last executing test programs: 2m37.407825117s ago: executing program 4 (id=508): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000002000000000000000001000730139000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8}, 0x94) (rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x4d5, 0x33}, @in6=@private0, {0x3}, {0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x7fffffff, 0x100004}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x80, "c3b492bbc504c3f0977953ad067f30eac0"}}]}, 0x150}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) pwrite64(r0, 0x0, 0x0, 0x100000000) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x3}]}) 2m37.279001865s ago: executing program 4 (id=513): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200000effffffffffff86dd6a01a604009c1101fc010000000000000000000000000000ff0200000000f5ff00000000000000014e234e20009c9078"], 0x0) 2m37.224776108s ago: executing program 4 (id=515): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) socket(0x11, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001100010029bd700000dcdf2500000000", @ANYRES32=r2], 0x20}}, 0x2000e844) 2m37.011061691s ago: executing program 4 (id=519): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x6, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000340)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@abort}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0xd, 0x80000000000f5, 0x5, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x30, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x2, 0x0, @multicast1, {0x5, 0x4, 0x0, 0x2b, 0x0, 0x67, 0x5, 0x29, 0xff, 0x40, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}}}}}}}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x6, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000180)={0x0}) 2m37.006948511s ago: executing program 4 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604070001010000000000000002000600030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f0000000402"], 0x58) close(r3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x1, 0x80, 0x6, 0x100000001, 0x5]}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8}, 0x800, 0x22, &(0x7f0000000000)={0x4, 0x7, 0x8001, 0x6, 0x1}, 0x8, 0x46f1, 0x8, 0x0, 0x5, 0x1, &(0x7f0000000100)="1ed19d93e99c050fcd6b43cda01a9ab5e693ed4951572c948c61b003268fb8f2f5769cce2ebc3a3ebf509ae93262d29ffde3d79ec063760ff4127414f46d9fec0177f48af7fbc98f7282226e69a338625a3ff73671bf1e9217deac364b315d"}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030009130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) 2m36.351940969s ago: executing program 4 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe80000000fffffffffffffff50000aaff020000000000000000000000000001"], 0x7a) 2m36.289033703s ago: executing program 32 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe80000000fffffffffffffff50000aaff020000000000000000000000000001"], 0x7a) 2m11.491772032s ago: executing program 3 (id=1115): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x2c, 0x52, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x400}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4042844}, 0x20008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0xfffffffc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x28c3c763c3884e76}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x30, 0x26, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff1, 0xb}, {0x9, 0x18}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004018}, 0x804) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x28c3c763c3884e76}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x30, 0x26, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff1, 0xb}, {0x9, 0x18}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004018}, 0x804) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) geteuid() (async) r7 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) setresuid(r5, r7, r8) clock_gettime(0x0, &(0x7f00000004c0)) (async) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000500)={{}, {r9, r10+10000000}}, &(0x7f0000000540)) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@deltaction={0x12c, 0x31, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8000) socket$netlink(0x10, 0x3, 0xa) (async) r11 = socket$netlink(0x10, 0x3, 0xa) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000840)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f00000008c0)=@raw=[@generic={0x2, 0x9, 0x9, 0xb, 0x4}, @call={0x85, 0x0, 0x0, 0x40}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @generic={0x7, 0x5, 0xa, 0x8000}], &(0x7f0000000900)='syzkaller\x00', 0x40, 0xfd, &(0x7f0000000940)=""/253, 0x1e00, 0x1, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[r2], &(0x7f0000000a80)=[{0x3, 0x3, 0xf, 0x7}, {0x4, 0x5, 0xf, 0x7}, {0x0, 0x5, 0x7, 0x9}, {0x0, 0x2, 0xe, 0x688e1a972a28de9b}, {0x4, 0x1, 0x4}, {0x5, 0x3, 0x0, 0x7}, {0x4, 0x4, 0xf, 0xb}], 0x10, 0x5}, 0x94) (async) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f00000008c0)=@raw=[@generic={0x2, 0x9, 0x9, 0xb, 0x4}, @call={0x85, 0x0, 0x0, 0x40}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @generic={0x7, 0x5, 0xa, 0x8000}], &(0x7f0000000900)='syzkaller\x00', 0x40, 0xfd, &(0x7f0000000940)=""/253, 0x1e00, 0x1, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[r2], &(0x7f0000000a80)=[{0x3, 0x3, 0xf, 0x7}, {0x4, 0x5, 0xf, 0x7}, {0x0, 0x5, 0x7, 0x9}, {0x0, 0x2, 0xe, 0x688e1a972a28de9b}, {0x4, 0x1, 0x4}, {0x5, 0x3, 0x0, 0x7}, {0x4, 0x4, 0xf, 0xb}], 0x10, 0x5}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000bc0)={0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000d40)={&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r12, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [r2, r3, r13, r0, r2, r11]}}, @rights={{0x18, 0x1, 0x1, [r11, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r8, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r6}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r14, r5, 0xee00}}}], 0xf8, 0x80d0}, 0x8000) (async) sendmsg$unix(r0, &(0x7f0000000d40)={&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r12, r5, r6}}}, @rights={{0x28, 0x1, 0x1, [r2, r3, r13, r0, r2, r11]}}, @rights={{0x18, 0x1, 0x1, [r11, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r8, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r6}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r14, r5, 0xee00}}}], 0xf8, 0x80d0}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0xd8, 0x1a8, 0x0, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000d80), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x43}, [0xff, 0x0, 0xff, 0xad8180adfe1aef52], [0xff000000, 0x0, 0xff, 0xffffff00], 'gretap0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2e, 0xff, 0x2, 0x1e}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x8, 0x8, 0x2}}}, {{@ipv6={@mcast2, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0xff000000, 0xff0000ff, 0xffffffff, 0xffffff00], 'team_slave_0\x00', 'ip_vti0\x00', {}, {}, 0x4, 0x0, 0x4, 0x10}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x6, 0x6}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x3a, 0x7, 0x6, 0x1}, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "4ad6", 0x1}}, @common=@srh1={{0x90}, {0x73, 0x64, 0x0, 0x4, 0x7, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff, 0x0, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xff, 0xff000000, 0xff], 0x208, 0x100}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5ac2, 0xfff, 0x4, 0x6, 0x85, 0x9, 0x1, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) syz_clone(0x1000000, &(0x7f0000001240)="7dd3240defefcf3006afef2146269649a37b8ca444174c836e307aef20f8130a512e915d3a34cbc024d4c5fdfa1225e35602905133cdfacf15bb55c960d22f9c912668bfa637b7f6c668d815a30c408b0fee533124c5ec5eacae22fdbf8941b242cb4f5267565ad3c120a595752b62bea3d265a881c3ea9c5951b76f6c51999a6bc3610007a9b6dd4dd505747aa5edbd30793cf2d5b640d354b8d8244904adadd92810a5788e", 0xa6, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)) (async) syz_clone(0x1000000, &(0x7f0000001240)="7dd3240defefcf3006afef2146269649a37b8ca444174c836e307aef20f8130a512e915d3a34cbc024d4c5fdfa1225e35602905133cdfacf15bb55c960d22f9c912668bfa637b7f6c668d815a30c408b0fee533124c5ec5eacae22fdbf8941b242cb4f5267565ad3c120a595752b62bea3d265a881c3ea9c5951b76f6c51999a6bc3610007a9b6dd4dd505747aa5edbd30793cf2d5b640d354b8d8244904adadd92810a5788e", 0xa6, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='./file1\x00', &(0x7f0000001440), 0x10002, &(0x7f0000001480)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout}], [{@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_gt={'uid>', r5}}, {@dont_appraise}, {@euid_lt={'euid<', r7}}]}}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x48, r15, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xba79}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4810) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000001700)) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000001740)=r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 2m10.640135372s ago: executing program 3 (id=1143): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 2m10.555079817s ago: executing program 3 (id=1147): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@init_itable}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3098864, &(0x7f00000003c0), 0x9, 0x56a, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) fallocate(r1, 0x20, 0x4000, 0x8000) 2m10.290705722s ago: executing program 3 (id=1157): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x4) truncate(&(0x7f0000000140)='./mnt\x00', 0x2fffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008010, &(0x7f0000000440)={[{@nodots}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@check_strict}, {@dots}, {@nodots}, {@nodots}]}, 0x1, 0x11b2, &(0x7f0000002440)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002100df4c2abd700000000000020010000000000100000000140011006e657464657673696d30000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x240000ef}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000001c0)}], 0x3) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x2, @local, 0x4e22, 0x1, 'dh\x00', 0x4, 0x0, 0x6b}, 0x2c) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)=""/95, 0x5f}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0xd) 2m9.984158301s ago: executing program 3 (id=1164): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfffffdfd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x3301, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x8, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000440)='syzkaller\x00', 0x1, 0xffd, &(0x7f0000000cc0)=""/4093, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m9.48301345s ago: executing program 3 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000001100070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 2m9.457211021s ago: executing program 33 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000001100070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 1m21.152303845s ago: executing program 6 (id=2218): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val, @void, @eth={@random="c98f0b33dc4c", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x6, 0x0, @void}}}}}}}}, 0x32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0x20, 0x1418, 0x100, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4008045) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 1m21.143388896s ago: executing program 6 (id=2221): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@generic={0xf, 0x7, 0x0, 0x3bb, 0x6}, @printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0x1000000}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 1m21.004301794s ago: executing program 6 (id=2222): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000200000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 1m20.964185647s ago: executing program 6 (id=2226): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000007c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@errors_remount}]}, 0x82, 0x557, &(0x7f00000008c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f00000000c0)=""/107) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xe7, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0000000000008100000000196c2ce15cb6a7c74bb60e95d0bb7eddd3a71d242c5394fadbe25fd806aa902fad410bf1e88f4c0a69c7a5c0965d926e624c83e22af9780df40500403446e60d8102a940530b114883e82e72f3edd7a444b7f0c3610273e614e24e241f71893299ddb414a27e7f09e3d8772ab4fe56e8d37ce06f131bfeea3e57857960fa4fa701c722da337c7a684f7d05ccdc12e10d8a81f10f96bb041129dd659203043fb99ef745d1eb8405b6f1d7ad9e6eed8ed7bd42a5ca423971964a67b302fdf250d92710c375e50000403cf0758ef7bec976a083884d67b8"], 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000190001000000000000000001021800000000fd000000000008000100ac141400040008"], 0x2c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_setup(0x8, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) gettid() socket$inet(0x2, 0x3, 0x2) r5 = dup(r1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0x6, 0xfffffff9, 0xc1, 0x200, 0x9, 0x2, 0x739}, 0x1c) write$UHID_INPUT(r5, &(0x7f0000002080)={0x8, {"a2e3ad21ed0d09f91b5f090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f09006d090890e0878f0e1ac6e7049b336c959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3c2b802181acfc90c41bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e74130d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b12d94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14007693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 1m20.777778767s ago: executing program 6 (id=2232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000500aaff020000000000000000000000000001"], 0x7a) 1m20.316302814s ago: executing program 6 (id=2244): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}, 0x8000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1m20.298327675s ago: executing program 34 (id=2244): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}, 0x8000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 1m4.377933736s ago: executing program 5 (id=2612): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000493491f67dc15cc52a8a08cbbf20000ff020000000000000000000000000001e000000200"/62, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a00020034000000000000001400"], 0x110}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1m4.250558084s ago: executing program 5 (id=2615): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='t'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x2000000000000021, 0x2, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007000000000000000493491f67dc15cc52a8a08cbbf20000ff020000000000000000000000000001e00000020000000000000000000000004e20", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb0c0015005b07"], 0x110}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r1, &(0x7f00000006c0)="2cd8", 0x2) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1m4.117660981s ago: executing program 5 (id=2619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000030a01040000000000000000020000090900010073797a310000000008000b4000000003280008800c00014000000000000000050c00024000000000000000080c00024000000000000000025c1800000e0a01080000000000000000010000091c180380900300805c000280040001002400028008000340000000020800034000000003080003400000000408000180fffffff82000028008000340000000030900020073797a310000000008000340000000020e0001006d1505214e5ab78ab2a100002c000640c837e8728bb8b1151a5efb8a1484dfa003f84428c1243c68ee2b24a82eeb3d33579c6564b3855447f802028014000280080003400000000108000180fffffffbc2000100698e69793d89d8158145a7eb50d0710970c50006b2cbbb37969c8a6a4d9655e80c3b9593a95d169dfd57ddfb95430f1990f51ed7111cbcdfbf2396851ed128e94b9265c640f95ee6195a5ea9c197e897d0dc0b0a9be33b134c5c261379af2f518ebc84dee5d4f28a9ec9be6b8699ddb3f5ac872dc2bcf6bdd7ba1a3ffe5772a94a72451f67ed9eb76d3a16352433cc77a42ec7f79f1ca6583c8fa857faaf3d71e1b70e3719b94322c9bb561b1c8d5e9802b4837d47dd0b540352e89620620000000101001db2f4fd9c7328400fafde744248c46b258c2597bca3e11ba8e389459bc8dffe462c32a909d3e2a8b5282340a6951f1cc81c4f1c6817eeac550808377214442fc1e85ef4e4b69c3cd082b92a94bc97cdd8fae80e440c7c23c3eca2c24dc149d86e61c5538078efeda6771b109ccace0acaba5edc91e5cc2032bd835f1a3b511b29b2d362817e067635ea567df6645ab0edd9d0c56507bdf3a8e7cf586e6297f3335a6ae1dde1bfd56f50c2e7462b519ad4a4bff733025974984e6ee66757fb324843c276ed006c868ae121201b7124c26df2750c3cb6b9d9fbd876ee182f1eb41f6dfa9d1564fa6390ef758108533b197423fd762ecfe939dd37137b240002800900020073797a30000000000900020073797a30000000000800018000000000340002800900020073797a300000000008000180ffffffff080003400000000108000180fffffffd0900020073797a32000000001200010042b2265055625a2e8c01bf8ffd3600000400010020000100d8ac8442127a6e55f38487d5d599f1e589b557c7d4a21a3030ac3b078b0001002e8f2805c5ad5de19f9a61d3be42a1525f24169366e1eaa28a86576873e142ecef0b487ce751333d43d3200bea4d158ea2edff707d5962045f5017b9b6888d7cc405829b10006b732df08b07f88ef1c04f5975fc8b393a743d4f6d0efc4f6608646e3f2f64888ea711d4dbddc0a4ce4dfe133416bd097ba0c5c0415bdb98ed4fb5704299906f0a000c00044000000000000000043c02008008000340000000000c000540000000000000000314010280230001000a791bc97d62bdb4c973d0a48fad8265243bf5292816d3cc62917b024b99eb00ab00010008d639188b1f7d9949483079c5e8c5059c9e531840ba0dfbc6617d1d6e3b22afa56ceb2ede9d4b89335321527f5b4f12add65da703bbc675c67cacfda5ca63ed8a20f1086aacf29d89197b27417cd88e316598896384270f11af1a3f4ef56d28710348bfe09bd8a34d91ef5b93e0b2dda797cbffa05d3fd7c32a7af78bcb09f6267002bf9cab5f69605ec1e39719a49a7c93713fc355451be12d30cecd4e8e73631a566414a8ee00040001000c00028008000180fffffffd280002800800034000000003080003400000000108000180fffffffb0900020073797a30000000000700010048ec2300900001801400028008000180fffffffc080003400000000477000100ebb0147d3c1605e4d665d4e5816967b8640d3692f5f9415514aab1c56e80695aeade5066388ebf623d257c3f2eb9fc9180c396eb595b9fb97d291b684b0482d33fbb48763f77b9dc0cc722ce355483aa7ba979e7f087ff30642522ca865d4b0120039e4eb08fdafe76c068abafd12b3b3c43ca003c000a803800028008000180000000000900020073797a3100000000080003400000000408000180ffffffff0800034000000001080003400000000230000b802c0001800c00010062697477697365001c00028008000340000000000800064000000000080006400000000108000340000000000c000540000000000000166b04000080f400008004000a800c00044000000000000010006c000b80100001800a00010072616e6765000000380001800e000100636f6e6e6c696d6974000000240002800800024000000000080001400000080008000140000000060800014000000101100001800b0001006f626a7265660000100001800a000100696e6e6572000000730006402b9e3c10fe87207a1b24dc4020c6cc6a19d3240032865b70f87b4c21f9ee856a0db376c7248819990a0fe48cfda1459aee6ebf87cabef3675c619adc7038851ed874c1738e1826d8e9ffa0140b5baf574fac1a4ba35a3cd985b7e70e21fc950242916eeeb6754625c06b1ac71e9984005011008076000640a707a5be326c570bf671aea66eb505e28d179b17a3dcde08e0acebfc2974cf4f4e3fa65abbc98b3c933cb041dd3ce8b22a05f43ece4cc779f3806232e1a2031e36c3da88aeabdc51f17cda94b1a9440c4e5e5871b016d07e0119d4abac1ce36aba192550e777da258b0d3dd347dd048a86bf00009810018036000100bed1ebcff6381ab6bbd21ffd0de8ed100270413ef3d7ddb8f837d87f1252a3c8b92780d698c5aea8ed6ab1325675fc5545670000041001000ed691e4719b4d0012b24a4a15911e94120a882b918637d5d45b2d8dce5d13f72c201b357b860607c33070ae4599194ed93c5f5c7686328588405eb2b612f2c3ad6402e74727f459c081103251f54db1c90803b6560568bc67d38dd7bf01b0ce252d80956aeb40bac5321a65b8d5e59ef8778e069ce63f9d0ca1e6832b5460ff0605503f82100abc84be58f95aee3688829a8eb7976e8dded27f70eb688eb54e77ee71e9d3076213c6d6a99b2968bb2dfc8461064f43267d3931c8ce3d98138e9d25488b6a82e2036a7311955dd58db9bef8d4b3831b8cfeb1c6f2224ac8ffb05d84d5ceb722f39e8a2ced1497cf1d78c54c7097054b45e9c67ca1930d88f04ce5fe693953d191203286885080b81d01080e091840e193c94d33ac39d0809ed20ad92f10442a9046b96158ced3694b81b6b3ebda28e2e368a1a0a1a83463718d104ccb78824e6f32269c4cb9610e619fddf8085c2421acab41cfa20dc85338df1fb7bf78fc7bc6d4d72ef2275bb74a5324facf140a8309ca365b1c83eb75821fff18df7accd40f0e3a0c13969cc12d8720b8b041019814e610fbb6cebef37bcfa00faf8e45bef73fb8880d1af710955a0ca95ac9f4ca7811b9348cae7db67f5644a060400e30f0127962a6971d8cd7bae859efd3c8febf934547b0f94887da82f78d459b2c769bee319268f641818bda390c30b120a89ecd333cd63220e62d76e97563401606651994739884fdc7a2169ccc75435ededecef37a638cda0677c853100f85612d13529a3903a272ea365aa429d73cf9313a92b7fb9f4ca6b02144b98f33fd2dcbab9d902277396ee20c5ff8c17f21ee7fa4b59ab0509abd8ff270756fdd7af77121bf5e8b1ab79fe6e74ae9a8e250fe34519b2f04bcc1846faf7673402f4b9b118bcdfba60a611c04c35c5b5e755500ff5a974f98becaa88e84daec23a0f869f6f2d567212e07c40ba544d7a4c50594ad7b5e134660cc1ba7dfbb878d3fc5b535843d43d39a4484635577ced3a6fd264dcefcb460e6d1eb7e8cddc0399871e4d2bb43519d410ae87e0f5d1c8545dc09b9556e6ea17dd184f6cf03c8abf504b982bb64a4dcd7ff9adc132afa4b7cb2843c849e4a5c41d61c11553f3ce457e0c641e24942040fc06168c036c127c393a0ed2bc4188d5b4e6a719a94df7af88e5eedd0c5bfa50f371bc429e7912a26394972b5721931b684c25f2ef15d62fbd2f37f9fd73b2201d152da91fa7e7e871d5b8b3a6ff30ac4ea373eb8f22319b8277b8f7a0afc88d3902ad0f1652a5f1a582e7e7a2c6d9c4f3ec58e92d3a926d7f8a4703180339b5120d90a2e62d2f47fc41a16a133a40a2ff65afdebc5fc971cc2805b82528d056dbb8465fb03b557a14949beffba995f5686b906825490ad