last executing test programs: 40.486199704s ago: executing program 1 (id=631): inotify_init() write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000000efff", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 40.367681031s ago: executing program 1 (id=638): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x750b1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0xffffffffffffffff, 0x43a1bd76, 0x2, 0x20000000000009, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140afffffffff4000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) r4 = dup(r2) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$kcm(0x10, 0x2, 0x0) 40.272192837s ago: executing program 1 (id=642): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141142, 0x50) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0xfdef, 0x600, 0x20000000}]) 40.101413637s ago: executing program 1 (id=651): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000577000/0x3000)=nil, 0x6, &(0x7f0000000040)=[{0x4}], 0x1, 0xe4, 0x0, 0x11, 0x0, 0x1}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000740)={{}, 0x4, &(0x7f0000000140)=[0x0, 0x7, 0xd, 0x1], 0x10001, 0x2, 0x1}) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1089e, &(0x7f0000000100)={[{@abort}, {@nogrpid}, {@auto_da_alloc}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="d220a3d5c717ab96f0dec55d86dd", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x5c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a00)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_open_dev$ttys(0xc, 0x2, 0x1) r13 = socket$key(0xf, 0x3, 0x2) r14 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r0}, 0x8) r15 = syz_clone(0x2002280, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r15, 0x0) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0}, &(0x7f0000001bc0)=0xc) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r7, @ANYBLOB="2c6d6f64653d30303030303030303030303030303030303030303031312c7569643de2787b5b736b7a4d76e63ee2ea10482766464172d19b55bc61ffce5e258dd1688750e69a9561d5ef8d60987a2c882eecb9810bc1658766829f733422f759aed054a7ef12e5d75049ed40862f5796ead79ae146644f171f84ec8df2612be5d8b25577d35fa73b0100000046e1784a066810a897b8383def9f16e6a986f5c9ad6fc2409a32d3f2", @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=r6, @ANYBLOB=',mode=00000000000000000000017,gid=', @ANYRESHEX=r10, @ANYBLOB=',mode=00000000000000000000006,\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file1\x00'}) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000840)="72729fda3c2dda5ac335fc08d5a70acb2c396f61c81b06d69a3221b4c8c960e777ec4f1b2da42125d3ea5e7df3c27f", 0x2f}, {&(0x7f0000000880)="0a80ff768cfc4d55e10c9e46b2eb13ce437d637abd895fe4e3ea0159b18e71c0ca4d558376ba9adc91c6816e9d612f14f2a45aff1a2d9d07586e7d8309e0b0ae468bd19558f9c29ccb68fd4471dee86dfca6063e2e0b6bd14af003ec4ceff8e155ec6186d047f79672f5332e5627e1db867e2fdf906246db8c4208c2d931de5e0e45feb29e7ef134cf32501b7edfa69219b64fb65bfed33c0096461e6f6646dbb272682359469c57e3c91ad9eb32d460ea70ab6f2b1874cff862172396511101585120da680f0ec43d213dc3e5e412ec76f69e3a8bef31c2c47b013f74ab1464c1487e", 0xe3}, {&(0x7f0000000980)="218f8bf824063287574930d45fc5af7c07cb1f1b5686dc27ab98fe575ca644ea46fd7c5d", 0x24}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="28b77de1c50000000000004c09f34cbb465719388e1326042017ed24d58a0209", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x20, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r19, 0x89f1, &(0x7f0000000080)) 39.314134252s ago: executing program 1 (id=654): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x101101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) socket$kcm(0x29, 0x7, 0x0) getsockopt(r0, 0xd1, 0xa22, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x2b8, 0x0, 0xe0, 0x0, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x24}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4, 0xf}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'bridge_slave_1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x56055605, 0x38, 0x2, 0x2ee, 0x2, 0x6, 0xffff]}}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x2e, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x4000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) set_mempolicy(0x4000, &(0x7f0000000180)=0x9c5, 0xed) 38.505192809s ago: executing program 1 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="1380000023b201002400128009000100626f6e64ea000000140002800800070081"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 38.479620461s ago: executing program 32 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="1380000023b201002400128009000100626f6e64ea000000140002800800070081"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 31.426825143s ago: executing program 2 (id=786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x1, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb17", 0x52}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 31.396023406s ago: executing program 2 (id=787): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x4, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x7, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) setgroups(0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x810, 0xffffffffffffffff, 0xced01000) syz_usb_connect(0x4, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x5d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000090601020000000000000000914700000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bind$isdn(0xffffffffffffffff, &(0x7f0000000200)={0x22, 0x9, 0xc8, 0x4, 0xb3}, 0x6) 30.769828272s ago: executing program 2 (id=809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000005000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140"], 0xa4}}, 0x0) 30.649583969s ago: executing program 2 (id=810): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@grpid}, {@norecovery}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x4}}], [{@obj_type={'obj_type', 0x3d, '\xbb'}}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000508000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="f1c2348fb4010000000000000046758b"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000340), 0x9, 0x558, &(0x7f0000001a80)="$eJzs3c9vHFcdAPDvjH8mdeoEeoAKSIBCQFHW8aaNql5oLiBUVUIgDohDauyNZbLOBntd1cYS7t8AB67wJ3BA4oDUEwduHJE4IKRyQApggWIkkAbN7NjZJLvtut4f1e7nI41m3szufL8vzsx7+7yeF8DEuhIRBxExGxFvRcRiuT8pl3i9teSve3S4v3p0uL+aRJZ95x9JcTzfF23vyT1XnnM+Ir79jYgfJG0B51qr7d29eyv1em2r3L3U3HywtL27d31jc2W9tl67X63eWr5149Wbr1T7VtfLm796+PWNN77729989v0/HHz1x3laC+Wx9np8FNNd9reqPnMS5/i1b5wl2MfIVLmeHXEefDRpRHwiIr5QXP+LMdX1fzIAMC6ybDGyxfYyADDu0mIMLEkr5VjAQqRppdIaw3shzqf1xnbz2t3Gzv211ljZxZhJ727Uazcuzf3pR0WPYSbJy8vFseJ4Ua4+Vb4ZEZci4mdz54pyZbVRXxtdtwcAJtpzT7X//55rtf89SAaeHAAwOPOjTgAAGDrtPwBMHu0/AEyeHtr/8pf9BwPPBQAYjlN8/k8HmQcAMDzG/wFg8mj/AWCifOvNN/MlOyqff7329u7Ovcbb19dq2/cqmzurldXG1oPKeqOxXjyzZ/PDzldvNB4svxw77yw1a9vNpe3dvTubjZ37zTvFc73v1GaGUisA4INcuvzeH5OIOHjtXLFE21wO2moYb71/n2fOHQHGTNtD/Ez8AxPGRQ+Tq/ce/e8HmgcwOh0f5j3fcfNJPz9FEN8zgo+Vq5/uffzfHM8wXvw9L0yuqYjWxH6nMjeQXIDhOv34vx4DjIssSyLLzp2UsiybbS8AAOPnDN/ozX7Sjw4IMHJJa+n6fO++/P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxsxCRPwwkrRSzuy5EGlaqURciIiLMZPc3ajXbkTE83E5Imbm8vLyqJMGAM4o/Vs591dcXXxp4emjs8l/isn+Z/PWv9y3tZzv/+fJ/rnW2yOqj993hnkFAYA+e2el2dyqluu2D/KPDvdXj5dh5vPwdvyvnIr4Qhzurx6dxJ+O6WI9X/Qlzv8rKcutuUhfjIipPsQ/eDciPtWp/kkxNnKxnPm0PX6UsS8MNX76RPy0ONZa552vT/YhF5g0792OiNc7XX9pXCnWna//+eIOdXYPb7dOdlTe+44O92eP4x/f/6Y6xM+v+Su9xnj5d998Zme22Dr2bsSL0yfx56Pt/nMcP+kS/6Ue4//5M5/76de6HMt+EXE1nqj/6uMIj7eWmpsPlrZ3965vbK6s19Zr96vVW8u3brx685XqUjFGvXQ8Uv2sv7927fluueX1P98l/nzH+s+evPdLPdb/l/996/uf/4D4X/lip/hpvNAxfkveJn65x/gr53/ddfruPP5al/p/2M//Wo/x3//r3lqPLwUAhmB7d+/eSr1e2zrTRv4ptB/neWYjT7GvJ+ywMduW/F9isLFOtTHTr3/V6WEnP33SV+zvmb+Xn3HIP4u077U408ajYcUa7X0JGLzHF/2oMwEAAAAAAAAAAAAAALoZxp8ujbqOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjK//BwAA//9FJ7wx") faccessat2(r4, 