ 530.556058][T19440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.567154][T19440] ext4: Unknown parameter 'subj_role' [ 530.608011][T19443] loop7: detected capacity change from 0 to 512 [ 530.636944][T19443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.655086][T19443] EXT4-fs error (device loop7): ext4_empty_dir:3075: inode #12: comm syz.7.5044: invalid size [ 530.713911][T14293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.759900][T19449] loop7: detected capacity change from 0 to 128 [ 530.925379][T19455] loop4: detected capacity change from 0 to 256 [ 530.938467][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5049'. [ 531.016499][T19459] lo speed is unknown, defaulting to 1000 [ 531.259742][T19477] loop8: detected capacity change from 0 to 128 [ 531.321398][T19473] loop7: detected capacity change from 0 to 1024 [ 531.328854][T19473] EXT4-fs: Ignoring removed orlov option [ 531.334534][T19473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.351002][T19473] ext4: Unknown parameter 'subj_role' [ 531.463020][T19484] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5059: bg 0: block 393: padding at end of block bitmap is not set [ 531.479384][T19484] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 531.492621][T19484] EXT4-fs (loop8): 2 truncates cleaned up [ 531.513475][T19484] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.549833][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5059'. [ 531.572169][T19484] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.607655][T19490] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5060'. [ 531.660003][ T3769] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 531.683204][T19491] syz.8.5060: attempt to access beyond end of device [ 531.683204][T19491] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 531.702967][T19491] syz.8.5060: attempt to access beyond end of device [ 531.702967][T19491] loop8: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 531.731789][T19491] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 531.838179][T19498] lo speed is unknown, defaulting to 1000 [ 532.098617][ T8006] loop3: p1 p2 p4 [ 532.102478][ T8006] loop3: p1 start 4294967280 is beyond EOD, truncated [ 532.109398][ T8006] loop3: p2 size 590592 extends beyond EOD, truncated [ 532.130772][ T8006] loop3: p4 size 33554432 extends beyond EOD, truncated [ 532.140824][T19507] loop3: p1 p2 p4 [ 532.151289][T19507] loop3: p1 start 4294967280 is beyond EOD, truncated [ 532.158130][T19507] loop3: p2 size 590592 extends beyond EOD, truncated [ 532.187550][T19507] loop3: p4 size 33554432 extends beyond EOD, truncated [ 532.187767][T19514] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 532.209104][T19507] netlink: 'syz.3.5067': attribute type 2 has an invalid length. [ 532.491069][T19490] Buffer I/O error on dev loop8, logical block 69, async page read [ 532.499182][T19490] Buffer I/O error on dev loop8, logical block 70, async page read [ 532.507397][T19490] Buffer I/O error on dev loop8, logical block 71, async page read [ 532.515408][T19490] Buffer I/O error on dev loop8, logical block 72, async page read [ 532.805155][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 532.811678][T19524] Bluetooth: hci0: Frame reassembly failed (-84) [ 533.052756][T19528] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.092662][T14293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.151680][T19533] lo speed is unknown, defaulting to 1000 [ 533.174233][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 533.174248][ T29] audit: type=1326 audit(523.195:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.203672][ T29] audit: type=1326 audit(523.195:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.226855][ T29] audit: type=1326 audit(523.195:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.249893][ T29] audit: type=1326 audit(523.195:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.272843][ T29] audit: type=1326 audit(523.195:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.295847][ T29] audit: type=1326 audit(523.195:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.318794][ T29] audit: type=1326 audit(523.195:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.341886][ T29] audit: type=1326 audit(523.195:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.370043][T19543] netlink: 'syz.3.5080': attribute type 1 has an invalid length. [ 533.377974][ T29] audit: type=1326 audit(523.195:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.401273][ T29] audit: type=1326 audit(523.195:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19534 comm="syz.3.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 533.440728][T19543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.454803][T19544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.461966][T19544] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 533.473863][T19544] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 533.502517][T19547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5081'. [ 533.547002][T19544] gretap1: entered promiscuous mode [ 533.553293][T19544] bond2: (slave gretap1): making interface the new active one [ 533.563026][T19544] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 533.583472][T19544] macvlan4: entered promiscuous mode [ 533.588817][T19544] macvlan4: entered allmulticast mode [ 533.589642][T19544] bond2: entered promiscuous mode [ 533.599967][T19544] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 533.611786][T19544] bond2: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 533.612209][T19544] bond2: left promiscuous mode [ 533.612593][T19548] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 533.723803][T19553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5083'. [ 534.390695][T19547] bio_check_eod: 72 callbacks suppressed [ 534.390717][T19547] syz.4.5081: attempt to access beyond end of device [ 534.390717][T19547] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 534.418222][T19547] syz.4.5081: attempt to access beyond end of device [ 534.418222][T19547] loop4: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 534.444109][T19547] syz.4.5081: attempt to access beyond end of device [ 534.444109][T19547] loop4: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 534.469658][T19547] syz.4.5081: attempt to access beyond end of device [ 534.469658][T19547] loop4: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 534.610243][T19553] syz.3.5083: attempt to access beyond end of device [ 534.610243][T19553] loop3: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 534.629684][T19553] syz.3.5083: attempt to access beyond end of device [ 534.629684][T19553] loop3: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 534.666382][T19553] syz.3.5083: attempt to access beyond end of device [ 534.666382][T19553] loop3: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 534.695442][T19553] syz.3.5083: attempt to access beyond end of device [ 534.695442][T19553] loop3: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 534.892031][T19564] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5087: bg 0: block 393: padding at end of block bitmap is not set [ 534.910585][T19564] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 534.946676][T19564] EXT4-fs (loop4): 2 truncates cleaned up [ 534.961909][T19564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.985024][ T8006] loop3: p1 p2 p4 [ 534.993717][ T8006] loop3: p1 start 4294967280 is beyond EOD, truncated [ 534.995525][ T3769] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 535.000521][ T8006] loop3: p2 size 590592 extends beyond EOD, truncated [ 535.038162][ T8006] loop3: p4 size 33554432 extends beyond EOD, truncated [ 535.038643][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5087'. [ 535.060120][T19568] loop3: p1 p2 p4 [ 535.063943][T19568] loop3: p1 start 4294967280 is beyond EOD, truncated [ 535.070781][T19568] loop3: p2 size 590592 extends beyond EOD, truncated [ 535.085110][T19568] loop3: p4 size 33554432 extends beyond EOD, truncated [ 535.106372][T19564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.107824][T19568] netlink: 'syz.3.5088': attribute type 2 has an invalid length. [ 535.203609][T19585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5095'. [ 535.230937][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 535.241889][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 535.278392][T19593] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5098'. [ 535.278912][ T4638] udevd[4638]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 535.302113][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 535.491914][T19602] set_capacity_and_notify: 9 callbacks suppressed [ 535.491935][T19602] loop8: detected capacity change from 0 to 8192 [ 535.592787][T19604] lo speed is unknown, defaulting to 1000 [ 535.653247][T19604] chnl_net:caif_netlink_parms(): no params data found [ 535.714162][T19604] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.721237][T19604] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.728811][T19604] bridge_slave_0: entered allmulticast mode [ 535.735447][T19604] bridge_slave_0: entered promiscuous mode [ 535.742232][T19604] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.749388][T19604] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.756833][T19604] bridge_slave_1: entered allmulticast mode [ 535.763288][T19604] bridge_slave_1: entered promiscuous mode [ 535.780555][T19604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.791131][T19604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.811166][T19604] team0: Port device team_slave_0 added [ 535.818301][T19604] team0: Port device team_slave_1 added [ 535.829027][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5104'. [ 535.859165][T19604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.866185][T19604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.892305][T19604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.904169][T19604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.911105][T19604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.937204][T19604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.965056][T19604] hsr_slave_0: entered promiscuous mode [ 535.971362][T19604] hsr_slave_1: entered promiscuous mode [ 536.039598][T19633] loop7: detected capacity change from 0 to 8192 [ 536.086140][T19633] loop7: p1 p2 p4 [ 536.089936][T19633] loop7: p1 start 4294967280 is beyond EOD, truncated [ 536.096734][T19633] loop7: p2 size 590592 extends beyond EOD, truncated [ 536.115874][T19633] loop7: p4 size 33554432 extends beyond EOD, truncated [ 536.176291][ T3001] loop7: p1 p2 p4 [ 536.183473][ T3001] loop7: p1 start 4294967280 is beyond EOD, truncated [ 536.190360][ T3001] loop7: p2 size 590592 extends beyond EOD, truncated [ 536.227797][ T3001] loop7: p4 size 33554432 extends beyond EOD, truncated [ 536.240331][T19633] netlink: 'syz.7.5106': attribute type 2 has an invalid length. [ 536.280587][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 536.292051][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 536.318071][T19652] : renamed from bond_slave_0 (while UP) [ 536.332511][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 536.346679][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 536.390208][T19657] loop7: detected capacity change from 0 to 1024 [ 536.405714][T19650] loop4: detected capacity change from 0 to 8192 [ 536.434598][T19657] EXT4-fs: Invalid want_extra_isize 2 [ 536.471022][ T8007] loop4: p1 p2 p4 [ 536.474941][ T8007] loop4: p1 start 4294967280 is beyond EOD, truncated [ 536.481766][ T8007] loop4: p2 size 590592 extends beyond EOD, truncated [ 536.497400][ T8007] loop4: p4 size 33554432 extends beyond EOD, truncated [ 536.511899][T19650] loop4: p1 p2 p4 [ 536.516037][T19650] loop4: p1 start 4294967280 is beyond EOD, truncated [ 536.522826][T19650] loop4: p2 size 590592 extends beyond EOD, truncated [ 536.539755][T19650] loop4: p4 size 33554432 extends beyond EOD, truncated [ 536.543685][T19604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 536.575072][T19650] netlink: 'syz.4.5111': attribute type 2 has an invalid length. [ 536.586425][T19669] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5114'. [ 536.596674][T19604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 536.605916][T19661] loop8: detected capacity change from 0 to 1024 [ 536.613998][T19669] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5114'. [ 536.627845][T19661] EXT4-fs: Ignoring removed orlov option [ 536.633537][T19661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 536.640510][T19604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 536.668316][T19604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 536.680220][T19661] ext4: Unknown parameter 'subj_role' [ 536.745799][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 536.758768][T19691] loop7: detected capacity change from 0 to 128 [ 536.779174][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 536.904650][T19604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.928256][T19714] loop3: detected capacity change from 0 to 128 [ 536.942229][T19705] lo speed is unknown, defaulting to 1000 [ 536.953451][T19604] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.959515][T19714] syz.3.5123: attempt to access beyond end of device [ 536.959515][T19714] loop3: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 536.974659][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.981736][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.013743][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.020824][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.032553][T19721] loop7: detected capacity change from 0 to 256 [ 537.039393][T19721] vfat: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 537.066030][T19714] syz.3.5123: attempt to access beyond end of device [ 537.066030][T19714] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 537.093641][T19720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5125'. [ 537.103021][T19724] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5125'. [ 537.208203][T19604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.361505][T19734] loop4: detected capacity change from 0 to 512 [ 537.449646][T19604] veth0_vlan: entered promiscuous mode [ 537.458947][T19734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5127: bg 0: block 393: padding at end of block bitmap is not set [ 537.459575][T19604] veth1_vlan: entered promiscuous mode [ 537.486626][T19734] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 537.513170][T19734] EXT4-fs (loop4): 2 truncates cleaned up [ 537.536038][T19604] veth0_macvtap: entered promiscuous mode [ 537.547430][T19734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.563907][T19604] veth1_macvtap: entered promiscuous mode [ 537.579222][T19771] loop3: detected capacity change from 0 to 128 [ 537.584372][T19604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.601958][T19604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.626173][ T4373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.652365][ T4351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.682070][ T4349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.708209][ T4349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.713289][T19734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.795045][T19787] buffer_io_error: 43 callbacks suppressed [ 537.795063][T19787] Buffer I/O error on dev loop7, logical block 76, lost async page write [ 537.829714][T19787] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 537.853820][T19805] EXT4-fs: Ignoring removed nobh option [ 537.861273][T19785] Buffer I/O error on dev loop7, logical block 69, async page read [ 537.870697][T19805] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.880004][T19785] Buffer I/O error on dev loop7, logical block 70, async page read [ 537.892694][T19785] Buffer I/O error on dev loop7, logical block 71, async page read [ 537.900895][T19785] Buffer I/O error on dev loop7, logical block 72, async page read [ 537.916698][T19785] Buffer I/O error on dev loop7, logical block 69, async page read [ 537.918850][T19805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.924911][T19785] Buffer I/O error on dev loop7, logical block 70, async page read [ 537.945340][T19785] Buffer I/O error on dev loop7, logical block 71, async page read [ 537.953694][T19785] Buffer I/O error on dev loop7, logical block 72, async page read [ 537.990502][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.079252][T19827] lo speed is unknown, defaulting to 1000 [ 538.192663][T19834] loop0: p1 p2 p4 [ 538.199521][T19834] loop0: p1 start 4294967280 is beyond EOD, truncated [ 538.206372][T19834] loop0: p2 size 590592 extends beyond EOD, truncated [ 538.229182][T19834] loop0: p4 size 33554432 extends beyond EOD, truncated [ 538.247805][T19834] netlink: 'syz.0.5143': attribute type 2 has an invalid length. [ 538.435987][T19874] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5146: bg 0: block 393: padding at end of block bitmap is not set [ 538.453922][T19874] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 538.467697][T19874] EXT4-fs (loop0): 2 truncates cleaned up [ 538.484182][T19874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.502291][T19874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 538.509697][T19874] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 538.519280][T19874] hsr_slave_0: left promiscuous mode [ 538.528854][T19874] hsr_slave_1: left promiscuous mode [ 538.785614][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.796050][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.806529][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.816927][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.827124][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.837452][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.847672][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.857894][T19935] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.869323][T19936] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 538.879586][T19935] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 539.201950][T19954] __nla_validate_parse: 2 callbacks suppressed [ 539.201967][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5154'. [ 539.217307][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5154'. [ 539.711362][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 539.711376][ T29] audit: type=1326 audit(529.312:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 539.741864][ T29] audit: type=1326 audit(529.312:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 