4d73d2355c0809c8f683921905ad95707b9a0af9b9cc3f086cfffe644db06dcc148a9a00f90ef77bbb74e11a51dbad2275e9ce31947599308a55b61a3258ca5b8b8be2744ffe01f0f45f62f3cb3e982bb81fdf85d42791f2fe58483cebb7c406c2ef0a3cdc5c5680839dcff64bd4a1102b1936fdbb030195d7301d493a135df46b3d3fae8b49e5b1b6b34c6475cabdd3a559b1d24e93519faedcd8caa3e40b8d03e84a6fded5a8f6ac36d46e985d1cfa55b258b62132069cd479414c15abf45e5c4724d91b0a4fe4d6bd20d1ed8a952948c5774826cb3184360fb0cb7aa3d1b06e77363bd6ffbfbfc2cedd4247d46ddfe71bf6d1f6b1574ac7f22b33dc6f43e5a23c5bd48bfa61a3c1738a7d63deb305034e722ccdaca0c8939f1217f3f1d03569e490fcce21ed6d0f310ba3a8255432d1a938155f0c545748d61cc0d5d968ece82a1f536fd74834750eb80c91012c7159b1d9b071035ee8c2e0ddeed18b78319d9df29ac926c5d3fde7d6589a083d09e3cca960ab4afed45208939ff9137f9614e49bf16260e0d895710c3174355ed9a6ef7ac44dd6a62787d2c5a2a4b1af15b46c9b941b9198616010449800640cce21a4d67633f662044417a86f0378d81589b4a0297be0d715d3f03d6a33a6d51b97a6bad94c353c0568991d4fc24bed90fb3c45161f61ed325588ea42c6f92259cdca0371abc90a84a9fa0c96356bed260663aa71dcf2392adaf1c31d9806ce5e3dd0bad501f997b0e186011d500d058afda7bea3ac0148f2e96caa4079c6e64ffa83fb322f732b1c636a2ef668a5bc71f55204ba68ed12c213cc3c17c38b300a3531e91f0d08379fbb2f153a6022ae79e42be735b97bcb556b54f9e39b67fcf3cba796ab66082e32d2fb4b240907d451937dcda26ea2c6b9483322e47aa636f480e3162f66fc916a2e4c8c3f8a3e91ea648964c9c24ec79b87eac690e13ddd673594f16fbbad8497b9a84d2f4fc46acebe2be0b2d38a77e5a1140df443a489032ebfb15c2c7c75af46f13a777e919a4058d754452332e6f2b9b5fd921a801f92e9ad0e94aa71019c0e2e538d26d18726421839e14653bfb7ba7d69a5f3516643d85f19cca4e28f0ea31c3ed8c88d642ba662aad6e050dd6e6e0258efa8e5364d5074f0e46edd857e02993724e34b7654c630bfd132ef33edeb41ad76cbd684a48dec24fa6bbf37d9b53e0018860771d3469106741a6eabf81246ac79191427b1c75657b4e259435ef47d6cecd46b9d66d85ca365cc54753e64de9ff3495e3aa6fbcb932dafc3f90e9065f3f8bde3931f1f9f368507af300679e6581e40b7b0ea9c3e3ad6cd2036897b64d9971c596e7a04272ebb968180817e8f01e7388cce4d9b678b8bfdd15ec9ed34b30608c33a9de8cab113bc0c550a215223aeaddc6a4130d29ba11cc9596ec57e57a244c995d4ff84412a2543d261ad53c653f232a0a8ca188e6dd7a95704ce63ec6c1dcb67eff7798894ac7cf863fee187727e9da8fcd1603bf70b1d5646078b511a3b95763289958b10465c10db07ecdbfe1e06a5431ec9a26a9a3d73dce8f7d7e2e2b9fc8b07385e01eda5e912cb785c981f5465afa40166076db11f8c7f1463fd861e9e255986fa04b52a4c2cca9ebde6b3babb97ead38fd3d9f871d9a993d5089906cf2ff9ff85fb1ac2860cdacc7cb783eeedc95108be448d3e4feb368e21b940ee3094158373f3519876a1de744775ff194c3a219bd395c3c5b3537dc9b30aef0cde61cb680afa2ec38ba7fc10182ead3fb8bb80fffa17104d778357ad91aeed3ec6cfca959c5df0e464e0598b0f38df2231cb68f1f4fdd7a9da8b0afa8315185d015ed3abcb4af74f8ef819db573011a6cf95afa9d5b511222b3e543859050319de00d326a65e29f20f0ffb051e6b9b5b2860df982a368147f81e095a7a02cfa52ce75b58aae8be5af42e5a519ccb3449fdd5eb210402e47db38d2f0a502425847f0b114fd747584b1f8d8fd7040be3bc6bef9a496a69e23ba84ec602c3a131290f81c8a9a5c1c20ce65c1a5609a0de1eab5d1c1dfaf1ba529c3b4bdae503bef5c1345a577dd8b338376131e3073acd68a0f8eb6d38564d95f76b1e4a611ce19c7f2496c5009fea390317311cbdfd6929b2da2d5e96babd27d11b0df008d612405ed75ab78401c74054f06aafcbd1659d28630d056b697e276ee04532232b914e9c36f297ac8b7e582b581a0be2bba2e6ab9dc65f37c83356187c2ccce25ff34b44b86060bd91c2662d4d9178e606e16e5a0ed36ec7c2288361d48d52a76335302f27e420c24f7953a8a571d0ae6c35704df700eac58291155fc29147bdba979b39f44e74b5b17edde0b16eb67ccfc2ce80516b4c46e364ae912718e1f23fa059eef5852659b1c5f216af3ba200e1a7d66d2d4b6b1440fe35e8ce54f239ec5adaa9b3957a1fe896a46568b3a773055824a46535c05feb8ad2c5b67695e08d586c8dfa7fe571ed809ac2c20adc3115d69c3469f82598d9975c13acab062556043859abd9b25ab17c4334ace889a78bc40009afe019fb1240162c8b7f8b690bc096323ee681f8bd01f4c94c558da82245dd88bed1c52d6f5032aba821ce16d1c781487605d159658cbefe158d45fb909eac07c5b85a78cddf3aea84fa2226d444a83e25a46fcbb8a78d64ba609d8a868566fc9718d91e9af953deb3a0f4e6c6c936cf21a3cc4cbdd1200e789ee977cf616631e89e2329c6d3aa1c35eac7bb80e9a0cf547711ab6fd673be8c2c364c8d9ac8b9cd8daf5cdbf8be11200ab5a4d087d4bec986f553d29af263421ff1bd6e3658af94d49a7d03654931947204cb9989d72fb5b40d07b736aa5f548e7aa0c34ac45b2744ea4f532829e888c4ce7d633ee51dfd139de75be57eb92e03b4a70374af9576c9d4a41504197f8087ce8d6681863463065df2ae4b77785e6e87c63673618f1dab1ed84653f95fe897b6a989bec4011f83d26517a9544addc5decc7ffb7a5b75d59c8b168d5dda0b05951c0dd1fd84617c3c5b3f0e332b5434c6f48c716c0b4c2a10d84adf156da9ed83c91bd4219dee2ec4659cf224abf9bf82b088ad74d49580db948014ea9d3b4581496b1ba61f91485bb5ec2d00f7adadd1cd9cee44afa2c23fd4d3f237484cdfd39982bec9f09eee50ffd52ea16482f0b822d941d4cbbeb44b78e5e8fab5f589ddac540a6f4dfe088a4bfce145fba04aeed38e670a299b02fbf06b66c7d1783580ba411d38bae04d9d9b14463fd9242bc5af2439ac13686828dde590ce4c0d203ca102de1d632bf0e9bc3ab969813227fad3e58a25ec692465497c81102deff44f141fa3015b0e031d0c58e015bb6ac4c8cb7f25f32efa451cacfd74bc00f5e4ea35d1b855263528304d085ac209c295ad21e00ddbac647b784f9c563abeaae09dd2b522a3abf2ce23cdda3ea962c23795a60ef95de06fb45c34b5cf9ecdcdc8d654780af5ebd966d941203e12ff2a804011e717226cd7ebc02894271884f2d0d4a512452d6953118ef77c6057f1a9e9695a1fe9ba6108780ceaf8290d540477d77eeb1010f56f8a00094a06f67254de01ac0dbb3b57eb2232501ea6fd7ae568056ebc2e365ea0adad6ac6df2454fdae820e540ad606488faa7993d25760e3d9cf9637f8f876995ebcfb78d8f4116cfeddabd75a8eb237c56ded2184ebfef336f3945cbdbadba1762c1d7f26e165bc6994135fe4fe29a0f852713481c89e8038412c0a6543f041972c78927b2dea04aa8ceea9804ecbf009cc455121d94290902214a267423fb3c26d279a13cf992d31a6d44517b1c15611a66921d49e91fa79e01f65d2fb7c64411a73dd0a1a7b92ab95564ff2656ac076f2f0ce7e181e05bf9d4ee3e59c84e914470037c8526db8b8c460177f51799463ead8d791cd01df2db2852f4086a990cddda9dd1dd5071386285f2c60e5a5764a1f801d34a331b8d5276cc7b4dbcda046d71f7e1e9eab28b735a25d00ded920df82815dfe287033d14805cd1efa74f5988f7fa73536da519bfba9d70bc4b72ae5d7a1e3728ee99a4aaa31b547a78cbac11069ce67808c49e20a81fb66e655dd9c67988347f7599b3c24d630989edf763d9367b7745bedc946e86665b779ac586974120860c83a0a404c8fcdc7e379bbd9c607ffbba30b698b63079ec753ab64190be9a8ab41be8d7c46c5774773bfc4741dff49378f0955c34560455801f5c180ed17e8990b10607de0660ea5199a93f1c3fa4a9088dbb4b3e07d5bbe9100ff6164e3567286fc4d558a7a82ba2a4447b731c41780f4903874d3c17f8c21f55eec0193797beba2cfeadaa06a214bbe0c508b40bf3034ceb2f8e70f84ea20b3b9606f6c4697a3917bfc5c48e88a6a1400028008000180fffffffe08000180fffffffe440002800900020073797a300000000008000180fffffffe08000180fffffffe0800034000000003080003400000000108000180fffffffd0900020073797a32000000002100064029c6e88ceab997425d1fc0c559a3f42290368b108910fd282290a5a9760000000800034000000003040006400c000a800400028004000280040000800900010073797a30000000000900020073797a310000000014000380100000800c000440000000000000000914000000090a0102000000000000000000000005140000001100010000000000000000000000000a57dcd3a147ba5e423c1c1642d5d6933d67e821b8ff91e87691b7a40ec7ffc7a1d7f496102749d746708981ccf33cc4fce75584a671be759010760eb279581e4635ce1dc2b0f72aa98063b32e81bf7ccd0e7b554da219b1463f6dfc7d9026157f743c375f069fe7f5397d45d8cdf12c26869ca2ce9339efe6a59ce8884059e9e91987322a5b9bbeab4144735f"], 0x18e8}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_writeback}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d5a000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=0x28) 1m3.686548846s ago: executing program 5 (id=2634): r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT], 0x3, 0x7dc, &(0x7f0000000d80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r3, 0xbc1a778fb6169fdd, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfff, 0x6b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d5}, 0x1) getdents(r1, 0x0, 0x58) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000007000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000006c0), 0x0}, 0x20) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x41, 0x0, 0xfffffffffffffe3a}, &(0x7f0000000500)=[{}, {}, {}, {}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030328bd7000fdffffff0a00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setrlimit(0xd, &(0x7f0000000bc0)={0x101, 0x3}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001600)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf22}, 0x0, 0x0, 0xf, 0x8, 0x4, 0x2, 0x400, 0x0, 0x1, 0x5, r5, r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100e3d61bbffedbdf25070000001400018008000100", @ANYRES32=r13, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r8, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe8ee}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x20000001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000040)=@newtaction={0x44c, 0x30, 0x12f, 0x20, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0xffffffff, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0x4a2b, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x9, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x103, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xe, 0x9, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x5, 0xb, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x8, 0x2b, 0x1, 0x8fe, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x801, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x6ab9, 0x0, 0x8, 0xffffffff, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7ffd, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x3, 0x2000007, 0x0, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x1000003, 0x1, 0x0, 0x5, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x84, 0xd44, 0x9, 0x6, 0x7fff, 0x1000800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x8, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0x12, 0x24b9, 0x8, 0xe01, 0x1, 0x3, 0xd, 0x8, 0x0, 0x7, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x2, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x9, 0x40, 0xfffffa0a, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x100400, 0x5, 0x3, 0x0, 0x797, 0x8, 0x2b, 0x2, 0x5, 0x10001, 0xffffffff, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x1, 0x10000009, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffb, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x9b7a0000, 0x82f, 0x77a, 0x80a, 0xfffffffb, 0x3ff, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0x9, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r14, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0xfff7, 0x1000}], 0x1, &(0x7f0000000100)) 1m3.460372769s ago: executing program 5 (id=2638): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xae6}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4801}, 0x94) 1m3.158757777s ago: executing program 5 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a300000000009000300020000000000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a030000000000004c0000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) 1m2.783654169s ago: executing program 35 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a300000000009000300020000000000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a030000000000004c0000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) 33.350237549s ago: executing program 8 (id=3258): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x44001) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x24}, @mcast1}}}}}}, 0x0) 33.276145374s ago: executing program 8 (id=3263): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="905d41"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40, 0xf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 33.240084256s ago: executing program 8 (id=3264): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty}, "341517c1b7df60c7"}}}}}, 0x0) 33.151313842s ago: executing program 8 (id=3269): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@jqfmt_vfsold}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x20005325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x380000000, 0x7, 0x8, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) dup3(r3, r6, 0x80000) bind$inet(r6, &(0x7f00000005c0)={0x2, 0x4e20, @remote}, 0x10) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000340)=0x7) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44089}, 0x850) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x11, 0x6}, 0x6d) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) r8 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) preadv2(r8, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 32.683713129s ago: executing program 8 (id=3276): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x2, &(0x7f0000006680)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x3) r0 = socket(0x40000000015, 0x5, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) unshare(0x60400) socketpair(0x3, 0x1, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000340)=@random={'btrfs.', 'GPL\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000640), 0x4) 32.011358858s ago: executing program 8 (id=3287): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x8, 0xffffffff, 0x23, @local, @loopback, 0x0, 0x7800, 0x1, 0x5c0d}}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) gettid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 31.98275205s ago: executing program 36 (id=3287): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x8, 0xffffffff, 0x23, @local, @loopback, 0x0, 0x7800, 0x1, 0x5c0d}}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) gettid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 3.056319211s ago: executing program 2 (id=3936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES8=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 3.055465111s ago: executing program 2 (id=3937): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x16) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r2, 0x0, 0x3}, 0x50) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$packet(r3, &(0x7f0000000280)={0x11, 0x8, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0xa7, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r5, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000a00)={0x2f, 0x202, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x6, 0xffe, "12fa6211d3123f0974b24454d03b72520c16be153a27ad33b47144473d2bfed29bc9136a037dc5383c84701b433f95e953a50265ed5db839fa2a6cfbdbd8cc0373ad0ac7ce63f8220b995e6cd75a910f430dc91c06238d1486fb13869fbccbf7824e956d76ea65341c4599011900fba07a3f8393a3fb7c7bdbb121de984b6ae610e5e16c078246855a104600d7a0bfdfcbbf621b8db6fd72d4e3ee31af665aa4aed963779cf651ec5cf03dfcc7c828944f0d4e5a1dfa265e7a7c792867dc6655fb82dbcbc9c3f406d2c15f17591a1bf9d275f095bbacbec3ddd12de5fe225023459b17bb018168f587d9e0fb1e1c5d749668d52df99910844272cdf4c1de3263a51285c6d7fadcba7b0eaccc81289298e98f0dff0837ccc09d04e860c445eabed1f400e53239bd37ffac5926bab605a66151c33b780c2accd40d78e83f95aea868387b54774b93d28628b5e9b08f8e39cef2454217bb5eb79748f26b0c2f907429c78b2d3f04aa175127b2998f416a8846ef2b298832822dfae0fabfaaf60d1d8b39242deff2e6a329322de44bdba9b3094e90abbae77339839f4639fd1fa937f066623f6aef010fe10081fa1a55fba406179e0e9253f28e062c4dd9108f940656175873c94d2e758225c10a6a8ec2cae63e3bf6911421264edea4d4ac50675b300cc0546741db3e1a1614c87dbe0c49172afde3840e13cd95a7b5eb15216ec17ac0d620137e55b888d08dc0f5b42ab62d8e1d2024dce0208b448e6874317418797b469424c8012fe4f80a821fc28c4c951cdb6d595f395c476d4eb90f589b1d7cefd86fe76b555a4204073923a56c60bd9550f846a5b637ca590c44500eaaa1343103185456c4d369db9dc3a77e819c8ae8dcc554ed385e88966eefc58d140551595a2ea74d6bbeb26bfc3dff3fe060c28e9e128aa82be1ce952e08bc18df1c6014165e0fb2097fd3e20c1d938e2fec44b9836963f803880bf48620b6e54d7df39c8414f8f7870ed3a02d67da0b2f0f46d9abfb6f45c90a27a3045955d575d2afc7aa4279d79a7b3795df7b746b2f321a93284d0a64b3af210948c42fd762bb227ba19ad9d5fa70bed2a47cb33eb6bdcec91af31b3adccf3401f8f49d5b0926390859e7e319e2b3e2ea5ce882902b478e69110140e38cde0111dd09a470e6d2e8add8ddefc155c13527686cd66ccc3186511cd109f8f097cc0ff8c91855091273425c27f22360314677258d6de3a6933042300c50211661d7523b6108923d53918acd0efe1125380be1bc28a5ca3476561494d23bd11a3fcc2a543cd2ade748993ee2165d1d7ab209837fde984b52ad0fa5562d1a6e6aa0c7c64d184c230259b3cfe7c36e0d0f54afbd8e1562206d936d1ec50d477b2582efcd5fd85de729bb486b079bed55e9f23c54885035ff887f213f736429ec111d1b7dcedc9b1ea320997dd2933c0c7494afa30362192a7b69d3c18933edcc64019c0cabb40c48450cd5263de3404aaf5ef5f60b63835f25f06474feebfb053f319286bf0839e9eb5b544ebe78421c21a6f515da5bc7b1b9fdfce6905ceb038fea68eb127e8e442d47f15c7130505eb078675acfed7e420c36a090638104d344ec76d5df9abfe1fc200e76d655d45250fb5ae2d45b2495ded3706cf8266d386d6ca6599bcc8041e8b0652e847c3e902c5c43d46477e13f0da5dee93629bc1455450b15c8cfed42ec86de12beab83df41d37b6489f597cec08d418f953bb0a66c98eb1dad53a37726bfecc74d6c5bb23ad7edec0b5f173d48eb49e77d91431836b7876a5d4568151be993379e8216326be4ff279a616bca0be8d91ce6368c4095808936c4ba4866a86f0657d5822b75db37a1ca7386c03b578be68022ac290954d602f94f6138f932d5b80eb778c3968076c671023474681c05ef7c9cc9ddf6cb43af3ed909332a6ddc799e806a32e5734ebc0c68c6bd4402fb110c4f8d6a2d2ee579604e6d498768453efa77479ae68627d7d2be622aea298a8a207717386031520c37eb78cb0a67c7804849e8e8c3faa3930ec671384c736e0282008d742e27f96b3c9d7ccdea5181e83b11294d1c459cbd31a335b393d51cc80f1e0ecc9a411925b7c69188d42251180f9e944dd5de787aa846531ed7ed7cd3819a883e75f106024128de0cff86e1292cfedbafbecb3f3b0649f590bac32b8fea64b8f081d332aa4d40e6856e24beb8c0df54449c95443e174c26dbb6f9158dcb651cfe50f7cb0501a3d16de9f7a0f6ed1b0f0212fb912b8b498560c17853152c72e064d4b39cf3944e9d521888b582c110d8d5528b7be6b2a0f334ae93409d02d26d3796e7105a68c1740e0251d7224eef90d71a8b23db85c3d2cc6f78ccb93de5734cd91719ad96dbf74b15467dd94898ba3359072667e793b32a850864ad11a534ec78ad638ea68d55b5669465cb74b350ec25a68e533b2a1bbfd920f2114bbc15fc9109bc719ccb6217b0b4e4939f64f3611d959bfbfa12ea2766a792be11360ccdba4284d11574c694078853ab57fdd8186ad235db67b9091d1aa465ca6056baef0504d65504d636377d40a13d4d95e89832544e973443d7b546fb654e4dfc90fbb1348062eb6bef9e0175e6ddda38c0ce3828e4b71060bb0fb5d44088747e5e2838ca83fc88d0b19a7caa0c8ab3af8913d0b9b3c38ef6b9685d0162d169f89c196ad214b1aa6de959dc1e99987385fde212ce88dbceee81b0668e375744fb189a2bf18e1c2be6fccbfe4531db70b5a809cd50dd8ab0ca4f60671a35fa751176b0ff9cb66440f1c6de976281032d7bd81a5fc66a6ff76c4a9ab862a5711b011e7d1a0b20eea1a874a3271e5fec899256fc83b9e08e2ffef54c413a3e040ab79c54926fa2d2e773def58f2d28db08fa1fcfc75ed5939887ac1307768ad5abe5720640633e7279e486f46e9b8ca0dc89a3d734a1c107f93a8aca0d9a09b15c5c6282d94b7a065dc6cbabd7981475ece24966d929af28a93e8ac68c7e496777637636c03f2a26dfee6cba9596fe6c864f2e1cf378058a457e606c5da739f7ef6ca00ae602640103757b278c1cb923b1bd3c38aeaf102cfdd148a053f2ab65fd90834edaddd38a7e9f5c6aa70784257254fd2a96bd1c1966b147bd44515a5d4e511a7dbd694472d84d1d68e91d9df70a4ee7c83b7a83690534257472d70084d59bb26f017021d3306c7a4deb8f84f460abd839093de7a5b27475e31cf4d89dd2fdde30139c66766a264a0b92be14879dc4ebf55bb9d68a659b9d64fef3da39813de6977c2aed7c21ed3d12a76c41fe89fbd297adceb67a9c95a3601561add85df18535e0f1125dd35b523a7ff12da91550bd7f187447751948ed32536a5625acf8af04a85efbc59c6fd2914edf29a1654f7be108f61a92dfe90c875ffb615ec2403e3321cacd0a607cb5deacffe5878cd705d25f359a9844db2ac123f26a071f41b8ee6d2e12fc97ec6f4a153ad0869ebe5ebc76be95e4ea39ae113fe88ff9a4d17c36f519b9a5ea184cc46850dc0e0cd765ea37712dd26891b67b694bef06efa667529b502b2dd6ef8d02930c6f740ad37ec53d8a4cefc2b21ce0db23e6c8ef7845042a985a128cae3f73294dcf49537a06ab81f1271741ba87b226c7b889991375ea92111e177b2b7934c77ff708b55958455ee69ae4e86c87f5744ddd5cffa779eca2cdbd58221039ca7f744d366ab4ee09eec080415cc9a89375bef53760b2a450efbb472ee8f83d7c607b455f1fcbc777627ef2934c4883da07d9b4d486d756bb444668947666dd7a22ec9c3ee7661873d4e2d2c745ea46c378b6b042e3ee5ade1dda3cf75f1086015a376857e969a792171c56bb3a21b3fbc85fa147e915f41ffba1e575d357f444a83e551648d2ee70aefaa3fe234a84aa6ca247cb7bade24ced9b723148e3b94397236fa0c42cdf1501ac7c29ff1f8fe1f43e726d048d2158a31114ca8e1e1dc4e86049581deda3dcc147b2c1c4d36c83c583ab1d9b6ef8c415c563ff655f2270cfc3bec3d880dcb165157b244ba1a0eb0bc804cca367c85ab67fbacb5063b97384f8413d08d8e0822a8a736fcc98f455bf58121f3349e401a55537ea68a6d43a52894593fc4ca7ff0ac545acca855d3b703ab4c69c056344a150fa13818a5b2b4648d73ed0596f038afac0052919c7f2dbcfc4f92f6d9bf864e63fa5229725c6b4a560c692a16e7352654f553f4c42d96cb15d1450996d4ff012e1f32b0cb302dbf100079765f6fc151633c45edfde53400a9c185786060f3b7c05047bd92931a95129d4a2807f41828734b70c72a5dc36022b8fe17c1a4c4413a814166f69a51bc4c5102b634a981738f5ff043d305cad7759ed299a2398f57bec9cd91098d4d4a192b8f500582f354298cc911bda8cbcbecaae6a3fd3770191435113d9a333f87b3c0ea0212d06e4026e7c7d6d4395966bc131b64ddd0b1a859dff1d0c0b1ea38fa2659a3af566f3cc6c79a4ef59fa020b12dfa672363a1129ddc1d843b924bb68436920f54bc12b3c34e2800980cf7924a5d6e5494511d14753e31662e4466729062fad1e768ab9e4289c6eca2b9a84aaddc17836f25d2e9993374d7dc9a255b1107cdf1810d0cee3a52e3baee6badb90c686deee213b437eabaa2b3c5a0140dc48847e6ffadaf10d434aefc29ca1e85a940dc3fd5e9d1bbe7f93c79374ff139e5a15f8890f31689bcfe236ca6b3104bd0caf252083463afcadc957f982d89a028da2c0180bd193997910e75eba04761c6d0d65d74d46caa774e0b04a5f71af2c5e8eda4955d5237eba4270a3bb98726ae9409cc17ad017f9cdfd9b9b322cf5dfc4df1e592a9f52cc4661d38a90d1a14fad3dd492fe0b2b57ccd1d9c76028bec1ceea6082239b4f8c4d2962792fc5edc034e7d1e94f0240e50785453a7c05c8ba62adafc6cc709c45b71f7b0ab8a39f7a493a78921f1cdff1cf914342057d23c93dda0d2036fc2374465dbcabb93add0978ad82425cb220c8f727b896da2d03b3ce96df4df1ab360483d4c3f22f36d104d578f11a685fc131b365e114885147482126ae3170b1026a14bfe0096de0b070b3aaae66d9ff444a8efaefe9cd462304c4a4141c1d985c6ec10ca8354cc2e2371ae529c627464e989ef4e9109064569ff0108de519cfceff5e805356269574dabb400af59599e8cb92d0b1da48d75c387a14a4e65a91080df9d23acbf7dfa34ecdee7941f21f1a3e6920716b5e64723307a23e2dc1344dc4235eedb3531de7886f382a33f9242c92de610305ad274129ced409feef3404ae6285f289cf13708aeb18fb8cd1e7f53945d52c87285c3341e0e3756ef813e94c6b73819c3d088936a8e44c445a482501361fa176cf74a2207398a2ce0488ee55ab773038665351a889b4e0255fc3f389e79937a8399760d733839668a42143e9cd21300daf0cfc2409995da18f9f4b96a2613ca9abc292c1ed93c2be37a7e3ea78caa9d6a3a9d6e98ba392355760170718ed4803378c9e2abb995423a0185391e38db686b178bfeaadb30dec82358d4e922513c7563a34ceefb4ca1926fe35b8aec89b1c0c4c9569e7a034272c948eb6d650cbbda392e131f18d06841385b9944f507e2c70d581e0416d7a8b738cdbc1a5d4a84c25024946164a8180081da3e7d54f04bf9e20922a6a6b9683ce072ed2acfd2024b6c4f334690a72252b23b43b9a195fbc58caabe07eb4757379246bb61d443ae1c5fbc95721086670e0aad5732a9898d13bbc35d7074481f2d0446ef6daf1b1ac3d2e0e"}, @pad1, @padn={0x1, 