0x0, 0x44, 0x0) chown(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x27, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4000}, 0x10}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7fffff, 0x4012011, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000000024000280080007400000050000000440000400000800024b0000000e080006ec000000070900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7, 0x3b}, &(0x7f0000000040)=0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket(0xa, 0x1, 0x0) 30.535349746s ago: executing program 2 (id=812): ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0xe7b) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x9, 0x574}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x6, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x37d1e0b4c5790ba2, 0xff, 0x0, 0xff], [0xff, 0x0, 0xffffffff, 0xff000000], 'veth0_macvtap\x00', 'vlan0\x00', {0xff}, {}, 0x2c, 0x9, 0x4, 0x20}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x8, 0x7f, 0x7fff, 'syz0\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffffff, 0xff000000], [0xffffffff, 0x0, 0xffffff00], 'vlan1\x00', 'veth0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x0, 0x3c}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x40}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) listen(0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x1, 0xc040) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000840)="294149ab20dcf3bbba293f763b5a38606501e3d23afaf694fe39ca8b58a125ac131214c062fd71877f48d74f3bcb66d5aeb053b78fb2712dbe5a98eac2b69a0ccd25c13f90515a533e9850a97b1d37e490e98bcf0fbbf6ab953e99d95ab32b700ecf2e54ea7699541646d17d98b529956c1a858308d7a6e9250e63c6b6c9376087fd56709f32b5f376a0c8d5be658d1130057ab2247828b5d65c830491be41c90f27ca540a7b5ded8db0837a3a66a70e7d0182842e2e0aea55c0b1214de7c54f3c8ec74376e43efd324b4b94168a901283bf07b081bcc8") 30.134327609s ago: executing program 2 (id=820): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="2369aa80a65e", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x4, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 30.134103199s ago: executing program 33 (id=820): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="2369aa80a65e", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x4, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.149421534s ago: executing program 3 (id=1325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2, 0x0, 0x0, 0x60}, 0x5) 1.967319745s ago: executing program 6 (id=1329): syz_open_dev$loop(0x0, 0x1, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x125) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private2, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x82}}}}}}}, 0x0) 1.914261178s ago: executing program 6 (id=1332): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800ef0100800000000000000a0000000000c800000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000070012"], 0x3c}, 0x1, 0x11, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1.737738138s ago: executing program 0 (id=1334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000130a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a3000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 1.723138829s ago: executing program 4 (id=1335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x2, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x200000fffd, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/32, 0x20}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/84, 0x54}], 0x3, &(0x7f00000003c0)=""/154, 0x9a}, 0x60000001) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0xfe, 0x1000000000000192, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x40804) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x31, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 1.70520797s ago: executing program 0 (id=1336): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ffdd935517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="69070000a6faa97bbe9d3e3f0a37e1117782674ad296be906edb313d86b1cbb1d166ee1338d0c625532cc4ddf5601b86e84a01774c057ff87c467f163b67865605c57397a9649736525df16594", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x80000, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x5, 0x2}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) write(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000540)="952c6b84e6e5327e3d6c5bfdca21a3f3bf2f258cb5bef16784660355576a02166f52d4a973e29d1448261605471aa38e85a5b5cdaf9d145bbece8414750d484e6f940312b3539f44e06deddbd6ba855247891538f0e3c82cd347987021e719dd1d8a925ef7882e9c3885e390a0f5ca33bcbeb8ee6bacb6a3ea81d525d422dcee7a9b5058a23bc16266d530f36a0ef350915ddbe2786139ebdc1091fedbb8d03d21b824459e3cbceb83beb89adeea40ff6afa5c8ca2e945a9d1b7515160cb2e0ae6504185504bb18a2352df0649f7fef2fed59b308d007f9443e6f2507bad8bdd53437c437c4a7608a6c7993b969c96ff748f11eb59dbf981c238a0174854", &(0x7f0000000780)=""/225, &(0x7f0000000080)="0b1812d74d0f1f46f743a4165e5e155d3f3bb4532a8176362a1fae75dd92", &(0x7f0000000880)="5a0ed8721ed267fb397bd9adae68597d721b36ad5e76ccac2f57bf5855cbe420faf87c055ef884058752a8144ceb1e635cb991f7c3dce2e23b53efc40144fbefc273dd5227be6f0c28cc0ddd9b5a820c2cf09ffa22723604cc610503607b831a0bedd5f229a282d68a3b92d0393c69bea80ed07ec480a3502b88380d07a13c675053cc5981e2f227375dce4e5c8424799ad01923b0d49c5a945bf62a53bb3d2334363cb75502cfe58d071ae38373724805badd5d474a1c362d11dd0e03f5bf3f5908d96e6456b474b7893ebe3e3b26cd6ee9824b35e328e1914611", 0x53, r2, 0x4}, 0x38) 1.626077215s ago: executing program 3 (id=1338): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r3, 0x7ff, 0x1) r4 = signalfd(r0, &(0x7f0000000200), 0x8) r5 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f00000002c0)=0x5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x44f42, 0x88) munmap(&(0x7f0000007000/0x4000)=nil, 0x4000) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x0, 0x11, 0xc3, &(0x7f00000003c0)="4694dba2e3f887dbb998253e415bd6dcd9", &(0x7f0000000400)=""/195, 0x3, 0x0, 0xc5, 0x27, &(0x7f0000000a40)="f76e23724b929b29617734c81d0282203acc66297c81ed8b275d64f9cc4d1741b42e43dc5a0282d3f5d3081b94b69206a4e8b2fb0735b63ebb7ed5b6fd23390c13860e0d26d82ab8227599158df5857707087f65912fbcddc40105267fa08aab742028a5bb5666ccf4af640e14164ab64cc0057eb407cb48f53f61d3a020be1f908c98177e7945817c079b639eb3b0c628644216f97aa922388c48c009588ce2c578c729a9221c29db224b1bc340b86d7edb539451abb035533dec89ceacf129b7a26317d8", &(0x7f0000000b40)="cb1d57d37a0733c2d0d615d94b73033983212eb260a38ba5283afcaeac2b3064952cf759405ee5", 0x3, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getdents64(r3, 0x0, 0x10) 1.434198177s ago: executing program 0 (id=1339): mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x28}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x48009) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (fail_nth: 2) write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[], 0x540) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) getuid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000905c00fbdbdf250a8000000000000000000000080002a54a101cafb81c11762856000b010102"], 