539.764855][ T29] audit: type=1326 audit(529.340:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 539.770225][T19970] FAULT_INJECTION: forcing a failure. [ 539.770225][T19970] name failslab, interval 1, probability 0, space 0, times 0 [ 539.787856][ T29] audit: type=1326 audit(529.340:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 539.800610][T19970] CPU: 0 UID: 0 PID: 19970 Comm: syz.8.5160 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 539.800644][T19970] Tainted: [W]=WARN [ 539.800652][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.800666][T19970] Call Trace: [ 539.800673][T19970] [ 539.800690][T19970] __dump_stack+0x1d/0x30 [ 539.800722][T19970] dump_stack_lvl+0x95/0xd0 [ 539.800797][T19970] dump_stack+0x15/0x1b [ 539.800818][T19970] should_fail_ex+0x263/0x280 [ 539.800840][T19970] should_failslab+0x8c/0xb0 [ 539.800862][T19970] kmem_cache_alloc_noprof+0x68/0x490 [ 539.800903][T19970] ? audit_log_start+0x34c/0x730 [ 539.800924][T19970] audit_log_start+0x34c/0x730 [ 539.800945][T19970] ? kstrtouint+0x76/0xc0 [ 539.801121][T19970] audit_seccomp+0x47/0x100 [ 539.801151][T19970] ? __seccomp_filter+0x8db/0x1350 [ 539.801178][T19970] __seccomp_filter+0x8ec/0x1350 [ 539.801218][T19970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 539.801246][T19970] ? vfs_write+0x86e/0x9f0 [ 539.801287][T19970] ? __rcu_read_unlock+0x4e/0x70 [ 539.801308][T19970] ? __fget_files+0x184/0x1c0 [ 539.801389][T19970] __secure_computing+0x81/0x150 [ 539.801416][T19970] syscall_trace_enter+0xce/0x1e0 [ 539.801440][T19970] do_syscall_64+0x9a/0x2a0 [ 539.801522][T19970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.801545][T19970] RIP: 0033:0x7fac398facb9 [ 539.801562][T19970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.801585][T19970] RSP: 002b:00007fac38357028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 539.801657][T19970] RAX: ffffffffffffffda RBX: 00007fac39b75fa0 RCX: 00007fac398facb9 [ 539.801670][T19970] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000040 [ 539.801683][T19970] RBP: 00007fac38357090 R08: 0000000000000000 R09: 0000000000000000 [ 539.801695][T19970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.801725][T19970] R13: 00007fac39b76038 R14: 00007fac39b75fa0 R15: 00007ffe247a8068 [ 539.801745][T19970] [ 539.801800][T19970] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 539.823447][ T29] audit: type=1326 audit(529.340:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 539.835027][T19970] audit: out of memory in audit_log_start [ 540.063642][ T29] audit: type=1326 audit(529.359:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 540.086603][ T29] audit: type=1326 audit(529.359:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 540.109461][ T29] audit: type=1326 audit(529.368:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19969 comm="syz.8.5160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac398facb9 code=0x7ffc0000 [ 540.329066][T19979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.347115][T19979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 540.374297][T19980] bridge1: entered promiscuous mode [ 540.388370][T19979] bridge2: entered promiscuous mode [ 540.552426][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.560051][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.567521][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.574938][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.582395][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.589828][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.597277][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.604693][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.612393][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.619845][ T3408] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 540.671876][T20010] EXT4-fs: Ignoring removed i_version option [ 540.677988][T20010] EXT4-fs: Ignoring removed orlov option [ 540.683872][T20010] EXT4-fs: Ignoring removed bh option [ 540.728168][ T3408] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 540.861946][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5184'. [ 540.895834][T20044] 8021q: VLANs not supported on wg1 [ 540.898926][T20038] set_capacity_and_notify: 8 callbacks suppressed [ 540.898942][T20038] loop8: detected capacity change from 0 to 512 [ 540.916348][T20046] loop3: detected capacity change from 0 to 128 [ 540.947482][T20050] loop4: detected capacity change from 0 to 512 [ 541.059004][T20059] netlink: 'syz.3.5194': attribute type 1 has an invalid length. [ 541.074642][T20059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.091346][T20063] netlink: 'syz.4.5195': attribute type 1 has an invalid length. [ 541.100665][T20059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.107745][T20059] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 541.122271][T20059] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 541.149233][T20063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.226438][T20067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.234287][T20067] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 541.246307][T20067] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 541.289107][T20059] macvlan4: entered promiscuous mode [ 541.294453][T20059] macvlan4: entered allmulticast mode [ 541.294945][T20059] bond3: entered promiscuous mode [ 541.305362][T20059] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 541.314345][T20059] bond3: left promiscuous mode [ 541.357500][T20083] loop7: detected capacity change from 0 to 128 [ 541.371215][T20084] loop0: detected capacity change from 0 to 128 [ 541.382524][T20079] lo speed is unknown, defaulting to 1000 [ 541.395396][T20084] bio_check_eod: 144 callbacks suppressed [ 541.395413][T20084] syz.0.5200: attempt to access beyond end of device [ 541.395413][T20084] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 541.437646][T20084] syz.0.5200: attempt to access beyond end of device [ 541.437646][T20084] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 541.492537][T20084] syz.0.5200: attempt to access beyond end of device [ 541.492537][T20084] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 541.512506][T20076] syz.0.5200: attempt to access beyond end of device [ 541.512506][T20076] loop0: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 541.542409][T20094] loop7: detected capacity change from 0 to 1024 [ 541.555156][T20075] syz.0.5200: attempt to access beyond end of device [ 541.555156][T20075] loop0: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 541.570755][T20075] syz.0.5200: attempt to access beyond end of device [ 541.570755][T20075] loop0: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 541.574339][T20094] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.589400][T20075] syz.0.5200: attempt to access beyond end of device [ 541.589400][T20075] loop0: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 541.590980][T20094] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.611666][T20094] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 541.621003][T20094] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 541.621717][T20075] syz.0.5200: attempt to access beyond end of device [ 541.621717][T20075] loop0: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 541.645645][T20094] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.5206: bad orphan inode 11 [ 541.656701][T20075] syz.0.5200: attempt to access beyond end of device [ 541.656701][T20075] loop0: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 541.658345][T20094] ext4_test_bit(bit=10, block=4) = 1 [ 541.675678][T20094] is_bad_inode(inode)=0 [ 541.679916][T20094] NEXT_ORPHAN(inode)=3254779904 [ 541.684811][T20094] max_ino=32 [ 541.688052][T20094] i_nlink=0 [ 541.688707][T20075] syz.0.5200: attempt to access beyond end of device [ 541.688707][T20075] loop0: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 541.692013][T20094] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.5206: lblock 2 mapped to illegal pblock 2 (length 1) [ 541.720154][T20094] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.5206: lblock 0 mapped to illegal pblock 48 (length 1) [ 541.744612][T20101] loop3: detected capacity change from 0 to 1024 [ 541.751344][T20101] EXT4-fs: Ignoring removed orlov option [ 541.757103][T20101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 541.763822][T20101] ext4: Unknown parameter 'subj_role' [ 541.764321][T20077] macvlan3: entered promiscuous mode [ 541.774584][T20077] macvlan3: entered allmulticast mode [ 541.781366][T20094] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5206: Failed to acquire dquot type 0 [ 541.793017][T20094] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 541.804833][T20094] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.5206: mark_inode_dirty error [ 541.817193][T20094] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 541.817778][T20077] bond3: entered promiscuous mode [ 541.832733][T20077] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 541.841396][T20077] bond3: left promiscuous mode [ 541.846515][T20094] EXT4-fs mount: 8 callbacks suppressed [ 541.846546][T20094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.864600][T20104] loop8: detected capacity change from 0 to 8192 [ 