0x1, [0x0]}]}, 0x1020) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x6, 0x3ff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000700)=0x2cb, 0x4) sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0xa, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0xf}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x200, 0x70bd28, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x40083, 0x10}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_io_uring_setup(0x250e, &(0x7f0000000600)={0x0, 0xc741, 0x4000, 0x0, 0x3b3}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)) syz_io_uring_setup(0x234, &(0x7f0000000740)={0x0, 0x9def, 0x8000, 0xfffffffc, 0xf}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_io_uring_submit(r10, r12, &(0x7f00000006c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2}) 2.105098676s ago: executing program 2 (id=3962): prctl$PR_SET_KEEPCAPS(0x8, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x4008054) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1.958862555s ago: executing program 2 (id=3967): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000001000010429bd70000000000000ffffff", @ANYRES32=0x0, @ANYBLOB="02000200a80006003c00128009000100626f6e64000000002c0002800800030001010000060019"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x24008040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) 1.808611644s ago: executing program 2 (id=3970): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.676556642s ago: executing program 2 (id=3974): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x0, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xfd026, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0xec}, 0x400, 0xc, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x20) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) (async) bind$tipc(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x2, {0x0, 0x0, 0x0, r8, 0x0, 0x6200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000006d00000328bd7000fddbdf2500606d3066000000", @ANYRES32=r8, @ANYBLOB="41880000b938050008001b00c0ffffff0500100003000000"], 0x30}, 0x1, 0x0, 0x0, 0x8801}, 0x80) (async) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r8, 0x4, 0x8, 0x8, 0x3ff, 0x41, @local, @rand_addr=' \x01\x00', 0x7800, 0x8, 0x80000001, 0x10000}}) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=@ipv4_newaddr={0x70, 0x14, 0x200, 0x70bd27, 0x25dfdbfb, {0x2, 0x1, 0x2a, 0xfd, r9}, [@IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LABEL={0x14, 0x3, 'team0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_FLAGS={0x8, 0x8, 0x171}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'erspan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24044890}, 0x80) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@bsdgroups}, {@barrier}, {@minixdf}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") (async) r10 = creat(&(0x7f0000000240)='./file2\x00', 0x192) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000005240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a32"], 0xb8}}, 0x40408c0) (async) fcntl$setstatus(r10, 0x4, 0x6100) 1.457907214s ago: executing program 1 (id=3977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) 1.412908307s ago: executing program 9 (id=3978): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x4, 0x0, 0x4, 0x9, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty}, "341517c1b7df60c7"}}}}}, 0x0) 1.35341914s ago: executing program 9 (id=3980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x4) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 32) r5 = socket$key(0xf, 0x3, 0x2) (rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'vlan0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x0, 0xfffffffc}}) (async) sendmsg$key(r5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) (rerun: 32) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) (async) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7585) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 1.35317585s ago: executing program 1 (id=3981): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x15, 0x1, &(0x7f0000000100)='d'}) 1.234303417s ago: executing program 1 (id=3984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a300000000009000300020000000000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a0300000000000000000002004c000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) 1.215387808s ago: executing program 9 (id=3985): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000010201020000000000000000020000082c0001800c00028005000100df1c00000600034000000000140001800800010000000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x2004c800}, 0x4040) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xa}, 0x1c) r3 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r3, &(0x7f0000000240), 0xfdef) ppoll(&(0x7f00000001c0)=[{r3, 0x2200}], 0x1, 0x0, 0x0, 0x0) process_madvise(r3, &(0x7f0000000300)=[{&(0x7f0000000100)="b37048440e7253895fc71c4c0e5f9574ab4d4930d4f74a2579465ba56bf473f51d13a4c78b969721d8a25011783b8b761eafb0c6b418c423437ad514947320724e08778b6a29c803067498785c48d4f075919858a63da5ee9b67e59e2ad715ebb4ab6e1d92a055a1d90a01f6c582d1babfb0a816dea1ecfc5540868830bdfaab4268", 0x82}, {&(0x7f00000001c0)="19f4eeb99177c7edc20ac7d05e61cbfba83aa80a74f0b710240f0fc11c5ea1ffeec711a473d021474ff3376531991227a131fa6c85f1363c39b3ba96d6d6141b0845662713f716763f25198ef857160c1edf4e5498b55b2a292a75a47b73c1df09a56eda0605fbec387051d626e2edd8da82faa9b735735f8c3476fc06a6c6f162325a56ae19d564dbc623beb7a6ddf8be8619fef68dd4472dc8678fcb921e7b0f6008893848447c0322c39dcf7ac314b80bc623e6cc2bbcab5fe0925c72c9b8409515f7a1", 0xc5}], 0x2, 0xc, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_mr_cache\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0x15, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) preadv(r4, &(0x7f0000010440)=[{&(0x7f0000000040)=""/154, 0x9a}], 0x1, 0x47, 0x5) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60e400ff00403a00fe880000000000000000001000000001ff020000000000000000000000000001020090780900000060000000000011000000000000000000000000000000000000000000000000000000ffff7f00000117c1ff2bbd0100000000000000606b5dffa06254c23cf1f3ec639724aaf253d73a37874a73ccc14449ad77c57d6a6cc74ed7d6ace23c3da4f296982ebd59a42abfebca03000cea0b8df06b84e4069381ed80c0383ef2b2fe577b3bde4a80bda071f8155d5ab57d1c5c27fbfc2664d1e843515a81fb96fd914889379dbe8eeb58be6eb4f0f2e5d787578e843634b0d84d295d8dbdd6bc1d04903b0d9964ee0e50a1274f34a684f21be6514ce4fc959539ea2023415448c8f5cf951db4ac044db9a8a656d98500520626f7a976ff662b850fdc8df52eb0581ad990624070ee037d7de5fc2a9c60d49d47e46c620ce200ddbeb4764d0983160721b51c1a522ac11bde89005381d84271f42328ce845d0191ce712d38bda394d92131f75ee5f9af4f332db5df7e0cbdde6d1f5843840e0dd6e6217e7eae62b98c5c92feabb583c6add66b0e472c6bb06fdfd864dd1ee7b0c54054a7f37113b0a79481648998f3338cfc8ce3141944f64e67a4c9faaa6a0a31796e07445239c69fb2829e671d4b464f4e830bc79a02def8c6b90af8dcd05aa9963b033ff6600d015b369528b132c8b4246a1044c3cc83ec5adaa0c35e76368f3fd9b1404cd57a468e5443b40925c6ce59feaaf139c705109b5c3451c251bbffc6715a10de7fa3dfe6f0db754b9c13907f2be7411e64985299d213de8a569c06a2a867d7a79cf0943d272fd6c811941952142c41cdadffaddaa16b29b8a9b3d02d1be9670e03129f372e8de73ada12ed305b81406454e546b069ac1c951b5eea603f5e9e1951379eca5772de5016a2c3b6129c65695a7d86849e546b37911a145bd03b5f45d650c9a07f79b3480150f39164b5c4067b171c84fbf8afd61ecd33336f1e27558938024ddb8602794a5eb6662b020d392b1026b3982b3bf28672d24479e782322d5eb2b6b2997b608b12d8"], 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000000)) 1.131587333s ago: executing program 9 (id=3988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500feff050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.130825123s ago: executing program 1 (id=3989): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x4, 0x0, 0x4, 0x9, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty}, "341517c1b7df60c7"}}}}}, 0x0) 1.004233591s ago: executing program 1 (id=3993): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x1, 0xf06, 0xffffffff, 0xb4, 0x7f, 0x9}, 0x9c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff80ffffff00000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 979.403152ms ago: executing program 1 (id=3994): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@init_itable, 0x0}, {}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$eJzs3ElvHFUeAPB/te04zjL2ZNYsM+mZzAgLRBw764FDgkDKBQkJhMLR2E4U4iQoNlISWcRBKEgcQPkELDckPgEnuCBAHEBcibgipAj5ksABFarqatN2ub2l7cbx7yd151XVq37v31Uv/ZZuB7BpVbOnJGJHRHwXEb21zbkZqrV/7s9Mjfw8MzWSRJo+91OS57s3MzVSz1o/b3ux0V+JqLyRxN5ysd0T165fGB4fH7tS7BiYrBSpi8Pnxs6NXRo6ceLI4Z7jx4aOtiTOrE739rx2ed/u0y/efmbkzO2Xvvgoq29aHG+Mo6Yvf96y7BI6SnuqUZ37Xjb4//KrviHsbEgnndlzpX2VYdmyuza7XF15+++Njnyrpjeefr2tlQPWVJqmaXdp7+xn2XTaKElqJ6TpzRR4CCTR7hoA7VH/oL83k41Up0bK4+CH291TkY+AsrjvF4/akc58BFvtq42Nutao/L9GxJnpX97NHrHgPAQAQGt9cipiW9HvqD9qRyrx94Z8fyrWhvoi4s8RsSsi/lL0X/4Wkef9R0T8s+GcHctYBajO2y73f77pKRKN3dWWyfp/TxRrW3P7f7M17+sotnbm8XclZ8+Pjx0q3pP+6OrOtgfLLz07rfbpU9++06z8akP/L3tk5df7gkU9fuycN0E3Ojw5/KBx1929mb+xN8rxJ9GZ1FMRuyNizypeP3vPzj/64b5mx+fEn8VZiv/t5i/euYoKzZO+H/FI7fpPx7z4o1j/S/L1yYuvDExcu/74+cb1ycHjx4aODmyN8bFDA/W7ouzLr289WyRLw4hFrn+9aazpQlp2/bcteP/Prlz2ZanZ9dqJlZdx686bTcc0q73/tyTP5+n6+uzV4cnJK4MRW5Lp8v6h38+9OtwzJ38Wf/+Bhdv/rohf3yvO2xsR2U38r4j4d0TsL+r+n4j4b0QcWCT+z5/838vNhpBLx7+2svhHV3T9myVOfhWx8KGOC599XCr4rWop/q5odv2P5Kn+Ys/o8OTWpeJarKaNiQd+AwEAAGAD2J/P0yaVg8VE046oVA4ejNg+O4MyMfnY2cuvXhqtzef2RVelPtPV2zAfOljMDWfb2VlDDdvZ8cP5vHGapmlPtp2N38d3tjd02PS2N2n/mR/KP2kBHjYrWkdr9os2YEOa3/7vLPvM1n8hA1hfLfgeDbBBaf+weS27/a/Vr+CAtlmo/d+IuN+GqgDrbKH2/0Jpz8l1qQuwvoz/YfNaffv3ZQDY6Hz+w6a0rB/JryKx6/QieZLOtSm0eaISi/8VgL6I+p56n2bxF/y+EtGaGna0NNKeOde0smCerdGKsqKyZJ7OFfwhhvVNVP4Y1agluiNiibt39ma7UU9cX+uK5Y3gg/b+7wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDgfgsAAP//RUTTKw==") syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000f00)=[{0x0, 0x0, 0x2}, {0x1, &(0x7f0000000140)=0x64f, 0x82}, {0x90ab, 0x0, 0x2}, {0xb, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0xc3}, {0xffffffffffffffff, 0x0, 0x82}, {0x7fffffff, &(0x7f0000000440), 0x2}, {0x8001, &(0x7f0000000480), 0x82}, {0x6, &(0x7f0000000500)=0x5, 0x82}, {0x7, &(0x7f0000000540), 0x82}, {0x0, 0x0, 0x82}, {0x1, &(0x7f0000000640)=0x3a800, 0x2}, {0x5, 0x0, 0x82}, {0x7, &(0x7f0000000300)=0x6, 0x82}, {0x2, &(0x7f0000000900)=0x5, 0x2}, {0x2, &(0x7f0000000980)=0x4, 0x82}, {0x0, &(0x7f00000009c0)=0x6, 0x82}, {0xbf9, &(0x7f0000000a00)=0x9, 0x82}, {0x1, &(0x7f0000000a40)=0x4, 0xe3180fd48a96849d}, {0xe, &(0x7f0000000a80)=0x4, 0x2}, {0x4, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x60, 0x0, 0x82}, {0x8, &(0x7f0000000c40)=0x2, 0x82}, {0x9, &(0x7f0000000c80)=0x8001, 0x82}, {0x28, &(0x7f0000000cc0)=0x1, 0x82}, {0x9, 0x0, 0x82}, {0xfffffffffeffffff, 0x0, 0x2}, {0x1, 0x0, 0x80}], 0x1f, 0x0, &(0x7f00000013c0)={0x0, 0x3938700}, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000100)={'system_u:object_r:ld_so_cache_t:s0', 0x20, 'root\x00'}, 0x28) r2 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000880)) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) setuid(0xee00) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) 728.386287ms ago: executing program 7 (id=3999): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200000effffffffffff86dd6a01a604009c1101fc010000000000000000000000000000ff02000000000000000007ffffff00014e234e20009c9078"], 0x0) 724.076597ms ago: executing program 7 (id=4000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000011008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 671.59387ms ago: executing program 7 (id=4001): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030001001000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2d}, 0x94) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local, 0x3f}) 608.194234ms ago: executing program 7 (id=4003): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00024800bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000023000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 545.229787ms ago: executing program 7 (id=4005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') fchdir(r3) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/156, 0x9c) r4 = geteuid() statx(r2, &(0x7f0000000180)='./file0\x00', 0x100, 0x400, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) pread64(r6, 0x0, 0x0, 0x5) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1b0026, &(0x7f0000000500)=ANY=[@ANYBLOB="7432f42c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB="4f328a60a2d84a41a97a439ea25d0a4c79cd947a1a0459a7cb7e3d921e23d9eb76e8410f4ce76c8fe1e7ff4f4a9d8fc785e21382417e431a81971163521ba52224d92a664dd91dcaa4d910ad165ea4ac54a7d3a189fbd84c814edb1cf1da282bdd5cadc80c07e4d61d178cc8d5564923a40f", @ANYRES8=0x0, @ANYBLOB=',smackfsdef=:*[,,fowner<', @ANYRESDEC=r4, @ANYRESOCT=r6, @ANYRESDEC=r5, @ANYBLOB='-\x00']) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) 402.438976ms ago: executing program 0 (id=4008): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x4, 0x0, 0x4, 0x9, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty}, "341517c1b7df60c7"}}}}}, 0x0) 367.778578ms ago: executing program 0 (id=4009): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000600000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd700000350000020000005000000000000000600012"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 220.222737ms ago: executing program 9 (id=4010): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 219.839067ms ago: executing program 0 (id=4011): socket$kcm(0x10, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000000000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="000000000a000200aaaaaaaaaabb00007e040ea38fdf86d20b1573d01a5bb0a4cee984d1fcd8bf6c4a8e85beb5ff208716f2fff497d12c24f08a13d73808bc3d884b59647a8a4bef87cc2bb50df1dbef168634c42c59ada2a084420d8d1d45a3523b77d2065ead857d4fcf50eee0aa84a1782f4cfab6d586456f6e111791adfba18dace9c0a8"], 0x28}}, 0x0) ioctl$TCFLSH(r0, 0x541b, 0x7ffffffffffffffe) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) tkill(r5, 0x7) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r8 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xfb5c, 0x80, 0x3, 0x3da}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f00000003c0)=[r7], 0x1) 203.644737ms ago: executing program 0 (id=4012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffe0900010073797a30000000004c000000030a010200000500000000000100000014000480080002400000000008000140000000000900010073797a30000000000b00070066696c74657200000900030073797a310000000054000000060a010400000000000000000114000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c000280080001"], 0xe8}}, 0x0) 165.46965ms ago: executing program 9 (id=4013): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000400)=@gcm_256={{}, "394ec11fe784936a", "60b59b4623ba543373b5afec66843e9c12fff01866ba2729e1eec210d122688e", "9a39a8fe", "5d0a96f81f01a863"}, 0x38) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88534, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x120, 0x10000, 0x4, 0x6, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffbfffffffffffff, r1, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xffffffffffff7fff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000340)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x80002}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000700)="af278d5dce87b01dcbd67184e298d36f", 0x10}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ace0ee77", 0x5}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000500)="ffe2", 0x2}, {&(0x7f00000006c0)="7940e900e0", 0x5}, {&(0x7f0000000100)="f009982057", 0x5}], 0x7}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="1121f722fe", 0x5}, {&(0x7f0000000280)="e3a00a47e0", 0x5}], 0x3}}], 0x4, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x3, 0x4e24, 0x6, 0x2, 0x0, 0x20, 0x88, r3, r4}, {0x7, 0x0, 0x5, 0x567, 0x97, 0x7fffffffffffffff, 0x8, 0x4}, {0x80, 0x4, 0x8, 0x2}, 0x5, 0x6e6bb4, 0x1, 0x1, 0x3, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x33}, 0x2, @in=@private=0xa010101, 0x3501, 0x3, 0x2, 0x6, 0x4, 0x3, 0x6}}, 0xe8) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000800002900ac2df853bc0551ff2f4d7a6e1a96820000080000000500000000200000"], 0x18}}], 0x1, 0x811) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="a4000000ae00000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffff1}]}}}]}, 0x3c}}, 0x4) 100.907884ms ago: executing program 0 (id=4014): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x1, 0xff, 0x2, 0x8, 0x6b, 0x0, 0x3, 0xa3, 0x4, [0x2, 0xfffffffe, 0x86, 0x66, 0x5, 0x40800, 0x4, 0x8]}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 100.587114ms ago: executing program 7 (id=4015): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fadvise64(r2, 0x2, 0x7, 0x4) r3 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r4, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") 0s ago: executing program 0 (id=4016): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x44001) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f1", 0x1) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r8}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000000000000000086dd6000000000283afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000089000000000024ff010000000000000000000000000001"], 0x0) kernel console output (not intermixed with test programs): ORIG_RAX: 000000000000002e [ 184.084962][T13024] RAX: ffffffffffffffda RBX: 00007f91145c5fa0 RCX: 00007f911434aeb9 [ 184.084998][T13024] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 184.085021][T13024] RBP: 00007f9112da7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.085037][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.085052][T13024] R13: 00007f91145c6038 R14: 00007f91145c5fa0 R15: 00007ffe22fa58d8 [ 184.085081][T13024] [ 184.085544][T13006] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3119: bg 0: block 248: padding at end of block bitmap is not set [ 184.299227][T13006] Quota error (device loop8): write_blk: dquota write failed [ 184.306896][T13006] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 184.316909][T13006] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3119: Failed to acquire dquot type 1 [ 184.338859][T13029] loop1: detected capacity change from 0 to 1024 [ 184.354658][T13029] EXT4-fs: Ignoring removed orlov option [ 184.383155][T13029] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 184.423304][T13029] program syz.1.3128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.423969][T13006] EXT4-fs (loop8): 1 truncate cleaned up [ 184.514635][ T29] audit: type=1400 audit(1770512847.382:4113): avc: denied { unlink } for pid=12790 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 184.675373][ T52] bridge_slave_0: left allmulticast mode [ 184.681363][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.761924][ T52] gretap0 (unregistering): left promiscuous mode [ 184.816735][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.825919][ T52] bond_slave_0: left promiscuous mode [ 184.831455][ T52] bond_slave_0: left allmulticast mode [ 184.838176][ T52] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 184.856021][ T52] bridge_slave_1: left promiscuous mode [ 184.861844][ T52] bridge_slave_1: left allmulticast mode [ 184.878727][ T52] bond0 (unregistering): Released all slaves [ 184.988688][ T52] bond1 (unregistering): Released all slaves [ 184.997912][ T52] bond2 (unregistering): Released all slaves [ 185.010349][ T52] bond3 (unregistering): Released all slaves [ 185.019405][ T52] bond4 (unregistering): Released all slaves [ 185.028361][ T52] bond5 (unregistering): Released all slaves [ 185.070308][ T52] tipc: Left network mode [ 185.088613][ T52] IPVS: stopping backup sync thread 6569 ... [ 185.098175][ T52] macvlan0: left promiscuous mode [ 185.103797][ T52] dummy0: left promiscuous mode [ 185.114916][ T52] hsr_slave_0: left promiscuous mode [ 185.121276][ T52] hsr_slave_1: left promiscuous mode [ 