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0xc0884) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000114000427bd7000fbdbdf250800010000000100020000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4802) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000bae296d77a38906f00000000000000000000f5000000"], 0x50) r4 = bpf$PROG_LOAD(0x22, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 1.131567954s ago: executing program 5 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)={0x24, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x24}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x6, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000140)='GPL\x00', 0x3, 0x9b, &(0x7f0000000200)=""/155, 0x41000, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xf, 0x8, 0x4}, 0x10, 0x1999, r1, 0x3, 0x0, &(0x7f0000000340)=[{0x3, 0x4, 0x3, 0x8}, {0x0, 0x2, 0xa, 0x3}, {0x4, 0x5, 0x5, 0x6}], 0x10, 0x81}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.101855876s ago: executing program 4 (id=1341): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x2, 0x21f, &(0x7f0000000940)="$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") r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/190, 0xbe) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xffff, 0x1000}], 0x1, &(0x7f0000000540)={0x77359400}) 986.397852ms ago: executing program 4 (id=1342): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x2000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x4000, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000000}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) socket$kcm(0x10, 0x2, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ftruncate(r2, 0xb35) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000180), 0x2}, 0x20) 985.865382ms ago: executing program 6 (id=1343): chmod(&(0x7f0000000740)='./cgroup.cpu/cgroup.procs\x00', 0x30) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000f16125cd779fe11feaac2aa422d27d118cf4b9e4f5bd4cf6444230ad55b17205cc8ceda6742a4199aff4714a5853e8f14e9ee983b9544588f2584fc2007cf061c6c18a8704f818c4284bcced1c5da4d048464c2538b7a000912dc39361756fc4a94b15441d27585abdc561d1b8c69d3f66d615a320f18a8a1f217c2ce63b2db6f0effbe0811c16a0cd06ebfebe11b3a6008c930f345471bb4fd2706b227fdd86ab", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008801c00000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @multicast2}}}, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) r6 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x500e8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$packet(r6, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r7 = creat(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x80) close(r7) r8 = socket$tipc(0x1e, 0x5, 0x0) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r8, 0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) setxattr$incfs_id(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0), &(0x7f0000000e80)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472696e7326b760240d669fc96fd3", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'netpci0\x00', @multicast}) 985.365312ms ago: executing program 5 (id=1344): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r3, 0x7ff, 0x1) r4 = signalfd(r0, &(0x7f0000000200), 0x8) r5 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000280)={@dev, @local, @broadcast}, &(0x7f00000002c0)=0x5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbJKmTauJIPjjFBA0ULoxNbYKHioeRLBQ0LPtstmGmk22ZDelCQEtIngRVDwIeunZH/Xm1R9X/S88iKVqWqx4kMhsZtpts5smbZKt7ucD07w3b7bvfffNvHm7M8wG0LNG038KEY9FxAdJxHC2PomIgWaqP+LY2nbXV5bL6ZLE6uprvyfNba6tLJej5TWp/Vnm0Yj4/t2Ig4X19dYXl2ZK1Wplfi3bFxFnx+uLS4fOzJamK9OVuSMTk5OHjz579Mj2xfrnT0sHLn/48lNfHfv7nUcuvf9DEsfiQFbWGsd2GY3R7D0ZSN/CW7y03ZV1WdLtBnBXCtnB1x/pGDAcfc0UAPB/9lZErAIAPSZx/geAHpN/D3BtZbmcL939RmJ3XXkxIvauxZ9f31wr6c+u2e1tXgcdupbccmUkiYiRbah/NCI+++aNL9Ildug6JEA7b1+IiFMjo+vH/2TdPQtb9fQGZXuyv6O3rTf+we75Np3/PNdu/le4Mf+JNvOfwTbH7t244/G/bxsq2UA6/3uh5d626y3xZ0b6stwDzTnfQHL6TLWSjm0PRsRYDAym+YkN6hi7+s/VTmWt878/Pnrz87T+9O/NLQq/9g/e+pqpUqN0LzG3unIh4vH+dvEnN/o/6TD/PbHJOl55/r1PO5Wl8afx5sv6+CO7O2lnrF6MeLJt/9+8oy1NjTdmO9yfON7cHcbznaKNr3/+ZKhT/a39ny5p/flngd2Q9v/QxvGPJK33a9bXjv2t+PHi8Hedyu4cf/v9f0/yejOdzyPOlxqN+YmIPcmr69cfvvnaPJ9vn8Y/9kT743+j/T/9THhqk/H3X/7tyw3j39/d/p/aUv+3S6SDdIeimVL10vWZvk71b67/J5upsWzNZsa/Ti29PXEv7x0AAAAAAAAAAAAAAAAAAAAAAAAAbFYhIg5EUijeSBcKxeLab3g/HEOFaq3eOHi6tjA3Fc3fyh6JgUL+qMvhluehTmTPw8/zh2/LPxMRD0XEx4P7kvw5ilNdjh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvs7/P5/6pfBbrcOANgxe7vdAABg1zn/A0Dvcf4HgN7j/A8Avcf5HwB6j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zE8ePpsvrXynI5zU+dW1yYqZ07NFWpzxRnF8rFcm3+bHG6VpuuVorl2uyd/r9qrXZ2MuYWzo83KvXGeH1x6eRsbWGucfLMbGm6crIysCtRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW1BeXZkrVamVe4i4Sq/dHM7qf6Mt2p/ulPbuaSO6PZmxzossDEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/xL8BAAD//7KsH7I=") r6 = open(&(0x7f00000005c0)='./bus\x00', 0x44f42, 0x88) munmap(&(0x7f0000007000/0x4000)=nil, 0x4000) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x0, 0x11, 0xc3, &(0x7f00000003c0)="4694dba2e3f887dbb998253e415bd6dcd9", &(0x7f0000000400)=""/195, 0x3, 0x0, 0xc5, 0x27, &(0x7f0000000a40)="f76e23724b929b29617734c81d0282203acc66297c81ed8b275d64f9cc4d1741b42e43dc5a0282d3f5d3081b94b69206a4e8b2fb0735b63ebb7ed5b6fd23390c13860e0d26d82ab8227599158df5857707087f65912fbcddc40105267fa08aab742028a5bb5666ccf4af640e14164ab64cc0057eb407cb48f53f61d3a020be1f908c98177e7945817c079b639eb3b0c628644216f97aa922388c48c009588ce2c578c729a9221c29db224b1bc340b86d7edb539451abb035533dec89ceacf129b7a26317d8", &(0x7f0000000b40)="cb1d57d37a0733c2d0d615d94b73033983212eb260a38ba5283afcaeac2b3064952cf759405ee5", 0x3, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r7) 836.681491ms ago: executing program 4 (id=1345): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = open(0x0, 0x14b042, 0xc4) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) ftruncate(r0, 0x6) 835.990291ms ago: executing program 0 (id=1346): fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_read_part_table(0x60a, &(0x7f0000000340)="$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") add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800002d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000000d7e37ebc421a03ef91e579c25e8e188d5b18fcce15ff14096088bc99affed42131a79a2f9f5982a979"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000066000000020000000800000000000000", @ANYRES32, @ANYBLOB="006c46cfce2b590000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000004cc0)={0x2, 0x80, 0x3a, 0x2, 0x0, 0x0, 0x0, 0x9, 0x500, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x81, 0x40, 0x1, 0x9, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 828.134622ms ago: executing program 3 (id=1347): r0 = syz_io_uring_setup(0x2983, &(0x7f0000002b00)={0x0, 0x5856, 0x0, 0x3, 0x6e}, &(0x7f0000002b80), &(0x7f0000002bc0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000002c40), 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x1080000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x32, 0x7, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000011b26bd70000020000051c4af0d"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) 696.059039ms ago: executing program 3 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x2, 0x203, 0x4, 0x9, 0x4, 0x8, 0x800, r3}, 