541.887377][T14293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.897180][T14293] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 541.910259][T14293] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 541.920007][T14293] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 541.937430][T20104] loop8: p1 p2 p4 [ 541.941264][T20104] loop8: p1 start 4294967280 is beyond EOD, truncated [ 541.948068][T20104] loop8: p2 size 590592 extends beyond EOD, truncated [ 541.965841][T20104] loop8: p4 size 33554432 extends beyond EOD, truncated [ 541.974888][T20104] netlink: 'syz.8.5208': attribute type 2 has an invalid length. [ 542.049579][T20116] loop0: detected capacity change from 0 to 128 [ 542.073434][ T4638] udevd[4638]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 542.073938][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 542.180697][T20129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5218'. [ 542.206857][T20130] loop0: detected capacity change from 0 to 128 [ 542.290447][T20140] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5223'. [ 542.343564][T20149] tmpfs: Bad value for 'mpol' [ 542.391724][T20153] EXT4-fs: Ignoring removed i_version option [ 542.397857][T20153] EXT4-fs: Ignoring removed orlov option [ 542.403509][T20153] EXT4-fs: Ignoring removed bh option [ 542.445051][T20153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.476617][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.514715][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5234'. [ 542.523735][T20167] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5234'. [ 542.542995][T20167] geneve2: entered promiscuous mode [ 542.548250][T20167] geneve2: entered allmulticast mode [ 542.574652][T20167] iso9660: Bad value for 'block' [ 542.587979][T20175] 9p: Bad value for 'wfdno' [ 543.194737][T20193] buffer_io_error: 116 callbacks suppressed [ 543.194761][T20193] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 543.213293][T20193] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 543.239527][T20193] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 543.270450][T20198] EXT4-fs: Ignoring removed orlov option [ 543.276282][T20198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 543.323403][T20198] ext4: Unknown parameter 'subj_role' [ 543.467572][T20214] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 543.491452][T20214] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 543.507287][T20214] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 543.515983][T20212] lo speed is unknown, defaulting to 1000 [ 543.535242][T20213] Buffer I/O error on dev loop4, logical block 69, async page read [ 543.555628][T20213] Buffer I/O error on dev loop4, logical block 70, async page read [ 543.565036][T20213] Buffer I/O error on dev loop4, logical block 71, async page read [ 543.579439][T20213] Buffer I/O error on dev loop4, logical block 72, async page read [ 543.721785][T20220] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5252: bg 0: block 393: padding at end of block bitmap is not set [ 543.738854][T20230] netlink: 'syz.0.5256': attribute type 10 has an invalid length. [ 543.746759][T20230] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5256'. [ 543.751858][T20220] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 543.756050][T20230] team0: entered promiscuous mode [ 543.769818][T20230] team_slave_0: entered promiscuous mode [ 543.775566][T20230] team_slave_1: entered promiscuous mode [ 543.781639][T20230] bridge0: port 3(team0) entered blocking state [ 543.788154][T20230] bridge0: port 3(team0) entered disabled state [ 543.794827][T20230] team0: entered allmulticast mode [ 543.799954][T20230] team_slave_0: entered allmulticast mode [ 543.805749][T20230] team_slave_1: entered allmulticast mode [ 543.813129][T20230] bridge0: port 3(team0) entered blocking state [ 543.819602][T20230] bridge0: port 3(team0) entered forwarding state [ 543.854551][T20220] EXT4-fs (loop8): 2 truncates cleaned up [ 543.940348][T20220] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.004858][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5252'. [ 544.072542][T20262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5267'. [ 544.081728][T20257] netlink: 'syz.7.5268': attribute type 33 has an invalid length. [ 544.100081][T20220] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.109481][T20257] 9pnet_fd: p9_fd_create_unix (20257): problem connecting socket: ./file0: -111 [ 544.119315][T20262] EXT4-fs: inline encryption not supported [ 544.119483][T20257] sctp: [Deprecated]: syz.7.5268 (pid 20257) Use of int in maxseg socket option. [ 544.119483][T20257] Use struct sctp_assoc_value instead [ 544.133143][T20262] EXT4-fs: Ignoring removed nobh option [ 544.145104][T20262] EXT4-fs: Ignoring removed oldalloc option [ 544.196402][T20262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.217018][T20262] sctp: [Deprecated]: syz.3.5267 (pid 20262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.217018][T20262] Use struct sctp_sack_info instead [ 544.239319][T20262] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 544.242603][T20274] netlink: 'syz.7.5273': attribute type 1 has an invalid length. [ 544.267199][T20262] EXT4-fs (loop3): Remounting filesystem read-only [ 544.274102][T20274] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.295083][T20268] Set syz1 is full, maxelem 1023 reached [ 544.313761][T17765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.338262][T20274] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.355044][T20268] EXT4-fs: Ignoring removed orlov option [ 544.360743][T20268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.369145][T20268] ext4: Unknown parameter 'subj_role' [ 544.370308][T20274] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 544.386524][T20274] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 544.484535][T20289] gretap1: entered promiscuous mode [ 544.494051][T20289] bond6: (slave gretap1): making interface the new active one [ 544.502278][T20289] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 544.524734][T20284] macvlan2: entered promiscuous mode [ 544.530168][T20284] macvlan2: entered allmulticast mode [ 544.538514][T20284] bond6: entered promiscuous mode [ 544.544836][T20284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 544.555678][T20284] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 544.573863][T20284] bond6: left promiscuous mode [ 545.063383][T20313] EXT4-fs: inline encryption not supported [ 545.069277][T20313] EXT4-fs: Ignoring removed orlov option [ 545.084043][T20313] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 545.153127][T20313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.167280][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 545.167297][ T29] audit: type=1400 audit(534.419:5486): avc: denied { mounton } for pid=20312 comm="syz.7.5287" path="/345/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 545.226887][T20313] __nla_validate_parse: 1 callbacks suppressed [ 545.226903][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5287'. [ 545.242134][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5287'. [ 545.251162][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5287'. [ 545.271203][ T53] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.271234][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5287'. [ 545.288953][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5287'. [ 545.290314][T20322] 9p: Bad value for 'rfdno' [ 545.298155][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5287'. [ 545.305350][ T53] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.314780][ T29] audit: type=1400 audit(534.522:5487): avc: denied { append } for pid=20312 comm="syz.7.5287" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.330523][ T53] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.343554][ T29] audit: type=1400 audit(534.522:5488): avc: denied { append } for pid=20312 comm="syz.7.5287" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 545.374768][ T29] audit: type=1400 audit(534.522:5489): avc: denied { mounton } for pid=20312 comm="syz.7.5287" path="/345/file1/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.376100][T20324] netlink: 'syz.4.5290': attribute type 1 has an invalid length. [ 545.405810][ T53] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.433720][T20324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.471645][ T29] audit: type=1400 audit(534.691:5490): avc: denied { unlink } for pid=14293 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 545.471896][T20326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.504745][T14293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.513994][T20326] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 545.525156][ T29] audit: type=1400 audit(534.691:5491): avc: denied { unmount } for pid=14293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 545.530626][T20326] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 545.544756][ T29] audit: type=1400 audit(534.728:5492): avc: denied { unlink } for pid=14293 comm="syz-executor" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 545.697904][T20323] macvlan3: entered promiscuous mode [ 545.703243][T20323] macvlan3: entered allmulticast mode [ 545.709132][T20323] bond4: entered promiscuous mode [ 545.714454][T20323] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 545.722762][T20323] bond4: left promiscuous mode [ 545.746296][ T29] audit: type=1400 audit(534.953:5493): avc: denied { mount } for pid=20337 comm="syz.3.5295" name="/" dev="hugetlbfs" ino=66899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 545.773406][ T29] audit: type=1400 audit(534.953:5494): avc: denied { create } for pid=20337 comm="syz.3.5295" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 545.793623][ T29] audit: type=1326 audit(534.953:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20337 comm="syz.3.