185.127316][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.135595][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.268899][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.283054][ T52] team0 (unregistering): Port device team_slave_1 removed [ 185.303045][ T52] team0 (unregistering): Port device team_slave_0 removed [ 185.464254][T13081] loop0: detected capacity change from 0 to 512 [ 185.471828][T13081] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.494789][T13081] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.546784][T13081] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3146: bg 0: block 248: padding at end of block bitmap is not set [ 185.549878][ T52] IPVS: stop unused estimator thread 0... [ 185.569052][T13088] loop1: detected capacity change from 0 to 256 [ 185.587044][T13081] Quota error (device loop0): write_blk: dquota write failed [ 185.594620][T13081] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 185.604595][T13081] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.3146: Failed to acquire dquot type 1 [ 185.626603][T13081] EXT4-fs (loop0): 1 truncate cleaned up [ 185.678861][T13091] loop1: detected capacity change from 0 to 1024 [ 185.706906][ T29] audit: type=1400 audit(1770512848.632:4114): avc: denied { read } for pid=13090 comm="syz.1.3150" path="socket:[66769]" dev="sockfs" ino=66769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.761590][T13097] loop0: detected capacity change from 0 to 1024 [ 185.780943][T13097] EXT4-fs: Ignoring removed orlov option [ 185.797674][T13097] EXT4-fs: dax option not supported [ 185.876047][T13106] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.912898][T13106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.923083][T13109] __nla_validate_parse: 6 callbacks suppressed [ 185.923317][T13109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3159'. [ 185.953399][T13113] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3161: bg 0: block 393: padding at end of block bitmap is not set [ 185.968511][ T9180] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 185.968684][T13106] EXT4-fs error (device loop7): __ext4_iget:5426: inode #12: block 13: comm syz.7.3158: invalid block [ 185.977326][T13113] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 186.007603][T13106] EXT4-fs (loop7): Remounting filesystem read-only [ 186.065497][T13121] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3162: corrupted inode contents [ 186.084343][T13121] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.3162: mark_inode_dirty error [ 186.085805][T13113] EXT4-fs (loop8): 2 truncates cleaned up [ 186.133845][T13121] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3162: corrupted inode contents [ 186.176390][T13121] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3162: mark_inode_dirty error [ 186.195845][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3161'. [ 186.224178][T13121] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3162: corrupted inode contents [ 186.243495][T13121] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 186.269418][T13127] netlink: 'syz.7.3163': attribute type 1 has an invalid length. [ 186.277216][T13127] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3163'. [ 186.286788][T13121] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3162: corrupted inode contents [ 186.299260][T13121] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.3162: mark_inode_dirty error [ 186.312207][T13121] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 186.322269][T13121] EXT4-fs (loop1): 1 truncate cleaned up [ 186.336408][T13121] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.399018][ T29] audit: type=1400 audit(1770512849.367:4115): avc: denied { accept } for pid=13138 comm="syz.0.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 186.452014][T13140] bond11: option mode: invalid value (9) [ 186.506256][T13140] bond11 (unregistering): Released all slaves [ 186.516943][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 186.528801][T13144] netlink: 'syz.2.3170': attribute type 4 has an invalid length. [ 186.586876][T13140] bond11: option mode: invalid value (9) [ 186.594984][T13140] bond11 (unregistering): Released all slaves [ 186.679399][T13140] bond11: option mode: invalid value (9) [ 186.687913][T13140] bond11 (unregistering): Released all slaves [ 186.770025][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3174'. [ 186.830827][T13140] bond11: option mode: invalid value (9) [ 186.843011][T13140] bond11 (unregistering): Released all slaves [ 186.856906][T13165] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3177'. [ 186.927610][T13140] bond11: option mode: invalid value (9) [ 186.940977][T13140] bond11 (unregistering): Released all slaves [ 186.998855][T13140] bond11: option mode: invalid value (9) [ 187.014073][T13140] bond11 (unregistering): Released all slaves [ 187.056624][T13185] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.084619][T13140] bond11: option mode: invalid value (9) [ 187.116363][T13140] bond11 (unregistering): Released all slaves [ 187.140395][T13192] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3183'. [ 187.163982][T13185] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 187.169537][T13140] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 187.202260][T13185] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3181: bg 0: block 248: padding at end of block bitmap is not set [ 187.260981][T13202] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 187.307908][T13185] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3181: Failed to acquire dquot type 1 [ 187.325526][T13185] EXT4-fs (loop8): 1 truncate cleaned up [ 187.340061][T13185] EXT4-fs mount: 19 callbacks suppressed [ 187.340082][T13185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 187.399778][T11497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 187.420610][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3187'. [ 187.437273][T13208] futex_wake_op: syz.0.3189 tries to shift op by -1; fix this program [ 187.466403][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'. [ 187.513180][T13213] 8021q: adding VLAN 0 to HW filter on device bond11 [ 187.540510][T13213] 8021q: adding VLAN 0 to HW filter on device bond11 [ 187.566725][T13213] bond11: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 187.608610][T13213] bond11: (slave ip6tnl1): Error -95 calling set_mac_address [ 187.698140][T13228] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=13228 comm=syz.2.3196 [ 187.771018][T13234] nfs: Unknown parameter '' [ 187.775955][T13232] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3198'. [ 187.787309][T13234] nfs: Unknown parameter '' [ 187.798769][T13238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.884478][T13247] set_capacity_and_notify: 6 callbacks suppressed [ 187.884496][T13247] loop2: detected capacity change from 0 to 1024 [ 187.900159][T13247] EXT4-fs: Ignoring removed orlov option [ 187.915548][T13247] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 187.963321][T13247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.977568][T13253] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3207'. [ 187.986713][T13253] netlink: 'syz.7.3207': attribute type 5 has an invalid length. [ 188.018917][T13252] SELinux: failed to load policy [ 188.095048][T13266] loop1: detected capacity change from 0 to 1024 [ 188.103471][T13266] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.127121][T13266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.148922][T13266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.173191][T13266] EXT4-fs error (device loop1): __ext4_iget:5426: inode #12: block 13: comm syz.1.3212: invalid block [ 188.181442][T12583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.193953][T13266] EXT4-fs (loop1): Remounting filesystem read-only [ 188.222431][T13269] lo speed is unknown, defaulting to 1000 [ 188.253184][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.492609][T13290] 9pnet: p9_errstr2errno: server reported unknown error [ 188.553317][T13297] FAULT_INJECTION: forcing a failure. [ 188.553317][T13297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.566959][T13297] CPU: 1 UID: 0 PID: 13297 Comm: syz.0.3225 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.566998][T13297] Tainted: [W]=WARN [ 188.567007][T13297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 188.567023][T13297] Call Trace: [ 188.567030][T13297] [ 188.567038][T13297] __dump_stack+0x1d/0x30 [ 188.567064][T13297] dump_stack_lvl+0x95/0xd0 [ 188.567088][T13297] dump_stack+0x15/0x1b [ 188.567120][T13297] should_fail_ex+0x263/0x280 [ 188.567160][T13297] should_fail+0xb/0x20 [ 188.567228][T13297] should_fail_usercopy+0x1a/0x20 [ 188.567298][T13297] _copy_from_iter+0xcf/0xea0 [ 188.567318][T13297] ? __alloc_skb+0x397/0x4b0 [ 188.567398][T13297] ? __alloc_skb+0x219/0x4b0 [ 188.567501][T13297] netlink_sendmsg+0x4ae/0x6f0 [ 188.567530][T13297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.567556][T13297] ____sys_sendmsg+0x5af/0x600 [ 188.567587][T13297] ___sys_sendmsg+0x195/0x1e0 [ 188.567681][T13297] __x64_sys_sendmsg+0xd4/0x160 [ 188.567713][T13297] x64_sys_call+0x17ba/0x3000 [ 188.567774][T13297] do_syscall_64+0xc0/0x2a0 [ 188.567842][T13297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.567870][T13297] RIP: 0033:0x7fc70d56aeb9 [ 188.567891][T13297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.567916][T13297] RSP: 002b:00007fc70bfbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.567966][T13297] RAX: ffffffffffffffda RBX: 00007fc70d7e5fa0 RCX: 00007fc70d56aeb9 [ 188.567986][T13297] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 188.568003][T13297] RBP: 00007fc70bfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 188.568016][T13297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.568028][T13297] R13: 00007fc70d7e6038 R14: 00007fc70d7e5fa0 R15: 00007fffc9fe53c8 [ 188.568101][T13297] [ 188.785355][T13300] loop2: detected capacity change from 0 to 512 [ 188.864716][T13300] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3226: corrupted inode contents [ 188.909770][T13300] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.3226: mark_inode_dirty error [ 188.922881][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 188.922898][ T29] audit: type=1400 audit(1770512852.012:4249): avc: denied { connect } for pid=13313 comm="syz.8.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.973960][T13300] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3226: corrupted inode contents [ 189.027383][T13300] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3226: mark_inode_dirty error [ 189.049005][T13300] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3226: corrupted inode contents [ 189.051601][T13318] loop0: detected capacity change from 0 to 256 [ 189.072490][T13300] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 189.082381][T13300] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3226: corrupted inode contents [ 189.103511][T13300] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.3226: mark_inode_dirty error [ 189.117096][T13318] FAULT_INJECTION: forcing a failure. [ 189.117096][T13318] name failslab, interval 1, probability 0, space 0, times 0 [ 189.130054][T13318] CPU: 1 UID: 0 PID: 13318 Comm: syz.0.3232 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.130090][T13318] Tainted: [W]=WARN [ 189.130098][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.130112][T13318] Call Trace: [ 189.130118][T13318] [ 189.130126][T13318] __dump_stack+0x1d/0x30 [ 189.130214][T13318] dump_stack_lvl+0x95/0xd0 [ 189.130272][T13318] dump_stack+0x15/0x1b [ 189.130297][T13318] should_fail_ex+0x263/0x280 [ 189.130340][T13318] should_failslab+0x8c/0xb0 [ 189.130398][T13318] kmem_cache_alloc_noprof+0x68/0x490 [ 189.130420][T13318] ? key_alloc+0x27d/0x9a0 [ 189.130439][T13318] key_alloc+0x27d/0x9a0 [ 189.130462][T13318] keyring_alloc+0x45/0xb0 [ 189.130493][T13318] lookup_user_key+0x2fe/0xd70 [ 189.130527][T13318] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 189.130643][T13318] __se_sys_add_key+0x272/0x360 [ 189.130671][T13318] __x64_sys_add_key+0x67/0x80 [ 189.130696][T13318] x64_sys_call+0x2ea3/0x3000 [ 189.130756][T13318] do_syscall_64+0xc0/0x2a0 [ 189.130785][T13318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.130880][T13318] RIP: 0033:0x7fc70d56aeb9 [ 189.130894][T13318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.130910][T13318] RSP: 002b:00007fc70bfbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 189.130928][T13318] RAX: ffffffffffffffda RBX: 00007fc70d7e5fa0 RCX: 00007fc70d56aeb9 [ 189.130940][T13318] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 189.130952][T13318] RBP: 00007fc70bfbf090 R08: ffffffffffffffff R09: 0000000000000000 [ 189.130981][T13318] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 189.130992][T13318] R13: 00007fc70d7e6038 R14: 00007fc70d7e5fa0 R15: 00007fffc9fe53c8 [ 189.131011][T13318] [ 189.331680][T13300] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 189.366471][T13325] netlink: 'syz.8.3236': attribute type 1 has an invalid length. [ 189.376528][T13300] EXT4-fs (loop2): 1 truncate cleaned up [ 189.382778][T13300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.395842][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.396229][T13300] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.406316][ T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 189.455494][T13336] loop7: detected capacity change from 0 to 1024 [ 189.463385][T13336] ext4: Unknown parameter 'noacl' [ 189.544179][T13300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.576020][T13345] loop1: detected capacity change from 0 to 256 [ 189.648003][T13350] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 189.689848][T13350] bond12 (unregistering): Released all slaves [ 189.787673][T13365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.807383][T13365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.822857][T13365] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 189.842871][T13365] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 189.884359][T13372] netlink: 'syz.8.3252': attribute type 1 has an invalid length. [ 190.151378][T13401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13401 comm=syz.1.3266 [ 190.225037][T13410] loop8: detected capacity change from 0 to 2048 [ 190.251163][T13410] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.281053][T13415] loop7: detected capacity change from 0 to 128 [ 190.304170][T13410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.317198][T13415] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.329257][T13415] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.388434][T13410] netlink: 'syz.8.3269': attribute type 30 has an invalid length. [ 190.436452][T13410] bond3: option arp_missed_max: invalid value (0) [ 190.443066][T13410] bond3: option arp_missed_max: allowed values 1 - 255 [ 190.461773][T13410] bond3 (unregistering): Released all slaves [ 190.534539][T13428] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 190.546585][T13381] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8 sclass=netlink_tcpdiag_socket pid=13381 comm=syz.0.3255 [ 190.561708][ T29] audit: type=1400 audit(1770512853.703:4250): avc: denied { mounton } for pid=13406 comm="syz.8.3269" path="/138/file0/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 190.660846][T11497] EXT4-fs error (device loop8): ext4_readdir:264: inode #11: block 34: comm syz-executor: path /138/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 190.775923][T13440] __nla_validate_parse: 14 callbacks suppressed [ 190.775945][T13440] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3278'. [ 190.793195][T11497] EXT4-fs (loop8): Remounting filesystem read-only [ 190.933008][T13443] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3279'. [ 190.969568][T13443] netlink: 'syz.0.3279': attribute type 1 has an invalid length. [ 191.006125][ T52] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.017306][T11497] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.114076][ T52] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.192956][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3283'. [ 191.227256][ T52] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.297835][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3284'. [ 191.307531][T13457] netlink: 'syz.2.3285': attribute type 1 has an invalid length. [ 191.338456][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3285'. [ 191.365150][ T52] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.505424][T13468] loop7: detected capacity change from 0 to 1024 [ 191.530899][ T52] bridge_slave_1: left allmulticast mode [ 191.536750][ T52] bridge_slave_1: left promiscuous mode [ 191.542485][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.587586][T13468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.612444][ T52] bridge_slave_0: left allmulticast mode [ 191.618182][ T52] bridge_slave_0: left promiscuous mode [ 191.623984][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.692591][T13485] loop2: detected capacity change from 0 to 512 [ 191.709976][T13490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 191.729091][T13485] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 191.751512][ T29] audit: type=1400 audit(1770512854.984:4251): avc: denied { watch watch_reads } for pid=13467 comm="syz.7.3290" path="/232/file1/file0/file1" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 191.778375][T13491] EXT4-fs error (device loop7): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.7.3290: path /232/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 191.841580][ T52] gretap0 (unregistering): left promiscuous mode [ 191.883780][ T52] bond0 (unregistering): left promiscuous mode [ 191.890193][ T52] bond_slave_0: left promiscuous mode [ 191.913582][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.933279][T13500] xt_policy: output policy not valid in PREROUTING and INPUT [ 191.938615][ T52] bond0 (unregistering): Released all slaves [ 191.962764][ T52] bond1 (unregistering): Released all slaves [ 191.972281][ T52] bond2 (unregistering): Released all slaves [ 192.038943][ T52] hsr_slave_0: left promiscuous mode [ 192.045664][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.059650][ T52] hsr_slave_1: left promiscuous mode [ 192.068058][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.075816][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.084294][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.091802][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.117953][ T52] veth1_macvtap: left promiscuous mode [ 192.124472][ T52] veth0_macvtap: left promiscuous mode [ 192.130424][ T52] veth1_vlan: left promiscuous mode [ 192.143862][T13515] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3300'. [ 192.153695][ T29] audit: type=1400 audit(1770512855.393:4252): avc: denied { setopt } for pid=13516 comm="syz.1.