0x20) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f00000002c0), 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x1, @remote, @local}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x21, 0x2, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(r0) 608.526015ms ago: executing program 4 (id=1349): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ffdd935517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="69070000a6faa97bbe9d3e3f0a37e1117782674ad296be906edb313d86b1cbb1d166ee1338d0c625532cc4ddf5601b86e84a01774c057ff87c467f163b67865605c57397a9649736525df16594", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x80000, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x5, 0x2}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) write(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000540)="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", &(0x7f0000000780)=""/225, &(0x7f0000000080)="0b1812d74d0f1f46f743a4165e5e155d3f3bb4532a8176362a1fae75dd92", &(0x7f0000000880)="5a0ed8721ed267fb397bd9adae68597d721b36ad5e76ccac2f57bf5855cbe420faf87c055ef884058752a8144ceb1e635cb991f7c3dce2e23b53efc40144fbefc273dd5227be6f0c28cc0ddd9b5a820c2cf09ffa22723604cc610503607b831a0bedd5f229a282d68a3b92d0393c69bea80ed07ec480a3502b88380d07a13c675053cc5981e2f227375dce4e5c8424799ad01923b0d49c5a945bf62a53bb3d2334363cb75502cfe58d071ae38373724805badd5d474a1c362d11dd0e03f5bf3f5908d96e6456b474b7893ebe3e3b26cd6ee9824b35e328e1914611", 0x53, r2, 0x4}, 0x38) 605.362625ms ago: executing program 5 (id=1350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xea, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x40}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 521.945839ms ago: executing program 4 (id=1351): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000340)="b9cd", 0x2}, {&(0x7f0000000480)="aad8bf8ff03e18a628e7b6e9b780e71ab7a12b60298f32025323dd27a207c5215191ea1c381795170cd6abbb6bfca13cdeddd7ca26f815fa792e34e40e790722acbbd812035f48097d963346edc8711d6017eebb72651183b2a4931cd755d662fae70e51227732ee0b23063b92b02cb95707402782602c8148769138c6f790fb799d2825416d13fca562914273496d87ff111831635929fd3930663014275c54964bf690574f", 0xa6}], 0x2, 0x0, 0x0, 0x300}}], 0x1, 0x20008000) 493.922411ms ago: executing program 3 (id=1352): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x1, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {0x0}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 458.636543ms ago: executing program 5 (id=1353): inotify_init() write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 457.783363ms ago: executing program 3 (id=1354): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x8, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x10, 0x7fffffffffffffff, 0x101, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x24004041, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) syz_clone(0x28104000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0xc) pselect6(0x40, &(0x7f0000000000)={0x1, 0x5, 0x2, 0xffbffffffffffffe, 0x7, 0x3, 0xc193, 0x9}, 0x0, &(0x7f0000000040)={0x9, 0x8f, 0xdf, 0x81, 0x5, 0xf, 0x1000, 0x1ff}, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070007000000fcc46d587aa72baace5a3f53cbd10b061f72cdfdce86792665aee3997d309215d837cfff9f13c8d30345326d4660227c1c9a6425857d"], 0x3c}}, 0x0) r6 = eventfd(0x7fff) io_submit(r1, 0x2, &(0x7f00000005c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8e4a, r4, &(0x7f0000000600)="cdb702067deda0e7997e46c0824d76502fc9dc83ad6555f1e5dca07d09051e002f87dc7fe4b0e0085d51f5428da92e0aa59a4a12412587ed6da86a0000000000", 0x40, 0x5, 0x0, 0x3, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xc545, r0, &(0x7f0000000440)="9b3d2cb8864645dfcd434ec59c12d69ad28b492e81442426719ce7af140aca302a06be963b9cf3dbe8161a8b9a4dc1936bffd32e37189e4709e93a21e787bade055c4fcbd65f4bbdcce4dff2968effa1cda02d83fa4bd5a395d2455c68808e4f3908bd8ca036c41ee5362ee79f0c841a435f52aa9446ea658b08086e716384c00d819f0532d0a98e11e5226e03b24e725f079fc3edbffba456fdb37e05307f5e613d6d0698e2a2f7ccf8ea3a942478047d967c3352b8b82be398d523fada869541876b8e99b830d9b70ced8b9c9e45171ca13c8cf4840ad8fc50bd6a655d58ca50959ae94687b1ec41fed44d6144510e5e9953c4859d2f", 0xf7, 0x7fff, 0x0, 0x1, r5}]) futex(&(0x7f0000000100)=0x2, 0x5, 0x0, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000300)=0x2, 0xfffffffc) clock_gettime(0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0xa640, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e650000000008000800"], 0x58}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="06068a94d78892b1621c000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf2503000000080006000800000008000600480e0000"], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x8880) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x1}}], 0x1, 0xc015) 421.296955ms ago: executing program 6 (id=1355): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x125) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private2, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x82}}}}}}}, 0x0) 364.235739ms ago: executing program 6 (id=1356): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32, @ANYBLOB="93000500000000001c0012800e00010069703665727370616e00f3ff070002"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) tkill(r1, 0x15) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000380), 0xa}, 0x100b20, 0x6, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd}, {0x6}]}, 0x10) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0xd5, 0xb5, ""/181}, &(0x7f0000000200)=0xd5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="04000280f25e97cf88210de2fd6053cac7004bb4b1efeacf69b7a9d68559eebb3a077a3ca464c5b0f9a8ea58aa8fe0e5ff8ea28efd231ab4fb8c4926c70cca0d05a4"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000040) r7 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x4, 0x1}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0xee0000b0}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/100}], 0x0, 0x0, 0x800000) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000004220000000000000010fc71696bde0d9bac35f149aa78321838a14b88e180696c29b00b461ef66282ab743be49d8964933133146c7030146d91727e08ba2eeb6eb6c0ece8bea00bb821f36af93c9fb97a0fe199515ee7b0bcc68ad1b3a33dcaa06d30af0a5d9a6f5eae340477e6a30f12", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r10, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r11, 0x4}, 0x20) 202.599808ms ago: executing program 0 (id=1357): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010420000000ffdbdfcc04b26637", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005124e200000040006"], 0x40}}, 0x40800) 146.359712ms ago: executing program 5 (id=1358): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x865, 0xffff, 0x0, 0x1, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/104, 0x68}], 0x1) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19.466599ms ago: executing program 0 (id=1359): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/128, 0x80}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r2) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180100180000000000000010000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000100000000000000ff010000000000000000000600000001ff020000000000000000000000000001030006000000000002000000ffffffff0000000000000000080019"], 0xc0}}, 0x20040000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xa00, @loopback}}, 0x100, 0x0, 0xf401, 0x0, 0x54}, 0x9c) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xab34, 