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4451acb9 code=0x7ffc0000 [ 545.824291][T20341] EXT4-fs: Ignoring removed i_version option [ 545.830346][T20341] EXT4-fs: Ignoring removed orlov option [ 545.836130][T20341] EXT4-fs: Ignoring removed bh option [ 545.850453][T20341] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.878076][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.935206][T20353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5301'. [ 545.952154][T20349] lo speed is unknown, defaulting to 1000 [ 546.125901][ T8007] loop3: p1 p2 p4 [ 546.129748][ T8007] loop3: p1 start 4294967280 is beyond EOD, truncated [ 546.136541][ T8007] loop3: p2 size 590592 extends beyond EOD, truncated [ 546.144342][ T8007] loop3: p4 size 33554432 extends beyond EOD, truncated [ 546.153347][T20366] loop3: p1 p2 p4 [ 546.157503][T20366] loop3: p1 start 4294967280 is beyond EOD, truncated [ 546.164349][T20366] loop3: p2 size 590592 extends beyond EOD, truncated [ 546.172333][T20366] loop3: p4 size 33554432 extends beyond EOD, truncated [ 546.194282][T20366] netlink: 'syz.3.5305': attribute type 2 has an invalid length. [ 546.250852][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 546.261585][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 546.293102][T20379] set_capacity_and_notify: 20 callbacks suppressed [ 546.293153][T20379] loop4: detected capacity change from 0 to 512 [ 546.312420][T20379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5311: bg 0: block 393: padding at end of block bitmap is not set [ 546.312577][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 546.332519][T20379] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 546.338060][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 546.345831][T20379] EXT4-fs (loop4): 2 truncates cleaned up [ 546.361408][T20379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.408807][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.642010][T20383] loop7: detected capacity change from 0 to 512 [ 546.695086][T20383] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5312: bg 0: block 393: padding at end of block bitmap is not set [ 546.714242][T20383] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 546.714954][T20385] loop4: detected capacity change from 0 to 512 [ 546.729039][T20383] EXT4-fs (loop7): 2 truncates cleaned up [ 546.749375][T20383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.762931][T20385] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5313: bg 0: block 393: padding at end of block bitmap is not set [ 546.763812][T20385] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 546.791259][T20385] EXT4-fs (loop4): 2 truncates cleaned up [ 546.807312][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5312'. [ 546.808316][T20385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.849975][T20383] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.895104][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5313'. [ 546.913636][T20385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.934329][T20399] lo speed is unknown, defaulting to 1000 [ 547.012977][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5322'. [ 547.080659][T20417] loop8: detected capacity change from 0 to 128 [ 547.100956][T20417] bio_check_eod: 13786 callbacks suppressed [ 547.101013][T20417] syz.8.5322: attempt to access beyond end of device [ 547.101013][T20417] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 547.130714][T20417] syz.8.5322: attempt to access beyond end of device [ 547.130714][T20417] loop8: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 547.145490][T20424] loop7: detected capacity change from 0 to 256 [ 547.152077][T20411] loop0: detected capacity change from 0 to 1024 [ 547.159031][T20411] EXT4-fs: Ignoring removed orlov option [ 547.164735][T20411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.171789][T20411] ext4: Unknown parameter 'subj_role' [ 547.183224][T20417] syz.8.5322: attempt to access beyond end of device [ 547.183224][T20417] loop8: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 547.208194][T20427] loop4: detected capacity change from 0 to 256 [ 547.222030][T20412] syz.8.5322: attempt to access beyond end of device [ 547.222030][T20412] loop8: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 547.237228][T20412] syz.8.5322: attempt to access beyond end of device [ 547.237228][T20412] loop8: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 547.252002][T20412] syz.8.5322: attempt to access beyond end of device [ 547.252002][T20412] loop8: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 547.270948][T20412] syz.8.5322: attempt to access beyond end of device [ 547.270948][T20412] loop8: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 547.286914][T20412] syz.8.5322: attempt to access beyond end of device [ 547.286914][T20412] loop8: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 547.300997][T20412] syz.8.5322: attempt to access beyond end of device [ 547.300997][T20412] loop8: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 547.324300][T20412] syz.8.5322: attempt to access beyond end of device [ 547.324300][T20412] loop8: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 547.401476][T20437] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.409413][T20437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.416611][T20437] IPv6: NLM_F_CREATE should be set when creating new route [ 547.581346][T20450] loop7: detected capacity change from 0 to 128 [ 547.606224][T20450] loop6: detected capacity change from 0 to 7 [ 547.612754][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.622690][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.632342][T20450] loop6: unable to read partition table [ 547.638031][T20450] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 547.639344][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.661703][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.673840][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.683733][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 547.696113][T20455] loop7: detected capacity change from 0 to 128 [ 547.696759][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 548.064365][T20460] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 548.091838][T20460] EXT4-fs (loop8): orphan cleanup on readonly fs [ 548.109579][T20460] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.5340: bad orphan inode 15 [ 548.135812][T20460] ext4_test_bit(bit=14, block=18) = 1 [ 548.141262][T20460] is_bad_inode(inode)=0 [ 548.145431][T20460] NEXT_ORPHAN(inode)=1023 [ 548.149755][T20460] max_ino=32 [ 548.152986][T20460] i_nlink=0 [ 548.156667][T20460] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #15: comm syz.8.5340: corrupted xattr block 19: e_value size too large [ 548.172281][T20460] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 548.187064][T20460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 548.251084][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.309496][T20470] EXT4-fs: Ignoring removed mblk_io_submit option [ 548.343405][T20470] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.5343: invalid block [ 548.360280][T20470] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5343: invalid indirect mapped block 4294967295 (level 1) [ 548.481130][T20470] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5343: invalid indirect mapped block 4294967295 (level 1) [ 548.557956][T20470] EXT4-fs (loop8): 2 truncates cleaned up [ 548.581986][T20470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.614010][T20470] EXT4-fs error (device loop8): empty_inline_dir:1770: inode #12: block 7: comm syz.8.5343: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 548.648508][T20490] netlink: 'syz.7.5352': attribute type 1 has an invalid length. [ 548.673837][T20477] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5347: bg 0: block 393: padding at end of block bitmap is not set [ 548.704798][T20490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.711720][T20470] EXT4-fs warning (device loop8): empty_inline_dir:1777: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 548.728150][T20477] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 548.740046][T20477] EXT4-fs (loop4): 2 truncates cleaned up [ 548.757426][T20477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.799399][T12366] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.812254][T20503] ext3: Unknown parameter 'subj_type' [ 548.832855][T20477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.889067][T20516] netlink: 'syz.4.5360': attribute type 1 has an invalid length. [ 548.930436][T20522] FAULT_INJECTION: forcing a failure. [ 548.930436][T20522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.931831][T20516] 