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 192.173703][ T52] veth0_vlan: left promiscuous mode [ 192.229369][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 192.305285][ T52] team0 (unregistering): Port device team_slave_1 removed [ 192.322029][ T52] team0 (unregistering): Port device team_slave_0 removed [ 192.372100][T13526] 8021q: adding VLAN 0 to HW filter on device bond12 [ 192.385538][T13532] 8021q: adding VLAN 0 to HW filter on device bond12 [ 192.392877][T13532] bond12: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 192.406257][T13532] bond12: (slave ip6tnl1): Error -95 calling set_mac_address [ 192.441771][T13539] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.449133][T13539] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.496720][T13539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.508984][T13539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.547478][T13549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3312'. [ 192.572941][ T5354] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.591474][T13462] lo speed is unknown, defaulting to 1000 [ 192.597754][ T5354] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.634723][ T5354] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.656969][ T5354] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.710855][T13563] netlink: 'syz.2.3314': attribute type 1 has an invalid length. [ 192.719355][T13563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3314'. [ 192.840575][T13462] chnl_net:caif_netlink_parms(): no params data found [ 192.914632][T13601] usb usb1: usbfs: process 13601 (syz.2.3320) did not claim interface 9 before use [ 192.946533][T13601] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 192.969771][T13462] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.977029][T13462] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.989620][T13462] bridge_slave_0: entered allmulticast mode [ 193.003468][T13462] bridge_slave_0: entered promiscuous mode [ 193.013553][T13462] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.020659][T13462] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.029561][T13462] bridge_slave_1: entered allmulticast mode [ 193.036342][T13462] bridge_slave_1: entered promiscuous mode [ 193.047919][ T29] audit: type=1400 audit(1770512856.338:4253): avc: denied { execute } for pid=13597 comm="syz.0.3322" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.083596][T13462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.111635][T13462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.190530][T13462] team0: Port device team_slave_0 added [ 193.208390][T13462] team0: Port device team_slave_1 added [ 193.257481][T13462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.264546][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.290792][T13462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.340070][T13628] loop7: detected capacity change from 0 to 128 [ 193.350725][T13631] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 193.375827][T13462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.382834][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.409016][T13462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.495716][T13462] hsr_slave_0: entered promiscuous mode [ 193.516750][T13462] hsr_slave_1: entered promiscuous mode [ 193.701313][T13462] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 193.722179][T13462] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 193.746422][T13462] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 193.779406][T13462] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 193.780746][T13658] loop7: detected capacity change from 0 to 512 [ 193.805452][T13658] EXT4-fs (loop7): 1 orphan inode deleted [ 193.822334][T13658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.836253][T13658] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.085079][T13462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.122760][T13462] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.140911][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.148138][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.158603][T13664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.174899][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.182019][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.227644][T13681] loop0: detected capacity change from 0 to 256 [ 194.346604][T13687] loop7: detected capacity change from 0 to 512 [ 194.359335][T13688] loop0: detected capacity change from 0 to 256 [ 194.376634][T13688] FAULT_INJECTION: forcing a failure. [ 194.376634][T13688] name failslab, interval 1, probability 0, space 0, times 0 [ 194.389606][T13688] CPU: 1 UID: 0 PID: 13688 Comm: syz.0.3342 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.389683][T13688] Tainted: [W]=WARN [ 194.389690][T13688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.389702][T13688] Call Trace: [ 194.389708][T13688] [ 194.389716][T13688] __dump_stack+0x1d/0x30 [ 194.389748][T13688] dump_stack_lvl+0x95/0xd0 [ 194.389778][T13688] dump_stack+0x15/0x1b [ 194.389804][T13688] should_fail_ex+0x263/0x280 [ 194.389846][T13688] should_failslab+0x8c/0xb0 [ 194.389872][T13688] __kmalloc_noprof+0xb8/0x580 [ 194.389939][T13688] ? security_key_alloc+0x50/0x130 [ 194.389972][T13688] security_key_alloc+0x50/0x130 [ 194.390016][T13688] key_alloc+0x458/0x9a0 [ 194.390049][T13688] keyring_alloc+0x45/0xb0 [ 194.390081][T13688] lookup_user_key+0x2fe/0xd70 [ 194.390121][T13688] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 194.390245][T13688] __se_sys_add_key+0x272/0x360 [ 194.390288][T13688] __x64_sys_add_key+0x67/0x80 [ 194.390358][T13688] x64_sys_call+0x2ea3/0x3000 [ 194.390459][T13688] do_syscall_64+0xc0/0x2a0 [ 194.390572][T13688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.390598][T13688] RIP: 0033:0x7fc70d56aeb9 [ 194.390618][T13688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.390659][T13688] RSP: 002b:00007fc70bfbf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 194.390686][T13688] RAX: ffffffffffffffda RBX: 00007fc70d7e5fa0 RCX: 00007fc70d56aeb9 [ 194.390728][T13688] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 194.390745][T13688] RBP: 00007fc70bfbf090 R08: ffffffffffffffff R09: 0000000000000000 [ 194.390762][T13688] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 194.390779][T13688] R13: 00007fc70d7e6038 R14: 00007fc70d7e5fa0 R15: 00007fffc9fe53c8 [ 194.390806][T13688] [ 194.403250][T13687] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 194.637983][T13462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.697579][ T3440] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.954265][T13726] loop7: detected capacity change from 0 to 512 [ 194.974609][T13726] EXT4-fs: Ignoring removed i_version option [ 194.980689][T13726] EXT4-fs: Ignoring removed bh option [ 194.988577][T13693] netlink: 'syz.1.3343': attribute type 10 has an invalid length. [ 195.014479][T13693] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 195.014738][T13726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.014917][T13726] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.061699][T13693] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 195.075456][T13693] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 195.137063][T13462] veth0_vlan: entered promiscuous mode [ 195.145864][T13462] veth1_vlan: entered promiscuous mode [ 195.163855][T13462] veth0_macvtap: entered promiscuous mode [ 195.198974][T13462] veth1_macvtap: entered promiscuous mode [ 195.237757][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.252268][T13462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.294676][T13742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.323231][T13462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.362167][ T5350] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.372258][ T5350] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.413684][ T5350] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.450632][ T5350] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.503344][T13768] bond0: (slave bond_slave_1): Releasing backup interface [ 195.511753][T13769] loop7: detected capacity change from 0 to 1024 [ 195.530139][T13769] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.558428][T13769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.579389][T13769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.597494][T13769] EXT4-fs error (device loop7): __ext4_iget:5426: inode #12: block 13: comm syz.7.3365: invalid block [ 195.619192][T13769] EXT4-fs (loop7): Remounting filesystem read-only [ 195.669558][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.690042][T13784] sit0: entered promiscuous mode [ 195.695217][T13784] netlink: 'syz.1.3371': attribute type 1 has an invalid length. [ 195.703224][T13784] __nla_validate_parse: 8 callbacks suppressed [ 195.703250][T13784] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3371'. [ 195.722797][ T29] audit: type=1400 audit(1770512859.152:4254): avc: denied { setcheckreqprot } for pid=13782 comm="syz.2.3369" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 195.745288][T13788] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3370'. [ 195.979650][ T29] audit: type=1400 audit(1770512859.425:4255): avc: denied { write } for pid=13805 comm="syz.1.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 196.008721][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3379'. [ 196.101640][T13817] syzkaller0: entered promiscuous mode [ 196.107319][T13817] syzkaller0: entered allmulticast mode [ 196.119612][T13817] loop7: detected capacity change from 0 to 512 [ 196.128169][T13819] netlink: 'syz.2.3384': attribute type 1 has an invalid length. [ 196.156451][T13819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3384'. [ 196.167894][T13817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.184133][T13817] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.282660][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.460844][T13840] lo speed is unknown, defaulting to 1000 [ 196.495250][T13842] loop2: detected capacity change from 0 to 512 [ 196.502355][T13842] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 196.513412][T13842] EXT4-fs error (device loop2): __ext4_iget:5426: inode #15: block 1803188595: comm syz.2.3390: invalid block [ 196.537126][T13842] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3390: couldn't read orphan inode 15 (err -117) [ 196.553438][T13842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.568864][T13842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.622004][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.627358][ T9180] Bluetooth: hci0: command 0x1003 tx timeout [ 196.729960][ T29] audit: type=1400 audit(1770512860.212:4256): avc: denied { setopt } for pid=13851 comm="syz.2.3395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 196.773837][T13855] netlink: 'syz.2.3396': attribute type 1 has an invalid length. [ 196.791850][T13855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3396'. [ 196.812980][T13840] loop7: detected capacity change from 0 to 512 [ 196.832261][T13840] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 196.877381][T13840] EXT4-fs error (device loop7): ext4_init_orphan_info:583: inode #15: comm syz.7.3389: iget: bad extra_isize 63 (inode size 256) [ 196.920966][T13840] EXT4-fs (loop7): Remounting filesystem read-only [ 196.942367][T13840] EXT4-fs (loop7): get orphan inode failed [ 196.948872][T13840] EXT4-fs (loop7): mount failed [ 196.979315][T13871] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.3398'. [ 196.988684][T13871] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3398'. [ 197.022495][ T1650] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.032701][ T1650] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.065501][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 197.074503][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3401'. [ 197.119347][T13856] lo speed is unknown, defaulting to 1000 [ 197.126273][ T1650] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.136355][ T1650] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.152173][T13871] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3398'. [ 197.170544][T13877] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 197.192486][T13877] bond1 (unregistering): Released all slaves [ 197.215391][T13889] program syz.1.3405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.238250][ T1650] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.248224][ T1650] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.252764][T13886] EXT4-fs: Ignoring removed nobh option [ 197.288173][T13886] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 197.324840][T13886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 197.328487][ T1650] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.336911][T13886] EXT4-fs (loop7): orphan cleanup on readonly fs [ 197.342924][ T1650] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.358917][T13886] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #11: comm syz.7.3404: corrupted in-inode xattr: e_name out of bounds [ 197.399771][T13886] EXT4-fs (loop7): Remounting filesystem read-only [ 197.418707][T13856] chnl_net:caif_netlink_parms(): no params data found [ 197.430602][T13886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 197.473185][ T29] audit: type=1400 audit(1770512860.989:4257): avc: denied { listen } for pid=13885 comm="syz.7.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 197.549789][T13901] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.634455][T13901] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.652083][T13856] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.659263][T13856] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.695886][T13856] bridge_slave_0: entered allmulticast mode [ 197.700407][T13901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.718202][T13856] bridge_slave_0: entered promiscuous mode [ 197.739077][ T1650] bridge_slave_1: left allmulticast mode [ 197.744803][ T1650] bridge_slave_1: left promiscuous mode [ 197.750620][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.781895][T13901] EXT4-fs error (device loop1): __ext4_iget:5426: inode #12: block 13: comm syz.1.3409: invalid block [ 197.806088][ T1650] bridge_slave_0: left allmulticast mode [ 197.811839][ T1650] bridge_slave_0: left promiscuous mode [ 197.817757][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.832823][T13901] EXT4-fs (loop1): Remounting filesystem read-only [ 197.891801][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.047021][ T1650] gretap0 (unregistering): left promiscuous mode [ 198.080314][T13951] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 198.130214][T13954] set_capacity_and_notify: 3 callbacks suppressed [ 198.130302][T13954] loop1: detected capacity change from 0 to 256 [ 198.159640][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 198.195306][ T1650] bond1 (unregistering): (slave bridge1): Releasing active interface [ 198.203671][ T1650] bridge1 (unregistering): left promiscuous mode [ 198.210045][ T1650] bridge1 (unregistering): left allmulticast mode [ 198.255431][ T29] audit: type=1326 audit(1770512861.819:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 198.280427][ T29] audit: type=1326 audit(1770512861.819:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 198.304333][ T29] audit: type=1326 audit(1770512861.819:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 198.328059][ T29] audit: type=1326 audit(1770512861.819:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 198.352015][ T29] audit: type=1326 audit(1770512861.819:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 198.375611][ T29] audit: type=1326 audit(1770512861.819:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 198.389721][T13970] loop1: detected capacity change from 0 to 512 [ 198.406996][T13970] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 198.419044][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.428053][ T1650] bond_slave_0: left promiscuous mode [ 198.449657][ T1650] bond0 (unregistering): Released all slaves [ 198.468425][ T1650] bond1 (unregistering): Released all slaves [ 198.477539][ T1650] bond2 (unregistering): Released all slaves [ 198.486617][ T1650] bond3 (unregistering): Released all slaves [ 198.497531][ T1650] bond4 (unregistering): Released all slaves [ 198.511654][ T1650] bond5 (unregistering): Released all slaves [ 198.521125][ T1650] bond6 (unregistering): Released all slaves [ 198.530474][ T1650] bond7 (unregistering): left allmulticast mode [ 198.537010][ T1650] bond7 (unregistering): left promiscuous mode [ 198.547047][ T1650] bond7 (unregistering): Released all slaves [ 198.558135][ T1650] bond8 (unregistering): Released all slaves [ 198.568279][ T1650] bond9 (unregistering): (slave macvlan1): Releasing backup interface [ 198.577319][ T1650] veth1_vlan: left promiscuous mode [ 198.583618][ T1650] bond9 (unregistering): Released all slaves [ 198.592774][ T1650] bond10 (unregistering): Released all slaves [ 198.602163][ T1650] bond11 (unregistering): Released all slaves [ 198.614045][ T1650] bond12 (unregistering): Released all slaves [ 198.623178][T13856] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.630411][T13856] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.637954][T13856] bridge_slave_1: entered allmulticast mode [ 198.649552][T13856] bridge_slave_1: entered promiscuous mode [ 198.665987][T13961] tipc: Enabling of bearer rejected, already enabled [ 198.681787][T13856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.691115][ T1650] tipc: Disabling bearer [ 198.696325][ T1650] tipc: Left network mode [ 198.700967][T13856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.719813][ T1650] macvlan0: left promiscuous mode [ 198.727868][ T1650] dummy0: left promiscuous mode [ 198.752537][ T1650] hsr_slave_0: left promiscuous mode [ 198.770989][ T1650] hsr_slave_1: left promiscuous mode [ 198.783591][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.791221][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.821092][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.821205][T13976] loop1: detected capacity change from 0 to 512 [ 198.828822][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.846825][ T1650] batadv0: left promiscuous mode [ 198.852380][ T1650] veth1_macvtap: left promiscuous mode [ 198.858514][ T1650] veth0_macvtap: left promiscuous mode [ 198.865685][T13976] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 198.874725][ T1650] veth0_vlan: left promiscuous mode [ 198.889748][T13976] EXT4-fs error (device loop1): __ext4_iget:5426: inode #15: block 1803188595: comm syz.1.3429: invalid block [ 198.907384][T13976] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3429: couldn't read orphan inode 15 (err -117) [ 198.946750][T13976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.961011][T13983] loop9: detected capacity change from 0 to 512 [ 198.968013][T13983] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.977462][T13983] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 198.987798][T13976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.999797][T13983] 9p: Bad value for 'rfdno' [ 199.095217][T13994] loop9: detected capacity change from 0 to 1024 [ 199.103847][T13994] EXT4-fs: Ignoring removed orlov option [ 199.113551][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 199.123704][T13994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.141003][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 199.160309][T13462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.242014][T13856] team0: Port device team_slave_0 added [ 199.252177][T13856] team0: Port device team_slave_1 added [ 199.277715][T14007] netlink: 'syz.1.3441': attribute type 39 has an invalid length. [ 199.278077][T13856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.293697][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.319851][T13856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.331439][T14010] IPVS: set_ctl: invalid protocol: 66 127.0.0.1:20004 [ 199.339725][T13856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.346760][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.372756][T13856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.419208][T14016] netlink: 'syz.9.3442': attribute type 21 has an invalid length. [ 199.457456][T14007] hsr_slave_1 (unregistering): left promiscuous mode [ 199.506108][T13856] hsr_slave_0: entered promiscuous mode [ 199.520614][T13856] hsr_slave_1: entered promiscuous mode [ 199.537447][T13856] debugfs: 'hsr0' already exists in 'hsr' [ 199.543239][T13856] Cannot create hsr debugfs directory [ 199.564133][T14026] netlink: 'syz.2.3445': attribute type 3 has an invalid length. [ 199.779620][T14047] netlink: 'syz.9.3450': attribute type 1 has an invalid length. [ 200.001232][T14073] FAULT_INJECTION: forcing a failure. [ 200.001232][T14073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.014707][T14073] CPU: 1 UID: 0 PID: 14073 Comm: syz.2.3457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.014747][T14073] Tainted: [W]=WARN [ 200.014755][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.014768][T14073] Call Trace: [ 200.014776][T14073] [ 200.014785][T14073] __dump_stack+0x1d/0x30 [ 200.014943][T14073] dump_stack_lvl+0x95/0xd0 [ 200.014973][T14073] dump_stack+0x15/0x1b [ 200.015000][T14073] should_fail_ex+0x263/0x280 [ 200.015082][T14073] should_fail+0xb/0x20 [ 200.015170][T14073] should_fail_usercopy+0x1a/0x20 [ 200.015207][T14073] _copy_from_user+0x1c/0xb0 [ 200.015307][T14073] kstrtouint_from_user+0x69/0xf0 [ 200.015344][T14073] proc_fail_nth_write+0x50/0x160 [ 200.015384][T14073] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.015423][T14073] vfs_write+0x269/0x9f0 [ 200.015443][T14073] ? __rcu_read_unlock+0x4e/0x70 [ 200.015476][T14073] ? __fget_files+0x184/0x1c0 [ 200.015544][T14073] ? mutex_lock+0x57/0x90 [ 200.015575][T14073] ksys_write+0xdc/0x1a0 [ 200.015605][T14073] __x64_sys_write+0x40/0x50 [ 200.015630][T14073] x64_sys_call+0x2847/0x3000 [ 200.015683][T14073] do_syscall_64+0xc0/0x2a0 [ 200.015720][T14073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.015742][T14073] RIP: 0033:0x7f90bbfeb78e [ 200.015759][T14073] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.015798][T14073] RSP: 002b:00007f90baa86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.015826][T14073] RAX: ffffffffffffffda RBX: 00007f90baa876c0 RCX: 00007f90bbfeb78e [ 200.015846][T14073] RDX: 0000000000000001 RSI: 00007f90baa870a0 RDI: 0000000000000004 [ 200.015865][T14073] RBP: 00007f90baa87090 R08: 0000000000000000 R09: 0000000000000000 [ 200.015891][T14073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.015988][T14073] R13: 00007f90bc2a6038 R14: 00007f90bc2a5fa0 R15: 00007fff55eb7408 [ 200.016017][T14073] [ 200.337019][T14079] loop2: detected capacity change from 0 to 512 [ 200.462083][T14079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 200.475318][T14079] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.492547][T14079] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.500653][T14079] __quota_error: 5 callbacks suppressed [ 200.500669][T14079] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 200.527378][ T29] audit: type=1400 audit(1770512864.170:4269): avc: denied { ioctl } for pid=14078 comm="syz.2.3459" path="socket:[70750]" dev="sockfs" ino=70750 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.553049][ T29] audit: type=1400 audit(1770512864.170:4270): avc: denied { write } for pid=14078 comm="syz.2.