0x10000, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, 0x0, 0x1, 0x8}) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000780)="04dd3b1f45dd3f7eae2cab4c448fd8ce8b12d6761196c85cc55462a7e75e70ce9f26eaba7e1feab80c2e113a51cddf997a42edf29ec2018d28f744044dab91f4038eeec755b179778872a30269714a0702120731944d936b583571850aac55b430ca877fb2fe41f6fe117d20a303bc3ceea0147010ac6a593229c87c8859d33dbdf2bee52bf0433300000000", 0x1}]}, 0x24048891) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r11, &(0x7f0000000140), 0x2, 0x0) 18.813999ms ago: executing program 6 (id=1360): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 0s ago: executing program 5 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x50bf, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) socket$kcm(0x2, 0x1, 0x84) syz_io_uring_setup(0x44c9, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xc7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f0000000300)=0x4, 0x0, 0x4) sendmsg$inet(r3, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000000000000840000ec7efcf05875fb0df05e0002000000"], 0x20}, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x9}, 0x0, 0x2}, 0xe) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x17, 0x2, &(0x7f0000000140)="1be6"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) r7 = dup(r0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r7, 0x5523) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x10, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x3c, 0x18, 0x0, 0xfffc, 0xfb, 0x89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xffffffff, {[@end]}}}}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getitimer(0x1, &(0x7f0000000200)) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 0s ago: executing program 6 (id=1362): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ffdd935517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="69070000a6faa97bbe9d3e3f0a37e1117782674ad296be906edb313d86b1cbb1d166ee1338d0c625532cc4ddf5601b86e84a01774c057ff87c467f163b67865605c57397a9649736525df16594", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x80000, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x5, 0x2}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) write(0xffffffffffffffff, &(0x7f0000000ac0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000540)="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", &(0x7f0000000780)=""/225, &(0x7f0000000080)="0b1812d74d0f1f46f743a4165e5e155d3f3bb4532a8176362a1fae75dd92", &(0x7f0000000880)="5a0ed8721ed267fb397bd9adae68597d721b36ad5e76ccac2f57bf5855cbe420faf87c055ef884058752a8144ceb1e635cb991f7c3dce2e23b53efc40144fbefc273dd5227be6f0c28cc0ddd9b5a820c2cf09ffa22723604cc610503607b831a0bedd5f229a282d68a3b92d0393c69bea80ed07ec480a3502b88380d07a13c675053cc5981e2f227375dce4e5c8424799ad01923b0d49c5a945bf62a53bb3d2334363cb75502cfe58d071ae38373724805badd5d474a1c362d11dd0e03f5bf3f5908d96e6456b474b7893ebe3e3b26cd6ee9824b35e328e1914611", 0x53, r2, 0x4}, 0x38) kernel console output (not intermixed with test programs): Interface deactivated: batadv_slave_0 [ 77.998520][ T899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.066985][ T5471] loop2: detected capacity change from 0 to 128 [ 78.079844][ T899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.084142][ T5471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 78.087991][ T899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.116454][ T899] veth1_macvtap: left promiscuous mode [ 78.122338][ T899] veth0_macvtap: left promiscuous mode [ 78.128322][ T899] veth1_vlan: left promiscuous mode [ 78.134199][ T899] veth0_vlan: left promiscuous mode [ 78.160444][ T5471] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.223812][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.283184][ T5487] __nla_validate_parse: 13 callbacks suppressed [ 78.283201][ T5487] netlink: 128 bytes leftover after parsing attributes in process `syz.4.699'. [ 78.308945][ T899] team0 (unregistering): Port device team_slave_1 removed [ 78.364547][ T5491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.701'. [ 78.373793][ T5491] netlink: 212 bytes leftover after parsing attributes in process `syz.2.701'. [ 78.388937][ T5491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.701'. [ 78.399153][ T5451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.692'. [ 78.411618][ T5414] chnl_net:caif_netlink_parms(): no params data found [ 78.584912][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.592608][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.600438][ T5504] loop4: detected capacity change from 0 to 2048 [ 78.614996][ T5414] bridge_slave_0: entered allmulticast mode [ 78.621769][ T5414] bridge_slave_0: entered promiscuous mode [ 78.628978][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.636604][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.644316][ T5414] bridge_slave_1: entered allmulticast mode [ 78.651007][ T5414] bridge_slave_1: entered promiscuous mode [ 78.713916][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.733936][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.786698][ T5414] team0: Port device team_slave_0 added [ 78.810699][ T5414] team0: Port device team_slave_1 added [ 78.836662][ T5527] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 78.882658][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.890140][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.916725][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.936394][ T5527] 8021q: adding VLAN 0 to HW filter on device bond13 [ 78.946811][ T5527] bond12: (slave bond13): making interface the new active one [ 78.955266][ T5527] bond12: (slave bond13): Enslaving as an active interface with an up link [ 78.970879][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.978527][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.006287][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.050235][ T5538] SET target dimension over the limit! [ 79.069028][ T5414] hsr_slave_0: entered promiscuous mode [ 79.081146][ T5414] hsr_slave_1: entered promiscuous mode [ 79.143739][ T5545] random: crng reseeded on system resumption [ 79.191843][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 79.215319][ T5545] geneve3: entered promiscuous mode [ 79.220672][ T5545] geneve3: entered allmulticast mode [ 79.229020][ T886] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 35939 - 0 [ 79.264023][ T5414] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.274443][ T886] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 35939 - 0 [ 79.283555][ T5414] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.303602][ T886] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 35939 - 0 [ 79.312611][ T5414] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.329429][ T886] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 35939 - 0 [ 79.340868][ T5414] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.483833][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.509184][ T5569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.717'. [ 79.544798][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.601393][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.608757][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.625323][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.632715][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.723018][ T5592] program syz.3.