8021q: adding VLAN 0 to HW filter on device bond5 [ 548.943644][T20522] CPU: 0 UID: 0 PID: 20522 Comm: syz.0.5362 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 548.943787][T20522] Tainted: [W]=WARN [ 548.943795][T20522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.943808][T20522] Call Trace: [ 548.943815][T20522] [ 548.943823][T20522] __dump_stack+0x1d/0x30 [ 548.943849][T20522] dump_stack_lvl+0x95/0xd0 [ 548.943887][T20522] dump_stack+0x15/0x1b [ 548.943907][T20522] should_fail_ex+0x263/0x280 [ 548.943929][T20522] should_fail+0xb/0x20 [ 548.943947][T20522] should_fail_usercopy+0x1a/0x20 [ 548.944024][T20522] _copy_from_user+0x1c/0xb0 [ 548.944051][T20522] ___sys_recvmsg+0xaa/0x3b0 [ 548.944084][T20522] do_recvmmsg+0x1ef/0x560 [ 548.944125][T20522] ? fput+0x8f/0xc0 [ 548.944151][T20522] __x64_sys_recvmmsg+0xe5/0x170 [ 548.944243][T20522] x64_sys_call+0x2b75/0x3000 [ 548.944268][T20522] do_syscall_64+0xc0/0x2a0 [ 548.944297][T20522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.944320][T20522] RIP: 0033:0x7faaef63acb9 [ 548.944338][T20522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.944412][T20522] RSP: 002b:00007faaee097028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 548.944510][T20522] RAX: ffffffffffffffda RBX: 00007faaef8b5fa0 RCX: 00007faaef63acb9 [ 548.944525][T20522] RDX: 0000000000000001 RSI: 0000200000001f40 RDI: 0000000000000003 [ 548.944606][T20522] RBP: 00007faaee097090 R08: 0000000000000000 R09: 0000000000000000 [ 548.944678][T20522] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 548.944691][T20522] R13: 00007faaef8b6038 R14: 00007faaef8b5fa0 R15: 00007ffe6259f308 [ 548.944711][T20522] [ 549.128085][T20525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 549.135221][T20525] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 549.146393][T20525] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 549.164878][T20531] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 549.177344][T20529] macvlan3: entered promiscuous mode [ 549.182690][T20529] macvlan3: entered allmulticast mode [ 549.188553][T20529] bond5: entered promiscuous mode [ 549.193798][T20529] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 549.211464][T20529] bond5: left promiscuous mode [ 549.423071][T20555] buffer_io_error: 117 callbacks suppressed [ 549.423086][T20555] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 549.447652][T20555] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 549.471445][T20555] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 549.479261][T20547] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5370: bg 0: block 393: padding at end of block bitmap is not set [ 549.497049][T20547] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 549.511377][T20547] EXT4-fs (loop8): 2 truncates cleaned up [ 549.522507][T20547] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.613872][T20571] FAULT_INJECTION: forcing a failure. [ 549.613872][T20571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.627129][T20571] CPU: 0 UID: 0 PID: 20571 Comm: syz.3.5376 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 549.627161][T20571] Tainted: [W]=WARN [ 549.627240][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.627308][T20571] Call Trace: [ 549.627315][T20571] [ 549.627322][T20571] __dump_stack+0x1d/0x30 [ 549.627346][T20571] dump_stack_lvl+0x95/0xd0 [ 549.627386][T20571] dump_stack+0x15/0x1b [ 549.627408][T20571] should_fail_ex+0x263/0x280 [ 549.627432][T20571] should_fail+0xb/0x20 [ 549.627452][T20571] should_fail_usercopy+0x1a/0x20 [ 549.627542][T20571] _copy_to_user+0x20/0xa0 [ 549.627603][T20571] simple_read_from_buffer+0xb5/0x130 [ 549.627636][T20571] proc_fail_nth_read+0x10e/0x150 [ 549.627661][T20571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.627719][T20571] vfs_read+0x1ab/0x7f0 [ 549.627813][T20571] ? __rcu_read_unlock+0x4e/0x70 [ 549.627835][T20571] ? __fget_files+0x184/0x1c0 [ 549.627859][T20571] ? mutex_lock+0x57/0x90 [ 549.627957][T20571] ksys_read+0xdc/0x1a0 [ 549.628000][T20571] __x64_sys_read+0x40/0x50 [ 549.628031][T20571] x64_sys_call+0x2889/0x3000 [ 549.628053][T20571] do_syscall_64+0xc0/0x2a0 [ 549.628135][T20571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.628159][T20571] RIP: 0033:0x7f7a444db58e [ 549.628177][T20571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 549.628198][T20571] RSP: 002b:00007f7a42f76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.628256][T20571] RAX: ffffffffffffffda RBX: 00007f7a42f776c0 RCX: 00007f7a444db58e [ 549.628270][T20571] RDX: 000000000000000f RSI: 00007f7a42f770a0 RDI: 0000000000000006 [ 549.628286][T20571] RBP: 00007f7a42f77090 R08: 0000000000000000 R09: 0000000000000000 [ 549.628300][T20571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.628315][T20571] R13: 00007f7a44796038 R14: 00007f7a44795fa0 R15: 00007fff9992f9c8 [ 549.628336][T20571] [ 549.629450][T20547] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.942753][T20584] netlink: 'syz.3.5381': attribute type 1 has an invalid length. [ 549.989819][T20578] FAULT_INJECTION: forcing a failure. [ 549.989819][T20578] name failslab, interval 1, probability 0, space 0, times 0 [ 550.002578][T20578] CPU: 1 UID: 0 PID: 20578 Comm: syz.7.5380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 550.002610][T20578] Tainted: [W]=WARN [ 550.002618][T20578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.002638][T20578] Call Trace: [ 550.002645][T20578] [ 550.002652][T20578] __dump_stack+0x1d/0x30 [ 550.002675][T20578] dump_stack_lvl+0x95/0xd0 [ 550.002748][T20578] dump_stack+0x15/0x1b [ 550.002766][T20578] should_fail_ex+0x263/0x280 [ 550.002821][T20578] should_failslab+0x8c/0xb0 [ 550.002840][T20578] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 550.002877][T20578] ? __alloc_skb+0x2f0/0x4b0 [ 550.002895][T20578] __alloc_skb+0x2f0/0x4b0 [ 550.002976][T20578] ? __alloc_skb+0x219/0x4b0 [ 550.003098][T20578] netlink_alloc_large_skb+0xbf/0xf0 [ 550.003119][T20578] netlink_sendmsg+0x40c/0x6f0 [ 550.003148][T20578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.003197][T20578] __sock_sendmsg+0x145/0x170 [ 550.003227][T20578] ____sys_sendmsg+0x31e/0x4a0 [ 550.003257][T20578] ___sys_sendmsg+0x195/0x1e0 [ 550.003364][T20578] __x64_sys_sendmsg+0xd4/0x160 [ 550.003394][T20578] x64_sys_call+0x17ba/0x3000 [ 550.003418][T20578] do_syscall_64+0xc0/0x2a0 [ 550.003484][T20578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.003510][T20578] RIP: 0033:0x7f5ef6cdacb9 [ 550.003533][T20578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.003550][T20578] RSP: 002b:00007f5ef5737028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.003570][T20578] RAX: ffffffffffffffda RBX: 00007f5ef6f55fa0 RCX: 00007f5ef6cdacb9 [ 550.003584][T20578] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 550.003660][T20578] RBP: 00007f5ef5737090 R08: 0000000000000000 R09: 0000000000000000 [ 550.003672][T20578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.003684][T20578] R13: 00007f5ef6f56038 R14: 00007f5ef6f55fa0 R15: 00007ffff3afc3e8 [ 550.003702][T20578] [ 550.319559][T20584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.334579][T20581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.342989][T20581] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 550.362350][T20581] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 550.454734][T20601] macvlan4: entered promiscuous mode [ 550.455378][T20604] Buffer I/O error on dev loop7, logical block 76, lost async page write [ 550.460090][T20601] macvlan4: entered allmulticast mode [ 550.460486][T20601] bond4: entered promiscuous mode [ 550.509153][T20604] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 550.518014][T20601] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 550.526335][T20601] bond4: left promiscuous mode [ 550.538796][T20602] FAULT_INJECTION: forcing a failure. [ 550.538796][T20602] name failslab, interval 1, probability 0, space 0, times 0 [ 550.551450][T20602] CPU: 0 UID: 0 PID: 20602 Comm: syz.4.5386 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 550.551502][T20602] Tainted: [W]=WARN [ 550.551508][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.551520][T20602] Call Trace: [ 550.551526][T20602] [ 550.551533][T20602] __dump_stack+0x1d/0x30 [ 550.551624][T20602] dump_stack_lvl+0x95/0xd0 [ 550.551645][T20602] dump_stack+0x15/0x1b [ 550.551667][T20602] should_fail_ex+0x263/0x280 [ 550.551691][T20602] should_failslab+0x8c/0xb0 [ 550.551712][T20602] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 550.551836][T20602] ? __alloc_skb+0x2f0/0x4b0 [ 550.551860][T20602] __alloc_skb+0x2f0/0x4b0 [ 550.551876][T20602] ? __alloc_skb+0x219/0x4b0 [ 550.551894][T20602] netlink_alloc_large_skb+0xbf/0xf0 [ 550.551922][T20602] netlink_sendmsg+0x40c/0x6f0 [ 550.551947][T20602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.551971][T20602] __sock_sendmsg+0x145/0x170 [ 550.552020][T20602] ____sys_sendmsg+0x345/0x4a0 [ 550.552043][T20602] ___sys_sendmsg+0x195/0x1e0 [ 550.552074][T20602] __sys_sendmmsg+0x185/0x320 [ 550.552156][T20602] __x64_sys_sendmmsg+0x57/0x70 [ 550.552178][T20602] x64_sys_call+0x1e28/0x3000 [ 550.552202][T20602] do_syscall_64+0xc0/0x2a0 [ 550.552278][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.552302][T20602] RIP: 0033:0x7f021d48acb9 [ 550.552320][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.552337][T20602] RSP: 