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 200.576499][T14079] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 200.588411][T14079] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3459: Failed to acquire dquot type 0 [ 200.664504][T12583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 200.676072][T13856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.689485][T13856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.725871][T13856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.735671][T13856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.820782][T14112] FAULT_INJECTION: forcing a failure. [ 200.820782][T14112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.834223][T14112] CPU: 0 UID: 0 PID: 14112 Comm: syz.9.3464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.834294][T14112] Tainted: [W]=WARN [ 200.834304][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.834323][T14112] Call Trace: [ 200.834331][T14112] [ 200.834341][T14112] __dump_stack+0x1d/0x30 [ 200.834374][T14112] dump_stack_lvl+0x95/0xd0 [ 200.834399][T14112] dump_stack+0x15/0x1b [ 200.834486][T14112] should_fail_ex+0x263/0x280 [ 200.834582][T14112] should_fail+0xb/0x20 [ 200.834611][T14112] should_fail_usercopy+0x1a/0x20 [ 200.834663][T14112] _copy_to_user+0x20/0xa0 [ 200.834693][T14112] simple_read_from_buffer+0xb5/0x130 [ 200.834736][T14112] proc_fail_nth_read+0x10e/0x150 [ 200.834849][T14112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.834879][T14112] vfs_read+0x1ab/0x7f0 [ 200.834904][T14112] ? __rcu_read_unlock+0x4e/0x70 [ 200.834970][T14112] ? __fget_files+0x184/0x1c0 [ 200.834998][T14112] ? mutex_lock+0x57/0x90 [ 200.835033][T14112] ksys_read+0xdc/0x1a0 [ 200.835054][T14112] __x64_sys_read+0x40/0x50 [ 200.835132][T14112] x64_sys_call+0x2889/0x3000 [ 200.835160][T14112] do_syscall_64+0xc0/0x2a0 [ 200.835195][T14112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.835226][T14112] RIP: 0033:0x7f5c9523b78e [ 200.835315][T14112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.835451][T14112] RSP: 002b:00007f5c93cd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 200.835472][T14112] RAX: ffffffffffffffda RBX: 00007f5c93cd76c0 RCX: 00007f5c9523b78e [ 200.835492][T14112] RDX: 000000000000000f RSI: 00007f5c93cd70a0 RDI: 0000000000000004 [ 200.835510][T14112] RBP: 00007f5c93cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 200.835608][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.835625][T14112] R13: 00007f5c954f6038 R14: 00007f5c954f5fa0 R15: 00007fff0f5ea618 [ 200.835653][T14112] [ 201.058770][T13856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.070616][T13856] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.096353][T14119] loop2: detected capacity change from 0 to 512 [ 201.103287][T14119] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 201.105643][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.118692][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.156258][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.163584][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.261070][T14122] netlink: 'syz.7.3466': attribute type 3 has an invalid length. [ 201.382187][T14134] loop2: detected capacity change from 0 to 1024 [ 201.398429][T14141] loop9: detected capacity change from 0 to 256 [ 201.426033][T13856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.449802][T14141] FAULT_INJECTION: forcing a failure. [ 201.449802][T14141] name failslab, interval 1, probability 0, space 0, times 0 [ 201.462587][T14141] CPU: 0 UID: 0 PID: 14141 Comm: syz.9.3470 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.462627][T14141] Tainted: [W]=WARN [ 201.462637][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 201.462654][T14141] Call Trace: [ 201.462662][T14141] [ 201.462672][T14141] __dump_stack+0x1d/0x30 [ 201.462717][T14141] dump_stack_lvl+0x95/0xd0 [ 201.462739][T14141] dump_stack+0x15/0x1b [ 201.462765][T14141] should_fail_ex+0x263/0x280 [ 201.462878][T14141] should_failslab+0x8c/0xb0 [ 201.462906][T14141] __kmalloc_noprof+0xb8/0x580 [ 201.462933][T14141] ? rxrpc_preparse+0x241/0x860 [ 201.462958][T14141] ? rxrpc_preparse+0x221/0x860 [ 201.463029][T14141] rxrpc_preparse+0x241/0x860 [ 201.463054][T14141] ? selinux_key_permission+0x161/0x190 [ 201.463081][T14141] __key_create_or_update+0x2df/0x840 [ 201.463115][T14141] key_create_or_update+0x42/0x60 [ 201.463161][T14141] __se_sys_add_key+0x2a5/0x360 [ 201.463201][T14141] __x64_sys_add_key+0x67/0x80 [ 201.463235][T14141] x64_sys_call+0x2ea3/0x3000 [ 201.463294][T14141] do_syscall_64+0xc0/0x2a0 [ 201.463334][T14141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.463438][T14141] RIP: 0033:0x7f5c9527aeb9 [ 201.463454][T14141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.463545][T14141] RSP: 002b:00007f5c93cd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 201.463646][T14141] RAX: ffffffffffffffda RBX: 00007f5c954f5fa0 RCX: 00007f5c9527aeb9 [ 201.463667][T14141] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 201.463767][T14141] RBP: 00007f5c93cd7090 R08: ffffffffffffffff R09: 0000000000000000 [ 201.463786][T14141] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000002 [ 201.463802][T14141] R13: 00007f5c954f6038 R14: 00007f5c954f5fa0 R15: 00007fff0f5ea618 [ 201.463823][T14141] [ 201.713494][ T29] audit: type=1400 audit(1770512865.451:4271): avc: denied { mount } for pid=14143 comm="syz.7.3471" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 201.737235][ T29] audit: type=1326 audit(1770512865.451:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.7.3471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x0 [ 201.889908][T13856] veth0_vlan: entered promiscuous mode [ 201.920617][T13856] veth1_vlan: entered promiscuous mode [ 201.975863][T13856] veth0_macvtap: entered promiscuous mode [ 202.027339][T13856] veth1_macvtap: entered promiscuous mode [ 202.057670][T14197] loop2: detected capacity change from 0 to 512 [ 202.066370][T13856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.093547][T13856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.131481][T14197] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3483: corrupted inode contents [ 202.146052][T14197] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.3483: mark_inode_dirty error [ 202.160945][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.173243][T14197] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3483: corrupted inode contents [ 202.193929][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.214444][T14197] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3483: mark_inode_dirty error [ 202.240272][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.257612][T14197] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3483: corrupted inode contents [ 202.270930][T14197] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 202.280517][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.310236][T14216] lo speed is unknown, defaulting to 1000 [ 202.330966][T14197] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3483: corrupted inode contents [ 202.375895][T14197] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.3483: mark_inode_dirty error [ 202.406515][T14197] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 202.435814][T14197] EXT4-fs (loop2): 1 truncate cleaned up [ 202.447783][T14197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.460840][ T5354] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 202.470794][ T5354] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 202.483770][T14197] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.497151][T14197] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.639872][T14233] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 202.652724][T14233] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3490: bad orphan inode 15 [ 202.672566][T14233] ext4_test_bit(bit=14, block=18) = 1 [ 202.678042][T14233] is_bad_inode(inode)=0 [ 202.682290][T14233] NEXT_ORPHAN(inode)=1023 [ 202.686646][T14233] max_ino=32 [ 202.689934][T14233] i_nlink=0 [ 202.694098][T14233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 202.706421][T14233] ext2 filesystem being mounted at /87/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 202.740222][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 202.778408][T14242] sit0: entered promiscuous mode [ 202.806768][T14242] netlink: 'syz.2.3493': attribute type 1 has an invalid length. [ 202.814617][T14242] __nla_validate_parse: 8 callbacks suppressed [ 202.814636][T14242] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3493'. [ 202.833313][ T29] audit: type=1326 audit(1770512866.627:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.1.3492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f911434aeb9 code=0x0 [ 202.856496][ T29] audit: type=1326 audit(1770512866.627:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14243 comm="syz.1.3492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f911434aeb9 code=0x0 [ 202.960993][T14255] set_capacity_and_notify: 1 callbacks suppressed [ 202.961012][T14255] loop2: detected capacity change from 0 to 512 [ 202.993020][T14255] EXT4-fs (loop2): 1 orphan inode deleted [ 203.006619][T14255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.060241][T12583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.143217][T14266] loop0: detected capacity change from 0 to 1024 [ 203.150306][T14266] EXT4-fs: dax option not supported [ 203.164413][T14264] loop2: detected capacity change from 0 to 512 [ 203.212366][T14264] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 203.344100][T14276] 9p: Bad value for 'wfdno' [ 203.373009][T14283] loop9: detected capacity change from 0 to 512 [ 203.422729][T14283] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 203.439010][ T29] audit: type=1400 audit(1770512867.257:4275): avc: denied { accept } for pid=14278 comm="syz.2.3504" lport=50163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.474828][T14283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 203.485399][T14283] System zones: 1-12 [ 203.489813][T14283] EXT4-fs (loop9): orphan cleanup on readonly fs [ 203.496737][T14283] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3506: bg 0: block 361: padding at end of block bitmap is not set [ 203.511973][T14283] EXT4-fs (loop9): Remounting filesystem read-only [ 203.519708][T14283] EXT4-fs (loop9): 1 truncate cleaned up [ 203.526031][T14283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 203.541748][T14283] SELinux: syz.9.3506 (14283) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 203.605875][T14298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3511'. [ 203.626782][T14302] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.3506: error -117 reading directory block [ 203.668419][T14305] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 203.681474][T14306] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 203.810663][T14316] bond0: (slave bond_slave_1): Releasing backup interface [ 203.922778][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3518'. [ 203.931764][T14324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3518'. [ 203.938186][T14327] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 204.036332][T14336] netlink: 'syz.0.3522': attribute type 10 has an invalid length. [ 204.048190][T14324] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 204.062663][T14324] bond2 (unregistering): Released all slaves [ 204.076516][T14336] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.085820][T14336] bond0: (slave team0): Enslaving as an active interface with an up link [ 204.096472][T14337] netlink: 'syz.0.3522': attribute type 10 has an invalid length. [ 204.110183][T14337] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 204.122142][T14336] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.173228][T14341] loop1: detected capacity change from 0 to 512 [ 204.185280][T14341] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 204.199343][T14341] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3523: bad orphan inode 15 [ 204.205090][T14343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3525'. [ 204.219478][T14341] ext4_test_bit(bit=14, block=18) = 1 [ 204.225090][T14341] is_bad_inode(inode)=0 [ 204.229319][T14341] NEXT_ORPHAN(inode)=1023 [ 204.233778][T14341] max_ino=32 [ 204.237178][T14341] i_nlink=0 [ 204.240948][T14341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 204.255350][T14341] ext2 filesystem being mounted at /96/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 204.285850][T14341] netlink: 'syz.1.3523': attribute type 12 has an invalid length. [ 204.329631][T14341] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3523: bg 0: block 449: padding at end of block bitmap is not set [ 204.414090][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 204.460588][T14371] loop7: detected capacity change from 0 to 1024 [ 204.477711][T14376] loop0: detected capacity change from 0 to 256 [ 204.483018][T14371] EXT4-fs: Ignoring removed orlov option [ 204.504646][T14371] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 204.529172][T14371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.564267][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.606309][T14390] loop7: detected capacity change from 0 to 256 [ 204.698515][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3538'. [ 204.707658][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3538'. [ 204.719773][T14404] geneve2: entered promiscuous mode [ 204.725056][T14404] geneve2: entered allmulticast mode [ 204.787173][T14411] loop1: detected capacity change from 0 to 256 [ 204.795207][T14411] msdos: Unknown parameter '!' [ 204.840115][T14415] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3543'. [ 204.882021][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3544'. [ 204.891756][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3544'. [ 204.927630][T14420] loop1: detected capacity change from 0 to 512 [ 204.934502][T14420] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 205.046053][T14432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.385540][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.434768][T14463] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3557: inode has both inline data and extents flags [ 205.449336][T14463] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3557: couldn't read orphan inode 15 (err -117) [ 205.462589][T14463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.490250][T13856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.748365][T14493] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 205.761999][T14493] bond3 (unregistering): Released all slaves [ 205.776624][T14491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.801393][T13856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.928481][T14511] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 206.001932][T14519] EXT4-fs: Ignoring removed orlov option [ 206.018284][T14519] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 206.033336][T14519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.060178][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.111187][T14528] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 206.331851][T14547] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3585: corrupted inode contents [ 206.344332][T14547] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.3585: mark_inode_dirty error [ 206.356133][T14547] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3585: corrupted inode contents [ 206.369026][T14547] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3585: mark_inode_dirty error [ 206.381059][T14547] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3585: corrupted inode contents [ 206.394490][T14547] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 206.404659][T14547] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.3585: corrupted inode contents [ 206.416968][T14547] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.3585: mark_inode_dirty error [ 206.429005][T14547] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 206.438740][T14547] EXT4-fs (loop1): 1 truncate cleaned up [ 206.444983][T14547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.457802][T14547] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.458121][ T31] __quota_error: 2 callbacks suppressed [ 206.458165][ T31] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 206.483963][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 206.496614][T14547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.659953][ T29] audit: type=1400 audit(1770512870.638:4278): avc: denied { read } for pid=14552 comm="syz.1.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.749816][T14559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.933931][ T29] audit: type=1400 audit(1770512870.932:4279): avc: denied { write } for pid=14577 comm="syz.0.3598" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 206.965588][T14578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.006423][T14585] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 207.025726][T14585] EXT4-fs (loop1): 1 truncate cleaned up [ 207.036991][T14585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.052460][T14585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.112528][T14592] netlink: 'syz.2.3602': attribute type 10 has an invalid length. [ 207.126557][T14592] bridge0: port 3(netdevsim1) entered blocking state [ 207.129744][T14583] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3600: invalid indirect mapped block 256 (level 2) [ 207.133792][T14592] bridge0: port 3(netdevsim1) entered disabled state [ 207.168465][T14592] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 207.178782][T14583] EXT4-fs (loop0): 2 truncates cleaned up [ 207.179363][T14596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.181278][T14596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.190953][T14583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.205167][T14592] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 207.246093][T14592] bridge0: port 3(netdevsim1) entered blocking state [ 207.252905][T14592] bridge0: port 3(netdevsim1) entered forwarding state [ 207.264270][ T29] audit: type=1400 audit(1770512871.278:4280): avc: denied { ioctl } for pid=14593 comm="syz.1.3605" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=71662 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.313266][T14595] syzkaller0: entered promiscuous mode [ 207.318955][T14595] syzkaller0: entered allmulticast mode [ 207.696543][T13856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.731742][T14613] __nla_validate_parse: 13 callbacks suppressed [ 207.731762][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3611'. [ 207.836880][ T5354] bridge_slave_1: left allmulticast mode [ 207.842687][ T5354] bridge_slave_1: left promiscuous mode [ 207.848493][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.870601][T14620] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3614'. [ 207.882574][ T5354] bridge_slave_0: left allmulticast mode [ 207.888295][ T5354] bridge_slave_0: left promiscuous mode [ 207.894092][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.919409][T14622] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3614'. [ 207.940774][T14621] set_capacity_and_notify: 9 callbacks suppressed [ 207.940792][T14621] loop1: detected capacity change from 0 to 1024 [ 208.381455][T13462] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 208.468290][ T5354] gretap0 (unregistering): left promiscuous mode [ 208.513919][T14632] netlink: 'syz.9.3617': attribute type 1 has an invalid length. [ 208.537678][T14632] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3617'. [ 208.567675][ T5354] bond4 (unregistering): (slave bridge1): Releasing active interface [ 208.576003][ T5354] bridge1 (unregistering): left promiscuous mode [ 208.582445][ T5354] bridge1 (unregistering): left allmulticast mode [ 208.691791][ T5354] bond0 (unregistering): left promiscuous mode [ 208.698132][ T5354] bond_slave_0: left promiscuous mode [ 208.727349][ T5354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.749161][ T5354] bond0 (unregistering): Released all slaves [ 208.768934][ T5354] bond1 (unregistering): (slave veth7): Releasing active interface [ 208.775793][ T29] audit: type=1326 audit(1770512872.864:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.7.