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.783099][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.820620][ T5602] loop3: detected capacity change from 0 to 736 [ 79.875030][ T5602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 79.932543][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.727'. [ 80.014118][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 80.116327][ T5637] loop3: detected capacity change from 0 to 512 [ 80.138737][ T5414] veth0_vlan: entered promiscuous mode [ 80.157816][ T5637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.728: bg 0: block 393: padding at end of block bitmap is not set [ 80.169512][ T5414] veth1_vlan: entered promiscuous mode [ 80.206825][ T5414] veth0_macvtap: entered promiscuous mode [ 80.213416][ T5637] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 80.223080][ T5637] EXT4-fs (loop3): 2 truncates cleaned up [ 80.229701][ T5637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.246448][ T5414] veth1_macvtap: entered promiscuous mode [ 80.259613][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.274723][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.301725][ T319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.320395][ T319] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.341059][ T886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.357408][ T886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.366751][ T5646] loop0: detected capacity change from 0 to 512 [ 80.394931][ T5646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.412958][ T5646] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.429660][ T5646] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.732: bg 0: block 360: padding at end of block bitmap is not set [ 80.484617][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.497156][ T5654] loop5: detected capacity change from 0 to 2048 [ 80.510818][ T5656] loop2: detected capacity change from 0 to 2048 [ 80.523014][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.534827][ T5654] EXT4-fs: Ignoring removed bh option [ 80.555421][ T3313] loop2: p1 p2 < > p3 p4 < > [ 80.556838][ T5654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.560248][ T3313] loop2: partition table partially beyond EOD, truncated [ 80.560520][ T3313] loop2: p1 start 8388607 is beyond EOD, truncated [ 80.588127][ T3313] loop2: p2 start 4294902784 is beyond EOD, truncated [ 80.595687][ T3313] loop2: p3 start 3724543488 is beyond EOD, truncated [ 80.627082][ T5656] loop2: p1 p2 < > p3 p4 < > [ 80.632014][ T5656] loop2: partition table partially beyond EOD, truncated [ 80.654590][ T5656] loop2: p1 start 8388607 is beyond EOD, truncated [ 80.661823][ T5656] loop2: p2 start 4294902784 is beyond EOD, truncated [ 80.669093][ T5656] loop2: p3 start 3724543488 is beyond EOD, truncated [ 80.704543][ T5664] loop3: detected capacity change from 0 to 736 [ 80.774813][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.851509][ T5676] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.739: bg 0: block 393: padding at end of block bitmap is not set [ 80.868770][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 80.868787][ T29] audit: type=1400 audit(1768914873.892:4384): avc: denied { mounton } for pid=5672 comm="syz.0.741" path="/157/file0" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.911508][ T29] audit: type=1400 audit(1768914873.892:4385): avc: denied { setopt } for pid=5672 comm="syz.0.741" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.958561][ T5676] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 80.988859][ T5687] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 81.009528][ T5676] EXT4-fs (loop2): 2 truncates cleaned up [ 81.016014][ T5676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.031591][ T29] audit: type=1400 audit(1768914874.052:4386): avc: denied { allowed } for pid=5684 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.104425][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.136347][ T29] audit: type=1400 audit(1768914874.162:4387): avc: denied { setopt } for pid=5698 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 81.172420][ T29] audit: type=1326 audit(1768914874.192:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.3.749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e665acb9 code=0x0 [ 81.198660][ T29] audit: type=1326 audit(1768914874.202:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa68acb9 code=0x7ffc0000 [ 81.223731][ T29] audit: type=1326 audit(1768914874.202:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa68acb9 code=0x7ffc0000 [ 81.248192][ T29] audit: type=1326 audit(1768914874.202:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa68acb9 code=0x7ffc0000 [ 81.273063][ T29] audit: type=1326 audit(1768914874.202:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f58fa68acb9 code=0x7ffc0000 [ 81.297196][ T29] audit: type=1326 audit(1768914874.202:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa68acb9 code=0x7ffc0000 [ 81.313924][ T5710] bond1: option mode: unable to set because the bond device has slaves [ 81.334155][ T5710] netlink: 'syz.4.753': attribute type 10 has an invalid length. [ 81.343317][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.355988][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.363610][ T5710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.377479][ T5710] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 81.663444][ T319] bond0: (slave bond_slave_0): interface is now down [ 81.670864][ T319] bond0: (slave bond_slave_1): interface is now down [ 81.678671][ T319] bond0: (slave bridge0): interface is now down [ 81.703870][ T5717] : Can't lookup blockdev [ 81.717609][ T319] bond0: now running without any active interface! [ 81.812517][ T899] bond1: (slave bond0): link status definitely down, disabling slave [ 81.822512][ T3309] loop0: p2 p3 p4 [ 81.830787][ T3309] loop0: p2 start 402653440 is beyond EOD, truncated [ 81.834357][ T899] bond1: now running without any active interface! [ 81.838652][ T3309] loop0: p3 size 100663552 extends beyond EOD, truncated [ 81.855397][ T3309] loop0: p4 size 50331648 extends beyond EOD, truncated [ 81.868290][ T5717] loop0: p2 p3 p4 [ 81.872760][ T5717] loop0: p2 start 402653440 is beyond EOD, truncated [ 81.879752][ T5717] loop0: p3 size 100663552 extends beyond EOD, truncated [ 81.900126][ T5717] loop0: p4 size 50331648 extends beyond EOD, truncated [ 81.910385][ T5732] FAULT_INJECTION: forcing a failure. [ 81.910385][ T5732] name failslab, interval 1, probability 0, space 0, times 0 [ 81.924084][ T5732] CPU: 0 UID: 0 PID: 5732 Comm: syz.5.761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.924157][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.924172][ T5732] Call Trace: [ 81.924178][ T5732] [ 81.924187][ T5732] __dump_stack+0x1d/0x30 [ 81.924215][ T5732] dump_stack_lvl+0x95/0xd0 [ 81.924240][ T5732] dump_stack+0x15/0x1b [ 81.924341][ T5732] should_fail_ex+0x263/0x280 [ 81.924368][ T5732] should_failslab+0x8c/0xb0 [ 81.924393][ T5732] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 81.924488][ T5732] ? __alloc_skb+0x2f0/0x4b0 [ 81.924518][ T5732] __alloc_skb+0x2f0/0x4b0 [ 81.924545][ T5732] ? __alloc_skb+0x219/0x4b0 [ 81.924574][ T5732] netlink_alloc_large_skb+0xbf/0xf0 [ 81.924683][ T5732] netlink_sendmsg+0x40c/0x6f0 [ 81.924706][ T5732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.924740][ T5732] __sock_sendmsg+0x145/0x170 [ 81.924813][ T5732] ____sys_sendmsg+0x31e/0x4a0 [ 81.924856][ T5732] ___sys_sendmsg+0x195/0x1e0 [ 81.925033][ T5732] __x64_sys_sendmsg+0xd4/0x160 [ 81.925077][ T5732] x64_sys_call+0x17ba/0x3000 [ 81.925280][ T5732] do_syscall_64+0xc0/0x2a0 [ 81.925306][ T5732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.925337][ T5732] RIP: 0033:0x7f91ff76acb9 [ 81.925366][ T5732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.925384][ T5732] RSP: 002b:00007f91fe1c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.925449][ T5732] RAX: ffffffffffffffda RBX: 00007f91ff9e5fa0 RCX: 00007f91ff76acb9 [ 81.925465][ T5732] RDX: 000000000006484c RSI: 0000200000001580 RDI: 0000000000000003 [ 81.925481][ T5732] RBP: 00007f91fe1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.925495][ T5732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.925508][ T5732] R13: 00007f91ff9e6038 R14: 00007f91ff9e5fa0 R15: 00007ffcd0575168 [ 81.925533][ T5732] [ 82.153443][ T5734] syzkaller0: entered promiscuous mode [ 82.159275][ T5734] syzkaller0: entered allmulticast mode [ 82.171436][ T5736] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 82.304371][ T5743] program syz.4.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.438324][ T5717] lo speed is unknown, defaulting to 1000 [ 82.444992][ T5717] lo speed is unknown, defaulting to 1000 [ 82.451476][ T5717] lo speed is unknown, defaulting to 1000 [ 82.458385][ T5717] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.466789][ T5717] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.477627][ T5717] lo speed is unknown, defaulting to 1000 [ 82.487565][ T5717] lo speed is unknown, defaulting to 1000 [ 82.494588][ T5717] lo speed is unknown, defaulting to 1000 [ 82.500932][ T5717] lo speed is unknown, defaulting to 1000 [ 82.508776][ T5717] lo speed is unknown, defaulting to 1000 [ 82.532454][ T5749] set_capacity_and_notify: 3 callbacks suppressed [ 82.532469][ T5749] loop3: detected capacity change from 0 to 2048 [ 82.790381][ T5768] loop0: detected capacity change from 0 to 512 [ 83.003266][ T5768] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.775: invalid indirect mapped block 256 (level 2) [ 83.024797][ T5768] EXT4-fs (loop0): 2 truncates cleaned up [ 83.066305][ T5768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.314743][ T5777] IPv6: NLM_F_REPLACE set, but no existing node found! [ 83.434863][ T5780] __nla_validate_parse: 12 callbacks suppressed [ 83.434885][ T5780] netlink: 256 bytes leftover after parsing attributes in process `syz.4.779'. [ 83.450573][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 83.577492][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 83.601825][ T5787] loop2: detected capacity change from 0 to 1024 [ 83.656501][ T5782] bridge_slave_0: left allmulticast mode [ 83.662559][ T5782] bridge_slave_0: left promiscuous mode [ 83.668575][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.694838][ T5787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.709338][ T5790] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 83.750783][ T5787] SELinux: security_context_str_to_sid () failed with errno=-22 [ 83.786316][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.802959][ T5787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.781: missing EA_INODE flag [ 83.817140][ T5792] SET target dimension over the limit! [ 83.838655][ T5786] vlan0: entered promiscuous mode [ 83.847548][ T5787] EXT4-fs (loop2): Remounting filesystem read-only [ 83.854462][ T5787] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #18: comm syz.2.781: ea_inode dec ref err=-30 [ 83.867898][ T5787] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 83.892654][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.060755][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 84.073837][ T5809] bond0: entered promiscuous mode [ 84.079269][ T5809] bond_slave_0: entered promiscuous mode [ 84.085486][ T5809] bond_slave_1: entered promiscuous mode [ 84.093628][ T5809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.107304][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.788'. [ 84.108557][ T5809] bond0: left promiscuous mode [ 84.122057][ T5809] bond_slave_0: left promiscuous mode [ 84.128021][ T5809] bond_slave_1: left promiscuous mode [ 84.326350][ T5832] loop4: detected capacity change from 0 to 736 [ 84.480979][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 84.624521][ T5860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.809'. [ 84.635030][ T5861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5861 comm=syz.4.804 [ 84.698618][ T5863] loop2: detected capacity change from 0 to 1024 [ 84.705653][ T5863] ext4: Unknown parameter 'obj_type' [ 84.742345][ T5863] loop2: detected capacity change from 0 to 512 [ 84.779862][ T5863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 84.793147][ T5863] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.805995][ T5863] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.810: Failed to acquire dquot type 0 [ 84.818671][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'. [ 84.841280][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /176/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 84.862843][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz-executor: path /176/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 84.863775][ T5872] loop0: detected capacity change from 0 to 128 [ 84.891376][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /176/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 84.896382][ T5872] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.918744][ T3320] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz-executor: Failed to acquire dquot type 0 [ 84.950360][ T5872] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.991977][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.024023][ T5876] loop5: detected capacity change from 0 to 736 [ 85.071246][ T5880] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.097490][ T5882] netlink: 40 bytes leftover after parsing attributes in process `syz.5.817'. [ 85.162055][ T1667] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.164564][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 85.172279][ T1667] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 60955 - 0 [ 85.192369][ T1667] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 85.245351][ T1667] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.255899][ T1667] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 60955 - 0 [ 85.266285][ T1667] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 85.324496][ T1667] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.334838][ T1667] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 60955 - 0 [ 85.345748][ T1667] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 85.385890][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 85.397553][ T1667] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.407970][ T1667] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 60955 - 0 [ 85.418641][ T1667] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 85.435316][ T5899] bond1: option mode: unable to set because the bond device has slaves [ 85.445687][ T5899] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 85.459754][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.496689][ T5906] loop3: detected capacity change from 0 to 512 [ 85.509849][ T5906] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.826: bg 0: block 393: padding at end of block bitmap is not set [ 85.544254][ T5906] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 85.553731][ T1667] bridge_slave_1: left allmulticast mode [ 85.554324][ T5906] EXT4-fs (loop3): 2 truncates cleaned up [ 85.559760][ T1667] bridge_slave_1: left promiscuous mode [ 85.573738][ T1667] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.600249][ T5906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.630465][ T5916] program syz.0.