002b:00007f021bee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 550.552355][T20602] RAX: ffffffffffffffda RBX: 00007f021d705fa0 RCX: 00007f021d48acb9 [ 550.552397][T20602] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 550.552423][T20602] RBP: 00007f021bee7090 R08: 0000000000000000 R09: 0000000000000000 [ 550.552461][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.552473][T20602] R13: 00007f021d706038 R14: 00007f021d705fa0 R15: 00007ffecb3e9b68 [ 550.552491][T20602] [ 551.076660][T20632] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 551.089655][T20632] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 551.112177][T20632] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 551.122076][T20632] Buffer I/O error on dev loop8, logical block 104, lost async page write [ 551.163747][T20612] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5390: bg 0: block 393: padding at end of block bitmap is not set [ 551.179400][T20612] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 551.194207][T20612] EXT4-fs (loop7): 2 truncates cleaned up [ 551.210085][T20612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.231612][T20612] __nla_validate_parse: 4 callbacks suppressed [ 551.231649][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5390'. [ 551.305350][T20646] netlink: 'syz.4.5404': attribute type 1 has an invalid length. [ 551.313806][T20612] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.329300][T20651] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 551.344342][T20646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 551.352106][T20651] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.5406: invalid indirect mapped block 32768 (level 2) [ 551.379093][T20646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 551.390511][T20646] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 551.393934][T20651] EXT4-fs (loop0): Remounting filesystem read-only [ 551.402154][T20646] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 551.425074][T20651] EXT4-fs (loop0): 1 orphan inode deleted [ 551.425094][T20651] EXT4-fs (loop0): 1 truncate cleaned up [ 551.425593][T20651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.477880][T20656] macvlan3: entered promiscuous mode [ 551.477900][T20656] macvlan3: entered allmulticast mode [ 551.478353][T20656] bond6: entered promiscuous mode [ 551.497371][T20656] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 551.497648][T19604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.538780][T20656] bond6: left promiscuous mode [ 551.574682][T20662] lo speed is unknown, defaulting to 1000 [ 551.725505][T20673] set_capacity_and_notify: 17 callbacks suppressed [ 551.725523][T20673] loop0: detected capacity change from 0 to 8192 [ 551.780277][T20673] loop0: p1 p2 p4 [ 551.784168][T20673] loop0: p1 start 4294967280 is beyond EOD, truncated [ 551.791138][T20673] loop0: p2 size 590592 extends beyond EOD, truncated [ 551.829130][T20673] loop0: p4 size 33554432 extends beyond EOD, truncated [ 551.859598][T20667] netlink: 'syz.0.5411': attribute type 2 has an invalid length. [ 551.946057][T20685] loop3: detected capacity change from 0 to 128 [ 551.959347][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 551.971364][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 551.973458][T20685] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 552.031205][T20690] loop0: detected capacity change from 0 to 512 [ 552.048996][T20690] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 552.057288][T20690] EXT4-fs (loop0): orphan cleanup on readonly fs [ 552.081135][T20690] __quota_error: 40 callbacks suppressed [ 552.081150][T20690] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (4398046510080 > 6144). [ 552.111284][T20695] lo speed is unknown, defaulting to 1000 [ 552.144139][T20690] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 552.162268][T20690] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 552.164107][ T29] audit: type=1400 audit(540.958:5536): avc: denied { read } for pid=20688 comm="syz.7.5421" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 552.170084][T20690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.5420: corrupted inode contents [ 552.231601][ T29] audit: type=1400 audit(541.023:5537): avc: denied { write } for pid=20700 comm="syz.3.5423" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 552.255702][T20690] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.5420: mark_inode_dirty error [ 552.284358][T20690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.5420: corrupted inode contents [ 552.307426][T20690] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5420: mark_inode_dirty error [ 552.322836][T20690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.5420: corrupted inode contents [ 552.335679][T20690] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 552.344719][T20690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.5420: corrupted inode contents [ 552.357135][T20690] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.5420: mark_inode_dirty error [ 552.368466][T20690] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 552.377721][T20690] EXT4-fs (loop0): 1 truncate cleaned up [ 552.384135][T20690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 552.470338][T19604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.515835][T20707] loop0: detected capacity change from 0 to 256 [ 552.695128][T20710] loop0: detected capacity change from 0 to 8192 [ 552.710632][T20712] loop4: detected capacity change from 0 to 512 [ 552.721722][T20672] syz.8.5413 (20672) used greatest stack depth: 6352 bytes left [ 552.729805][T20712] EXT4-fs: Ignoring removed bh option [ 552.736523][T20712] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 552.748276][T20712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e028, mo2=0002] [ 552.756769][ T8006] loop0: p1 p2 p4 [ 552.760683][T20712] System zones: 1-12 [ 552.760818][ T8006] loop0: p1 start 4294967280 is beyond EOD, truncated [ 552.771588][ T8006] loop0: p2 size 590592 extends beyond EOD, truncated [ 552.771765][T20712] EXT4-fs (loop4): orphan cleanup on readonly fs [ 552.786478][T20712] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5427: invalid indirect mapped block 1023 (level 0) [ 552.806157][T20712] EXT4-fs (loop4): Remounting filesystem read-only [ 552.812747][T20712] EXT4-fs (loop4): 1 truncate cleaned up [ 552.816894][ T8006] loop0: p4 size 33554432 extends beyond EOD, truncated [ 552.827184][T20712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 552.843508][T20712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5427'. [ 552.854232][T20710] loop0: p1 p2 p4 [ 552.859120][T20712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5427'. [ 552.860258][T20710] loop0: p1 start 4294967280 is beyond EOD, truncated [ 552.874938][T20710] loop0: p2 size 590592 extends beyond EOD, truncated [ 552.901764][T16571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 552.910916][T20710] loop0: p4 size 33554432 extends beyond EOD, truncated [ 552.916360][T20709] netlink: 'syz.0.5426': attribute type 2 has an invalid length. [ 553.021003][ T29] audit: type=1326 audit(541.753:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20733 comm="syz.7.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef6cdacb9 code=0x7ffc0000 [ 553.052768][ T29] audit: type=1326 audit(541.781:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20733 comm="syz.7.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f5ef6cdacb9 code=0x7ffc0000 [ 553.075940][ T29] audit: type=1326 audit(541.781:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20733 comm="syz.7.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef6cdacb9 code=0x7ffc0000 [ 553.086984][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 553.098958][ T29] audit: type=1326 audit(541.781:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20733 comm="syz.7.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f5ef6cdacb9 code=0x7ffc0000 [ 553.112635][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 553.131566][ T29] audit: type=1326 audit(541.781:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20733 comm="syz.7.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef6cdacb9 code=0x7ffc0000 [ 553.146787][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 553.164330][ T29] audit: type=1326 audit(541.781:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20733 comm="syz.7.