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 208.804583][ T29] audit: type=1326 audit(1770512872.864:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.7.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 208.828432][ T29] audit: type=1326 audit(1770512872.864:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.7.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 208.852038][ T29] audit: type=1326 audit(1770512872.864:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.7.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 208.875703][ T29] audit: type=1326 audit(1770512872.864:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.7.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 208.899366][ T29] audit: type=1326 audit(1770512872.895:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.7.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 208.901178][ T5354] bond1 (unregistering): Released all slaves [ 208.939521][ T5354] bond2 (unregistering): Released all slaves [ 208.949140][ T5354] bond3 (unregistering): Released all slaves [ 208.975528][ T5354] bond4 (unregistering): Released all slaves [ 208.992556][ T5354] bond5 (unregistering): Released all slaves [ 209.004426][ T5354] bond6 (unregistering): Released all slaves [ 209.014947][ T5354] bond7 (unregistering): Released all slaves [ 209.029342][T14655] loop1: detected capacity change from 0 to 512 [ 209.033467][ T5354] bond8 (unregistering): Released all slaves [ 209.046698][T14655] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.060357][ T5354] bond9 (unregistering): Released all slaves [ 209.075496][T14655] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 209.090350][ T5354] bond10 (unregistering): Released all slaves [ 209.091812][T14655] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3628: bg 0: block 248: padding at end of block bitmap is not set [ 209.111596][ T5354] bond11 (unregistering): Released all slaves [ 209.112901][T14655] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3628: Failed to acquire dquot type 1 [ 209.131022][T14620] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 209.139059][T14620] ..0ªî{X¹¦: entered allmulticast mode [ 209.145477][T14620] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 209.157966][T14655] EXT4-fs (loop1): 1 truncate cleaned up [ 209.163913][T14627] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 209.177562][T14655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 209.236233][ T5354] tipc: Disabling bearer [ 209.241298][ T5354] tipc: Left network mode [ 209.306412][ T5354] macvlan0: left promiscuous mode [ 209.313262][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 209.323288][ T5354] dummy0: left promiscuous mode [ 209.338874][ T5354] hsr_slave_0: left promiscuous mode [ 209.362528][T14672] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3633'. [ 209.371804][ T5354] hsr_slave_1: left promiscuous mode [ 209.392600][ T5354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.400204][ T5354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.437472][ T5354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.445016][ T5354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.480350][ T5354] veth1_macvtap: left promiscuous mode [ 209.489176][ T5354] veth0_macvtap: left promiscuous mode [ 209.495232][ T5354] veth1_vlan: left allmulticast mode [ 209.500695][ T5354] veth1_vlan: left promiscuous mode [ 209.506695][ T5354] veth0_vlan: left promiscuous mode [ 209.526688][T14656] loop7: detected capacity change from 0 to 32768 [ 209.577722][T14656] loop7: p1 p3 < p5 p6 p7 > [ 209.586937][T14656] loop7: p6 start 117448704 is beyond EOD, truncated [ 209.754149][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 209.756589][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 209.775993][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 209.787523][ T5575] udevd[5575]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 209.818806][T14699] tipc: Enabling of bearer rejected, already enabled [ 209.861813][T14703] loop7: detected capacity change from 0 to 512 [ 209.872551][T14703] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.896762][T14703] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 209.911740][T14703] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3644: bg 0: block 248: padding at end of block bitmap is not set [ 209.927711][T14705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3643'. [ 209.929297][T14703] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.3644: Failed to acquire dquot type 1 [ 209.952856][T14703] EXT4-fs (loop7): 1 truncate cleaned up [ 209.963998][T14703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 210.046527][T14717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.053488][T14718] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3649'. [ 210.056067][T14717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.073106][T14717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.083234][T14719] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3648'. [ 210.094859][T14717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.122081][T14713] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 210.144114][T14713] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(19) [ 210.150778][T14713] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.158396][T14713] vhci_hcd vhci_hcd.0: Device attached [ 210.167108][T14725] vhci_hcd: connection closed [ 210.175167][ T31] vhci_hcd vhci_hcd.9: stop threads [ 210.185478][ T31] vhci_hcd vhci_hcd.9: release socket [ 210.190882][ T31] vhci_hcd vhci_hcd.9: disconnect device [ 210.199148][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 210.217508][ T5354] IPVS: stop unused estimator thread 0... [ 210.225365][T14728] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 210.262430][T14728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.358388][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 210.367441][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3660'. [ 210.382927][T14748] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 210.396772][T14748] bond1 (unregistering): Released all slaves [ 210.419916][T14753] loop2: detected capacity change from 0 to 1024 [ 210.426871][T14753] SELinux: security_context_str_to_sid () failed with errno=-22 [ 210.571120][T14747] loop1: detected capacity change from 0 to 512 [ 210.629742][T14747] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3659: invalid indirect mapped block 256 (level 2) [ 210.674188][T14747] EXT4-fs (loop1): 2 truncates cleaned up [ 210.688466][T14778] netlink: 'syz.0.3671': attribute type 1 has an invalid length. [ 210.718434][T14747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.773043][T14786] loop0: detected capacity change from 0 to 512 [ 210.804335][T14786] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.837323][T14786] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 210.850811][T14786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 210.859597][T14786] EXT4-fs (loop0): orphan cleanup on readonly fs [ 210.866658][T14786] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3675: bg 0: block 361: padding at end of block bitmap is not set [ 210.883703][T14786] EXT4-fs (loop0): Remounting filesystem read-only [ 210.891128][T14786] EXT4-fs (loop0): 1 truncate cleaned up [ 210.897581][T14786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 210.951014][T13856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 211.133355][T14806] lo speed is unknown, defaulting to 1000 [ 211.185278][T14813] netlink: 'syz.2.3685': attribute type 1 has an invalid length. [ 211.222452][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.336496][T14831] loop7: detected capacity change from 0 to 512 [ 211.361669][T14831] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 211.375617][T14831] EXT4-fs (loop7): 1 truncate cleaned up [ 211.417336][T14844] loop0: detected capacity change from 0 to 512 [ 211.430261][T14837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.442278][T14844] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 211.464633][T14844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 211.472765][T14844] System zones: 1-12 [ 211.476950][T14844] EXT4-fs (loop0): orphan cleanup on readonly fs [ 211.485207][T14844] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3697: bg 0: block 361: padding at end of block bitmap is not set [ 211.506965][T14844] EXT4-fs (loop0): Remounting filesystem read-only [ 211.513981][T14844] EXT4-fs (loop0): 1 truncate cleaned up [ 211.522555][T14844] SELinux: syz.0.3697 (14844) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 211.590863][T14858] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.3697: error -117 reading directory block [ 211.679792][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 211.679810][ T29] audit: type=1400 audit(1770512875.909:4298): avc: denied { write } for pid=14863 comm="syz.2.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 211.738036][T14875] loop2: detected capacity change from 0 to 512 [ 211.744874][T14875] ext4: Unknown parameter 'fsmagic' [ 211.752932][T14876] FAULT_INJECTION: forcing a failure. [ 211.752932][T14876] name failslab, interval 1, probability 0, space 0, times 0 [ 211.765689][T14876] CPU: 0 UID: 0 PID: 14876 Comm: syz.7.3710 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.765732][T14876] Tainted: [W]=WARN [ 211.765742][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 211.765759][T14876] Call Trace: [ 211.765769][T14876] [ 211.765779][T14876] __dump_stack+0x1d/0x30 [ 211.765900][T14876] dump_stack_lvl+0x95/0xd0 [ 211.765929][T14876] dump_stack+0x15/0x1b [ 211.765978][T14876] should_fail_ex+0x263/0x280 [ 211.766020][T14876] should_failslab+0x8c/0xb0 [ 211.766048][T14876] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 211.766105][T14876] ? alloc_unbound_pwq+0x641/0x7e0 [ 211.766136][T14876] alloc_unbound_pwq+0x641/0x7e0 [ 211.766221][T14876] apply_wqattrs_prepare+0x1df/0x840 [ 211.766256][T14876] alloc_workqueue_noprof+0xd3a/0x1710 [ 211.766298][T14876] ? kfree_const+0x3e/0x50 [ 211.766389][T14876] ? dev_set_name+0x83/0xb0 [ 211.766411][T14876] hci_register_dev+0x167/0x570 [ 211.766500][T14876] hci_uart_tty_ioctl+0x520/0x5c0 [ 211.766527][T14876] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 211.766602][T14876] tty_ioctl+0x83e/0xb80 [ 211.766632][T14876] ? __pfx_tty_ioctl+0x10/0x10 [ 211.766663][T14876] __se_sys_ioctl+0xce/0x140 [ 211.766709][T14876] __x64_sys_ioctl+0x43/0x50 [ 211.766830][T14876] x64_sys_call+0x14b0/0x3000 [ 211.766938][T14876] do_syscall_64+0xc0/0x2a0 [ 211.766975][T14876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.767005][T14876] RIP: 0033:0x7fd0a9e0aeb9 [ 211.767099][T14876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.767122][T14876] RSP: 002b:00007fd0a885f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.767145][T14876] RAX: ffffffffffffffda RBX: 00007fd0aa085fa0 RCX: 00007fd0a9e0aeb9 [ 211.767160][T14876] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 211.767250][T14876] RBP: 00007fd0a885f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.767269][T14876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.767309][T14876] R13: 00007fd0aa086038 R14: 00007fd0aa085fa0 R15: 00007fff3e228cb8 [ 211.767336][T14876] [ 211.771646][T14876] Bluetooth: Can't register HCI device [ 212.269635][ T29] audit: type=1326 audit(1770512876.528:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343374][ T29] audit: type=1326 audit(1770512876.560:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343485][ T29] audit: type=1326 audit(1770512876.560:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343520][ T29] audit: type=1326 audit(1770512876.560:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343627][ T29] audit: type=1326 audit(1770512876.560:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343661][ T29] audit: type=1326 audit(1770512876.560:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343719][ T29] audit: type=1326 audit(1770512876.560:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343747][ T29] audit: type=1326 audit(1770512876.560:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.343807][ T29] audit: type=1326 audit(1770512876.560:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14915 comm="syz.1.3726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911434aeb9 code=0x7ffc0000 [ 212.642334][T14931] __nla_validate_parse: 14 callbacks suppressed [ 212.642352][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 212.657667][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3732'. [ 212.681466][T14930] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3733'. [ 212.700340][T14931] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 212.716955][T14931] bond3 (unregistering): Released all slaves [ 212.774122][T14943] xfrm0: entered promiscuous mode [ 212.819364][T14951] loop1: detected capacity change from 0 to 512 [ 212.829769][T14951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 212.869748][T14951] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3740: bg 0: block 4: invalid block bitmap [ 212.903820][T14951] EXT4-fs (loop1): 1 truncate cleaned up [ 212.982858][T14967] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.996335][ T5354] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.080845][T14978] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3752'. [ 213.166060][T14990] loop9: detected capacity change from 0 to 512 [ 213.173178][T14990] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 213.197212][T14990] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3756: bg 0: block 4: invalid block bitmap [ 213.215242][T14990] EXT4-fs (loop9): 1 truncate cleaned up [ 213.322652][T15008] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3763'. [ 213.529865][T15035] loop9: detected capacity change from 0 to 512 [ 213.536549][T15035] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 213.629061][T15041] bond1: option fail_over_mac: invalid value (127) [ 213.636898][T15041] bond1 (unregistering): Released all slaves [ 213.835954][T15051] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3780'. [ 213.845729][T15051] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3780'. [ 213.859601][T15051] netlink: 'syz.9.3780': attribute type 10 has an invalid length. [ 213.870198][T15051] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 213.880513][T15051] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 213.892931][T15051] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 214.207115][T15053] loop7: detected capacity change from 0 to 512 [ 214.247436][T15053] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.3781: corrupted inode contents [ 214.260315][T15053] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #16: comm syz.7.3781: mark_inode_dirty error [ 214.274191][T15053] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.3781: corrupted inode contents [ 214.296638][T15053] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.3781: mark_inode_dirty error [ 214.330757][T15053] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.3781: corrupted inode contents [ 214.358442][T15053] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 214.378773][T15053] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.3781: corrupted inode contents [ 214.405920][T15053] EXT4-fs error (device loop7): ext4_truncate:4635: inode #16: comm syz.7.3781: mark_inode_dirty error [ 214.429916][T15053] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 214.453112][T15053] EXT4-fs (loop7): 1 truncate cleaned up [ 214.466338][T15053] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.480419][ T5353] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 214.710506][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3785'. [ 214.740095][T15067] delete_channel: no stack [ 214.762877][T15069] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3787'. [ 214.775477][ T1034] IPVS: starting estimator thread 0... [ 214.844333][T15060] netlink: 'syz.1.3783': attribute type 4 has an invalid length. [ 214.844511][T15074] tipc: Enabling of bearer rejected, already enabled [ 214.861950][T15070] IPVS: using max 1920 ests per chain, 96000 per kthread [ 214.909362][ T9180] Bluetooth: hci0: command 0x1003 tx timeout [ 214.915462][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.924969][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3792'. [ 215.107969][T15100] loop7: detected capacity change from 0 to 256 [ 215.119642][T15102] netlink: 'syz.2.3800': attribute type 1 has an invalid length. [ 215.138111][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 215.188116][T15106] bond0: entered promiscuous mode [ 215.193355][T15106] bond_slave_0: entered promiscuous mode [ 215.199336][T15106] bond_slave_1: entered promiscuous mode [ 215.218305][T15106] gretap0: entered promiscuous mode [ 215.224892][T15106] hsr1: entered promiscuous mode [ 215.230011][T15108] netlink: 'syz.1.3803': attribute type 1 has an invalid length. [ 215.421067][T15132] loop2: detected capacity change from 0 to 512 [ 215.468456][T15138] netlink: 'syz.7.3816': attribute type 6 has an invalid length. [ 215.505643][T15138] loop7: detected capacity change from 0 to 8192 [ 215.645197][T15150] sit0: left promiscuous mode [ 215.667578][T15150] bridge0: port 3(netdevsim1) entered disabled state [ 215.674632][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.681879][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.729291][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.741560][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.779579][T15150] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 215.802561][T15150] hsr1: left promiscuous mode [ 215.811671][T15151] geneve2: entered promiscuous mode [ 215.817499][T15151] geneve2: entered allmulticast mode [ 215.974486][T15177] netlink: 'syz.9.3827': attribute type 2 has an invalid length. [ 216.014951][T15181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.126276][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.128231][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 216.139655][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.189435][T15199] loop1: detected capacity change from 0 to 512 [ 216.200840][T15199] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.216117][T15202] netlink: 'syz.7.3839': attribute type 1 has an invalid length. [ 216.224125][T15202] netlink: 'syz.7.3839': attribute type 4 has an invalid length. [ 216.254364][T15199] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 216.270454][T15199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3838: bg 0: block 248: padding at end of block bitmap is not set [ 216.296635][T15199] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.3838: Failed to acquire dquot type 1 [ 216.310178][T15199] EXT4-fs (loop1): 1 truncate cleaned up [ 216.319924][T15199] EXT4-fs mount: 9 callbacks suppressed [ 216.319939][T15199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 216.344200][T15210] loop2: detected capacity change from 0 to 512 [ 216.353915][T15210] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 216.363310][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.372743][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.383401][T15210] EXT4-fs (loop2): 1 truncate cleaned up [ 216.394645][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.403872][T15210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.420860][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.436047][T13856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 216.464570][T15210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.491330][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 216.598554][T15226] loop7: detected capacity change from 0 to 256 [ 216.694267][T15236] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.756734][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 216.756754][ T29] audit: type=1400 audit(1770512881.242:4353): avc: denied { create } for pid=15235 comm="syz.7.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 216.828095][ T29] audit: type=1326 audit(1770512881.284:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 216.851797][ T29] audit: type=1326 audit(1770512881.284:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 216.875517][ T29] audit: type=1326 audit(1770512881.284:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 216.899283][ T29] audit: type=1326 audit(1770512881.284:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 216.923142][ T29] audit: type=1326 audit(1770512881.284:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 216.946821][ T29] audit: type=1326 audit(1770512881.284:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 216.970427][ T29] audit: type=1326 audit(1770512881.284:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 217.028556][T15246] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 217.077640][T15246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 217.097165][T15251] netlink: 'syz.9.3857': attribute type 4 has an invalid length. [ 217.107538][T15246] System zones: 1-12 [ 217.118473][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 217.125869][T15246] EXT4-fs (loop0): orphan cleanup on readonly fs [ 217.139732][T15246] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3854: bg 0: block 361: padding at end of block bitmap is not set [ 217.159207][ T29] audit: type=1326 audit(1770512881.473:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 217.183062][ T29] audit: type=1326 audit(1770512881.473:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15235 comm="syz.7.