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f5ef6cdacb9 code=0x7ffc0000 [ 553.175462][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 553.197019][ T29] audit: type=1326 audit(541.781:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20733 comm="syz.7.5434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef6cdacb9 code=0x7ffc0000 [ 553.252815][T20740] loop7: detected capacity change from 0 to 256 [ 553.270992][T20742] loop0: detected capacity change from 0 to 128 [ 553.384897][T20745] loop0: detected capacity change from 0 to 8192 [ 553.464831][T20760] loop7: detected capacity change from 0 to 128 [ 553.479351][T20760] bio_check_eod: 18956 callbacks suppressed [ 553.485409][T20760] syz.7.5445: attempt to access beyond end of device [ 553.485409][T20760] loop7: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 553.508174][T20760] syz.7.5445: attempt to access beyond end of device [ 553.508174][T20760] loop7: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 553.540473][T20750] lo speed is unknown, defaulting to 1000 [ 553.567113][ T8006] loop0: p1 p2 p4 [ 553.570908][ T8006] loop0: p1 start 4294967280 is beyond EOD, truncated [ 553.577714][ T8006] loop0: p2 size 590592 extends beyond EOD, truncated [ 553.585101][ T8006] loop0: p4 size 33554432 extends beyond EOD, truncated [ 553.596034][T20757] loop0: p1 p2 p4 [ 553.600140][T20757] loop0: p1 start 4294967280 is beyond EOD, truncated [ 553.602420][T20750] chnl_net:caif_netlink_parms(): no params data found [ 553.606930][T20757] loop0: p2 size 590592 extends beyond EOD, truncated [ 553.621451][T20757] loop0: p4 size 33554432 extends beyond EOD, truncated [ 553.636745][T20757] netlink: 'syz.0.5444': attribute type 2 has an invalid length. [ 553.670425][T20750] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.677634][T20750] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.690047][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 553.694996][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 553.700436][T20750] bridge_slave_0: entered allmulticast mode [ 553.716542][T20750] bridge_slave_0: entered promiscuous mode [ 553.724622][T20750] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.731806][T20750] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.739349][T20750] bridge_slave_1: entered allmulticast mode [ 553.748415][T20750] bridge_slave_1: entered promiscuous mode [ 553.774058][ T8007] udevd[8007]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 553.777277][ T8006] udevd[8006]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 553.785188][T20750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.808659][T20750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.828966][T20750] team0: Port device team_slave_0 added [ 553.835813][T20750] team0: Port device team_slave_1 added [ 553.858333][T20750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.865343][T20750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.891752][T20750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.903287][T20750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.910269][T20750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.936378][T20750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.970692][T20750] hsr_slave_0: entered promiscuous mode [ 553.977425][T20750] hsr_slave_1: entered promiscuous mode [ 554.043450][T20750] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.054101][T20750] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.132386][T20750] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.142705][T20750] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.245657][T20750] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.256230][T20750] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.277834][ T8006] loop0: p1 p2 p4 [ 554.278003][T20799] netlink: 'syz.3.5457': attribute type 1 has an invalid length. [ 554.282795][ T8006] loop0: p1 start 4294967280 is beyond EOD, truncated [ 554.296252][ T8006] loop0: p2 size 590592 extends beyond EOD, truncated [ 554.310009][ T8006] loop0: p4 size 33554432 extends beyond EOD, truncated [ 554.315319][T20799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 554.334582][T20797] loop0: p1 p2 p4 [ 554.351396][T20797] loop0: p1 start 4294967280 is beyond EOD, truncated [ 554.358314][T20797] loop0: p2 size 590592 extends beyond EOD, truncated [ 554.377977][T20750] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.381502][T20797] loop0: p4 size 33554432 extends beyond EOD, truncated [ 554.388491][T20750] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.409729][T20797] netlink: 'syz.0.5456': attribute type 2 has an invalid length. [ 554.485072][T20799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 554.494943][T20799] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 554.507702][T20799] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 554.547824][T20750] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 554.565130][T20750] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 554.579873][T20750] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 554.592804][T20750] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 554.643005][T20812] EXT4-fs: Ignoring removed orlov option [ 554.648792][T20812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.662791][T20812] ext4: Unknown parameter 'subj_role' [ 554.668405][T20813] loop4: p1 p2 p4 [ 554.673665][T20813] loop4: p1 start 4294967280 is beyond EOD, truncated [ 554.680649][T20813] loop4: p2 size 590592 extends beyond EOD, truncated [ 554.706791][T20813] loop4: p4 size 33554432 extends beyond EOD, truncated [ 554.716376][T20750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.734123][T20750] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.749918][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.757061][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.774715][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.781791][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.787653][T20809] netlink: 'syz.4.5461': attribute type 2 has an invalid length. [ 554.894395][T20750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.960333][T20856] netlink: 'syz.4.5473': attribute type 1 has an invalid length. [ 554.974489][T20856] 8021q: adding VLAN 0 to HW filter on device bond7 [ 554.994867][T20856] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.002108][T20856] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 555.014588][T20856] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 555.068837][T20750] veth0_vlan: entered promiscuous mode [ 555.072103][T20750] veth1_vlan: entered promiscuous mode [ 555.097274][T20750] veth0_macvtap: entered promiscuous mode [ 555.097369][T20862] ================================================================== [ 555.097406][T20862] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 555.097449][T20862] [ 555.097455][T20862] write to 0xffffffff86a76a88 of 8 bytes by task 20750 on cpu 0: [ 555.097474][T20862] data_alloc+0x310/0x390 [ 555.097505][T20862] prb_reserve+0x8d7/0xae0 [ 555.097537][T20862] vprintk_store+0x54a/0x910 [ 555.097566][T20862] vprintk_emit+0x1a4/0x600 [ 555.097595][T20862] vprintk_default+0x26/0x30 [ 555.097627][T20862] vprintk+0x1d/0x30 [ 555.097646][T20862] _printk+0x79/0xa0 [ 555.097662][T20862] __netdev_printk+0x310/0x370 [ 555.097686][T20862] netdev_info+0xa6/0xd0 [ 555.097716][T20862] __dev_set_promiscuity+0x1fb/0x3f0 [ 555.097748][T20862] __dev_set_rx_mode+0x113/0x160 [ 555.097785][T20862] dev_uc_add+0x8d/0xb0 [ 555.097803][T20862] macvlan_open+0x2f1/0x590 [ 555.097830][T20862] __dev_open+0x321/0x560 [ 555.097859][T20862] __dev_change_flags+0x13e/0x400 [ 555.097949][T20862] netif_change_flags+0x5a/0xd0 [ 555.097968][T20862] do_setlink+0x905/0x2940 [ 555.098002][T20862] rtnl_newlink+0xea4/0x1370 [ 555.098028][T20862] rtnetlink_rcv_msg+0x64b/0x720 [ 555.098056][T20862] netlink_rcv_skb+0x123/0x220 [ 555.098082][T20862] rtnetlink_rcv+0x1c/0x30 [ 555.098108][T20862] netlink_unicast+0x5c0/0x690 [ 555.098130][T20862] netlink_sendmsg+0x5c8/0x6f0 [ 555.098158][T20862] __sock_sendmsg+0x145/0x170 [ 555.098188][T20862] __sys_sendto+0x2b2/0x380 [ 555.098206][T20862] __x64_sys_sendto+0x76/0x90 [ 555.098224][T20862] x64_sys_call+0x29a7/0x3000 [ 555.098250][T20862] do_syscall_64+0xc0/0x2a0 [ 555.098278][T20862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.098300][T20862] [ 555.098306][T20862] read to 0xffffffff86a76a88 of 16 bytes by task 20862 on cpu 1: [ 555.098327][T20862] _prb_read_valid+0x1bc/0x950 [ 555.098362][T20862] prb_read_valid+0x3c/0x60 [ 555.098388][T20862] printk_get_next_message+0xea/0x560 [ 555.098422][T20862] console_flush_all+0x2cd/0x6c0 [ 555.098455][T20862] console_unlock+0xa1/0x280 [ 555.098486][T20862] do_con_write+0x29c8/0x2a30 [ 555.098513][T20862] con_put_char+0x38/0x60 [ 555.098535][T20862] tty_put_char+0x68/0xc0 [ 555.098553][T20862] do_output_char+0x4de/0x500 [ 555.098581][T20862] n_tty_write+0x8fe/0xc20 [ 555.098608][T20862] file_tty_write+0x378/0x690 [ 555.098641][T20862] tty_write+0x25/0x30 [ 555.098669][T20862] vfs_write+0x5a6/0x9f0 [ 555.098704][T20862] ksys_write+0xdc/0x1a0 [ 555.098723][T20862] __x64_sys_write+0x40/0x50 [ 555.098741][T20862] x64_sys_call+0x2847/0x3000 [ 555.098769][T20862] do_syscall_64+0xc0/0x2a0 [ 555.098794][T20862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.098814][T20862] [ 555.098818][T20862] Reported by Kernel Concurrency Sanitizer on: [ 555.098833][T20862] CPU: 1 UID: 0 PID: 20862 Comm: syz.4.5473 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 555.098872][T20862] Tainted: [W]=WARN [ 555.098880][T20862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.098894][T20862] ================================================================== [ 555.100051][T20750] veth1_macvtap: entered promiscuous mode [ 555.428783][T20750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.441816][T20750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.453865][ T4351] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.462861][ T4351] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.472408][ T4351] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.484996][ T4351] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0