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a9e0aeb9 code=0x7ffc0000 [ 217.185537][T15246] EXT4-fs (loop0): Remounting filesystem read-only [ 217.214305][T15246] EXT4-fs (loop0): 1 truncate cleaned up [ 217.220522][T15246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 217.255082][T15246] SELinux: syz.0.3854 (15246) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 217.339533][T15260] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.3854: error -117 reading directory block [ 217.406226][T15267] netlink: 'syz.7.3862': attribute type 1 has an invalid length. [ 217.414316][T15267] __nla_validate_parse: 142 callbacks suppressed [ 217.414406][T15267] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3862'. [ 217.477284][T15269] EXT4-fs: Ignoring removed nobh option [ 217.483640][T15269] EXT4-fs: Ignoring removed orlov option [ 217.495931][T15269] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 1: comm syz.2.3863: invalid block [ 217.540455][T15269] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3863: couldn't read orphan inode 11 (err -117) [ 217.572049][T15269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.626693][T15278] set_capacity_and_notify: 4 callbacks suppressed [ 217.626714][T15278] loop7: detected capacity change from 0 to 1024 [ 217.642166][T15278] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.687735][T15278] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.709776][T12583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.730745][T15278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.745702][T15280] netlink: 'syz.1.3868': attribute type 1 has an invalid length. [ 217.754793][T15280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3868'. [ 217.777004][T15278] EXT4-fs error (device loop7): __ext4_iget:5426: inode #12: block 13: comm syz.7.3866: invalid block [ 217.797128][T15278] EXT4-fs (loop7): Remounting filesystem read-only [ 217.833390][T10251] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.038644][T15306] loop7: detected capacity change from 0 to 128 [ 218.109101][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.146388][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'. [ 218.155380][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'. [ 218.165405][T15316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3880'. [ 218.331523][T15331] netlink: 'syz.7.3889': attribute type 1 has an invalid length. [ 218.357972][T15333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3888'. [ 218.367130][T15333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3888'. [ 218.386436][T15331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.395217][T15341] bond4: option tlb_dynamic_lb: unable to set because the bond device is up [ 218.404635][T15333] lo speed is unknown, defaulting to 1000 [ 218.410649][T15333] lo speed is unknown, defaulting to 1000 [ 218.421811][T15333] lo speed is unknown, defaulting to 1000 [ 218.448195][T15333] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 218.491735][T15350] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3895'. [ 218.500946][T15333] lo speed is unknown, defaulting to 1000 [ 218.510124][T15333] lo speed is unknown, defaulting to 1000 [ 218.512271][T15350] ..0ªî{X¹¦: renamed from gretap0 [ 218.533860][T15350] ..0ªî{X¹¦: entered allmulticast mode [ 218.542829][T15350] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 218.558965][T15333] lo speed is unknown, defaulting to 1000 [ 218.569538][T15333] lo speed is unknown, defaulting to 1000 [ 218.583230][T15333] lo speed is unknown, defaulting to 1000 [ 218.598271][T15351] loop2: detected capacity change from 0 to 128 [ 218.624636][T15356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3896'. [ 218.645688][T15351] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.690581][T15351] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.775139][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'. [ 218.811404][T15370] macvlan3: entered promiscuous mode [ 218.846361][T12583] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.856453][T15375] netlink: 'syz.1.3903': attribute type 1 has an invalid length. [ 218.912868][T15382] FAULT_INJECTION: forcing a failure. [ 218.912868][T15382] name failslab, interval 1, probability 0, space 0, times 0 [ 218.925744][T15382] CPU: 0 UID: 0 PID: 15382 Comm: syz.9.3906 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.925925][T15382] Tainted: [W]=WARN [ 218.925936][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 218.925953][T15382] Call Trace: [ 218.925963][T15382] [ 218.925974][T15382] __dump_stack+0x1d/0x30 [ 218.926005][T15382] dump_stack_lvl+0x95/0xd0 [ 218.926027][T15382] dump_stack+0x15/0x1b [ 218.926123][T15382] should_fail_ex+0x263/0x280 [ 218.926159][T15382] should_failslab+0x8c/0xb0 [ 218.926190][T15382] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 218.926299][T15382] ? alloc_workqueue_noprof+0x4f2/0x1710 [ 218.926347][T15382] alloc_workqueue_noprof+0x4f2/0x1710 [ 218.926407][T15382] ? dev_set_name+0x83/0xb0 [ 218.926436][T15382] hci_register_dev+0x1a7/0x570 [ 218.926475][T15382] hci_uart_tty_ioctl+0x520/0x5c0 [ 218.926500][T15382] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 218.926540][T15382] tty_ioctl+0x83e/0xb80 [ 218.926569][T15382] ? __pfx_tty_ioctl+0x10/0x10 [ 218.926654][T15382] __se_sys_ioctl+0xce/0x140 [ 218.926773][T15382] __x64_sys_ioctl+0x43/0x50 [ 218.926807][T15382] x64_sys_call+0x14b0/0x3000 [ 218.926837][T15382] do_syscall_64+0xc0/0x2a0 [ 218.926884][T15382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.926913][T15382] RIP: 0033:0x7f5c9527aeb9 [ 218.926934][T15382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.927001][T15382] RSP: 002b:00007f5c93cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.927027][T15382] RAX: ffffffffffffffda RBX: 00007f5c954f5fa0 RCX: 00007f5c9527aeb9 [ 218.927047][T15382] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 218.927122][T15382] RBP: 00007f5c93cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 218.927140][T15382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.927157][T15382] R13: 00007f5c954f6038 R14: 00007f5c954f5fa0 R15: 00007fff0f5ea618 [ 218.927236][T15382] [ 218.927852][T15382] Bluetooth: Can't register HCI device [ 219.099929][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.316283][T15410] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 219.327905][T15410] bond5 (unregistering): Released all slaves [ 219.356933][T15414] netlink: 'syz.1.3918': attribute type 1 has an invalid length. [ 219.514752][T15429] loop2: detected capacity change from 0 to 512 [ 219.553114][T15429] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.3923: Bad quota inum: 1, type: 0 [ 219.577400][T15437] loop9: detected capacity change from 0 to 128 [ 219.597489][T15429] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 219.612542][T15429] EXT4-fs (loop2): mount failed [ 219.627499][T15437] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 219.627536][T15437] EXT4-fs: failed to create workqueue [ 219.642566][T15437] EXT4-fs (loop9): mount failed [ 219.920276][T15473] loop9: detected capacity change from 0 to 256 [ 219.953154][T15477] netlink: 'syz.2.3931': attribute type 13 has an invalid length. [ 219.986721][T15473] loop9: detected capacity change from 0 to 2048 [ 220.035198][T15484] team0: entered promiscuous mode [ 220.040436][T15484] team_slave_0: entered promiscuous mode [ 220.046453][T15484] team_slave_1: entered promiscuous mode [ 220.052240][T15484] team0: entered allmulticast mode [ 220.057396][T15484] team_slave_0: entered allmulticast mode [ 220.063205][T15484] team_slave_1: entered allmulticast mode [ 220.081085][T15484] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.090292][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.100714][T15484] bridge0: port 3(team0) entered blocking state [ 220.107141][T15484] bridge0: port 3(team0) entered disabled state [ 220.144068][T15487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.164367][T15473] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 220.392666][T15503] loop1: detected capacity change from 0 to 128 [ 220.403302][T15503] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.520583][T15509] lo speed is unknown, defaulting to 1000 [ 220.532407][T15511] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 220.539030][T15511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.546658][T15511] vhci_hcd vhci_hcd.0: Device attached [ 220.557415][T15512] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 220.564790][ T52] vhci_hcd vhci_hcd.9: stop threads [ 220.570217][ T52] vhci_hcd vhci_hcd.9: release socket [ 220.575671][ T52] vhci_hcd vhci_hcd.9: disconnect device [ 220.868757][T15552] FAULT_INJECTION: forcing a failure. [ 220.868757][T15552] name failslab, interval 1, probability 0, space 0, times 0 [ 220.881739][T15552] CPU: 0 UID: 0 PID: 15552 Comm: syz.7.3957 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.881850][T15552] Tainted: [W]=WARN [ 220.881861][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 220.881879][T15552] Call Trace: [ 220.881889][T15552] [ 220.881914][T15552] __dump_stack+0x1d/0x30 [ 220.882024][T15552] dump_stack_lvl+0x95/0xd0 [ 220.882120][T15552] dump_stack+0x15/0x1b [ 220.882148][T15552] should_fail_ex+0x263/0x280 [ 220.882196][T15552] should_failslab+0x8c/0xb0 [ 220.882226][T15552] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 220.882265][T15552] ? alloc_workqueue_noprof+0x62b/0x1710 [ 220.882384][T15552] alloc_workqueue_noprof+0x62b/0x1710 [ 220.882464][T15552] ? dev_set_name+0x83/0xb0 [ 220.882493][T15552] hci_register_dev+0x1a7/0x570 [ 220.882614][T15552] hci_uart_tty_ioctl+0x520/0x5c0 [ 220.882720][T15552] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 220.882824][T15552] tty_ioctl+0x83e/0xb80 [ 220.882859][T15552] ? __pfx_tty_ioctl+0x10/0x10 [ 220.882895][T15552] __se_sys_ioctl+0xce/0x140 [ 220.883085][T15552] __x64_sys_ioctl+0x43/0x50 [ 220.883133][T15552] x64_sys_call+0x14b0/0x3000 [ 220.883168][T15552] do_syscall_64+0xc0/0x2a0 [ 220.883268][T15552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.883298][T15552] RIP: 0033:0x7fd0a9e0aeb9 [ 220.883319][T15552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.883343][T15552] RSP: 002b:00007fd0a885f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.883371][T15552] RAX: ffffffffffffffda RBX: 00007fd0aa085fa0 RCX: 00007fd0a9e0aeb9 [ 220.883423][T15552] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 220.883442][T15552] RBP: 00007fd0a885f090 R08: 0000000000000000 R09: 0000000000000000 [ 220.883460][T15552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.883477][T15552] R13: 00007fd0aa086038 R14: 00007fd0aa085fa0 R15: 00007fff3e228cb8 [ 220.883503][T15552] [ 220.884755][T15552] Bluetooth: Can't register HCI device [ 221.062317][T15554] loop1: detected capacity change from 0 to 512 [ 221.085315][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 221.189360][T15563] syzkaller0: entered allmulticast mode [ 221.196138][T15563] syzkaller0: entered promiscuous mode [ 221.211817][T15563] syzkaller0: left promiscuous mode [ 221.243464][T15563] syzkaller0: left allmulticast mode [ 221.287746][T15573] loop9: detected capacity change from 0 to 256 [ 221.419872][T15579] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.430508][T15577] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 221.436468][T15579] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.459909][T15577] bond3 (unregistering): Released all slaves [ 221.493110][T13462] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.554495][T15589] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.595833][T15589] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.609181][T15589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.625217][T15589] EXT4-fs error (device loop2): __ext4_iget:5426: inode #12: block 13: comm syz.2.3970: invalid block [ 221.636622][T15589] EXT4-fs (loop2): Remounting filesystem read-only [ 221.660061][T12583] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.678467][T15597] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.3972: Bad quota inum: 2, type: 0 [ 221.691896][T15597] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=2). Please run e2fsck to fix. [ 221.707379][T15597] EXT4-fs (loop1): mount failed [ 221.850543][T15612] validate_nla: 2 callbacks suppressed [ 221.850560][T15612] netlink: 'syz.9.3976': attribute type 1 has an invalid length. [ 221.999482][T15622] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.999508][T15622] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.071437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.091781][T13856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 222.137541][T15634] tipc: Enabling of bearer rejected, failed to enable media [ 222.211369][T15636] __nla_validate_parse: 20 callbacks suppressed [ 222.211387][T15636] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3987'. [ 222.253036][T15647] pim6reg: entered allmulticast mode [ 222.259405][T15647] team0: entered allmulticast mode [ 222.264607][T15647] team_slave_0: entered allmulticast mode [ 222.270459][T15647] team_slave_1: entered allmulticast mode [ 222.301342][T15649] program syz.0.3992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.388099][T15653] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 222.405758][T15653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 222.414004][T15653] System zones: 1-12 [ 222.418764][T15653] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.425843][T15653] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3994: bg 0: block 361: padding at end of block bitmap is not set [ 222.440712][T15653] EXT4-fs (loop1): Remounting filesystem read-only [ 222.455308][T15653] EXT4-fs (loop1): 1 truncate cleaned up [ 222.461620][T15653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 222.475830][T15653] SELinux: syz.1.3994 (15653) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 222.524376][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3998'. [ 222.533551][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3998'. [ 222.575211][T15665] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.3994: error -117 reading directory block [ 222.895093][T15686] set_capacity_and_notify: 4 callbacks suppressed [ 222.895178][T15686] loop0: detected capacity change from 0 to 256 [ 222.984205][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4009'. [ 223.011067][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 223.011085][ T29] audit: type=1400 audit(1770512887.804:4427): avc: denied { remount } for pid=15681 comm="syz.7.4005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 223.061935][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.136778][T15698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4012'. [ 223.203106][T15702] netlink: 'syz.0.4014': attribute type 32 has an invalid length. [ 223.211041][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'. [ 223.227618][T15702] bond1: option coupled_control: invalid value (77) [ 223.234813][T15704] loop7: detected capacity change from 0 to 512 [ 223.242264][T15702] bond1 (unregistering): Released all slaves [ 223.264273][T15704] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4015: corrupted inode contents [ 223.276565][T15704] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #16: comm syz.7.4015: mark_inode_dirty error [ 223.289203][T15704] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4015: corrupted inode contents [ 223.301466][T15704] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.4015: mark_inode_dirty error [ 223.313298][T15704] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4015: corrupted inode contents [ 223.325761][T15704] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 223.339470][T15704] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4015: corrupted inode contents [ 223.352842][T15704] EXT4-fs error (device loop7): ext4_truncate:4635: inode #16: comm syz.7.4015: mark_inode_dirty error [ 223.356667][T15710] loop0: detected capacity change from 0 to 1024 [ 223.370624][T15704] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 223.375938][T15710] EXT4-fs: Ignoring removed oldalloc option [ 223.385642][T15710] EXT4-fs: Ignoring removed bh option [ 223.392512][T15704] EXT4-fs (loop7): 1 truncate cleaned up [ 223.398980][T15704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.411960][T15704] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.423557][T15710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.424889][T15704] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.500688][T15713] ================================================================== [ 223.508814][T15713] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 223.516747][T15713] [ 223.519113][T15713] write to 0xffff88811a45f304 of 4 bytes by task 15710 on cpu 1: [ 223.526964][T15713] xas_set_mark+0x12b/0x140 [ 223.531490][T15713] __folio_start_writeback+0x17b/0x370 [ 223.536984][T15713] ext4_bio_write_folio+0x5ad/0x9f0 [ 223.542209][T15713] mpage_process_page_bufs+0x4a1/0x620 [ 223.547736][T15713] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 223.553657][T15713] ext4_do_writepages+0x9f6/0x2800 [ 223.558835][T15713] ext4_writepages+0x18f/0x320 [ 223.563632][T15713] do_writepages+0x1c6/0x310 [ 223.568260][T15713] file_write_and_wait_range+0x178/0x2f0 [ 223.573925][T15713] generic_buffers_fsync_noflush+0x45/0x130 [ 223.579982][T15713] ext4_sync_file+0x1aa/0x680 [ 223.584687][T15713] vfs_fsync_range+0x10d/0x130 [ 223.589473][T15713] ext4_buffered_write_iter+0x34f/0x3c0 [ 223.595058][T15713] ext4_file_write_iter+0x380/0xf70 [ 223.600287][T15713] iter_file_splice_write+0x6bc/0xa80 [ 223.605693][T15713] direct_splice_actor+0x156/0x2a0 [ 223.610829][T15713] splice_direct_to_actor+0x311/0x670 [ 223.616323][T15713] do_splice_direct+0x119/0x1a0 [ 223.621205][T15713] do_sendfile+0x382/0x650 [ 223.625741][T15713] __x64_sys_sendfile64+0x105/0x150 [ 223.630998][T15713] x64_sys_call+0x2db1/0x3000 [ 223.635705][T15713] do_syscall_64+0xc0/0x2a0 [ 223.640246][T15713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.646255][T15713] [ 223.648603][T15713] read to 0xffff88811a45f304 of 4 bytes by task 15713 on cpu 0: [ 223.656260][T15713] __writeback_single_inode+0x201/0x7b0 [ 223.661879][T15713] writeback_single_inode+0x16d/0x3f0 [ 223.667326][T15713] sync_inode_metadata+0x6e/0xa0 [ 223.672306][T15713] generic_buffers_fsync_noflush+0xee/0x130 [ 223.678250][T15713] ext4_sync_file+0x1aa/0x680 [ 223.682954][T15713] vfs_fsync_range+0x10d/0x130 [ 223.687772][T15713] ext4_buffered_write_iter+0x34f/0x3c0 [ 223.693358][T15713] ext4_file_write_iter+0x380/0xf70 [ 223.698596][T15713] iter_file_splice_write+0x6bc/0xa80 [ 223.703978][T15713] direct_splice_actor+0x156/0x2a0 [ 223.709110][T15713] splice_direct_to_actor+0x311/0x670 [ 223.714493][T15713] do_splice_direct+0x119/0x1a0 [ 223.719549][T15713] do_sendfile+0x382/0x650 [ 223.724001][T15713] __x64_sys_sendfile64+0x105/0x150 [ 223.729229][T15713] x64_sys_call+0x2db1/0x3000 [ 223.733943][T15713] do_syscall_64+0xc0/0x2a0 [ 223.738487][T15713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.744417][T15713] [ 223.746757][T15713] value changed: 0x0a000021 -> 0x04000021 [ 223.752482][T15713] [ 223.754828][T15713] Reported by Kernel Concurrency Sanitizer on: [ 223.761264][T15713] CPU: 0 UID: 0 PID: 15713 Comm: syz.0.4016 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.772671][T15713] Tainted: [W]=WARN [ 223.776491][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 223.786594][T15713] ================================================================== [ 224.052331][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.161916][T13856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.043258][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.033916][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 227.024062][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 227.262671][T12790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 228.014623][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.005166][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.995734][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.986818][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.976842][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 232.967421][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available