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.826922][ T1667] bond6 (unregistering): (slave gretap1): Releasing active interface [ 85.923666][ T1667] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 85.946218][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.966044][ T5911] loop4: detected capacity change from 0 to 512 [ 85.994360][ T5911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.048114][ T5911] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz.4.827: path /174/file0/file0: directory fails checksum at offset 0 [ 86.065396][ T1667] bond3 (unregistering): (slave bond0): Releasing active interface [ 86.277067][ T5943] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 86.300158][ T1667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.317017][ T1667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.319100][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.339216][ T1667] bond0 (unregistering): Released all slaves [ 86.357922][ T5945] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 86.367477][ T1667] bond1 (unregistering): (slave bond2): Releasing backup interface [ 86.385569][ T1667] bond1 (unregistering): Released all slaves [ 86.416007][ T1667] bond2 (unregistering): Released all slaves [ 86.453818][ T1667] bond3 (unregistering): Released all slaves [ 86.465850][ T1667] bond4 (unregistering): (slave bond5): Releasing backup interface [ 86.475581][ T1667] bond4 (unregistering): Released all slaves [ 86.485883][ T1667] bond5 (unregistering): Released all slaves [ 86.506206][ T1667] bond6 (unregistering): Released all slaves [ 86.524363][ T1667] bond7 (unregistering): (slave bond8): Releasing backup interface [ 86.540546][ T1667] bond7 (unregistering): Released all slaves [ 86.560854][ T1667] bond8 (unregistering): Released all slaves [ 86.587688][ T1667] bond9 (unregistering): (slave bond10): Releasing backup interface [ 86.608416][ T1667] bond9 (unregistering): Released all slaves [ 86.619544][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 86.619562][ T29] audit: type=1326 audit(1768914879.642:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.627982][ T1667] bond10 (unregistering): Released all slaves [ 86.696209][ T29] audit: type=1326 audit(1768914879.682:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.721681][ T29] audit: type=1326 audit(1768914879.682:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.813201][ T29] audit: type=1326 audit(1768914879.722:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.837067][ T29] audit: type=1326 audit(1768914879.722:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.862042][ T29] audit: type=1326 audit(1768914879.722:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.887363][ T29] audit: type=1326 audit(1768914879.772:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.912309][ T29] audit: type=1326 audit(1768914879.772:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.936660][ T29] audit: type=1326 audit(1768914879.772:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 86.961780][ T29] audit: type=1326 audit(1768914879.782:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363e9acb9 code=0x7ffc0000 [ 87.000046][ T1667] bond11 (unregistering): Released all slaves [ 87.044093][ T1667] bond12 (unregistering): (slave bond13): Releasing backup interface [ 87.072772][ T1667] bond12 (unregistering): Released all slaves [ 87.109996][ T1667] bond13 (unregistering): Released all slaves [ 87.185794][ T1667] hsr_slave_0: left promiscuous mode [ 87.191815][ T1667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.199969][ T1667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.214701][ T1667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.222753][ T1667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.282072][ T1667] team0: left promiscuous mode [ 87.287160][ T1667] team_slave_0: left promiscuous mode [ 87.293303][ T1667] team_slave_1: left promiscuous mode [ 87.299586][ T1667] veth1_macvtap: left promiscuous mode [ 87.306104][ T1667] veth0_macvtap: left promiscuous mode [ 87.313082][ T1667] veth1_vlan: left promiscuous mode [ 87.313111][ T1667] veth0_vlan: left promiscuous mode [ 87.377649][ T5988] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.391702][ T5988] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.437671][ T5988] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.848: bad orphan inode 131083 [ 87.485702][ T5988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.542860][ T1667] team0 (unregistering): Port device team_slave_1 removed [ 87.566241][ T1667] team0 (unregistering): Port device team_slave_0 removed [ 87.713860][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 87.837928][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.845417][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.899983][ T5890] bridge_slave_0: entered allmulticast mode [ 87.907181][ T5890] bridge_slave_0: entered promiscuous mode [ 87.914868][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.922229][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.929634][ T5890] bridge_slave_1: entered allmulticast mode [ 87.936483][ T5890] bridge_slave_1: entered promiscuous mode [ 87.949816][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.964776][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.976363][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.023159][ T6010] set_capacity_and_notify: 3 callbacks suppressed [ 88.023179][ T6010] loop3: detected capacity change from 0 to 512 [ 88.066992][ T5890] team0: Port device team_slave_0 added [ 88.083881][ T5890] team0: Port device team_slave_1 added [ 88.089782][ T6013] syzkaller0: entered promiscuous mode [ 88.095443][ T6013] syzkaller0: entered allmulticast mode [ 88.113673][ T6010] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 88.161350][ T6010] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.168177][ T6010] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.853: Block bitmap for bg 0 marked uninitialized [ 88.183171][ T6010] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 88.194199][ T6010] EXT4-fs (loop3): 1 orphan inode deleted [ 88.200989][ T6010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 88.215665][ T6010] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 88.226071][ T6010] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 88.235589][ T6010] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.853: Block bitmap for bg 0 marked uninitialized [ 88.289391][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.297085][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.324562][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.337013][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.344146][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.371079][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.420131][ T5890] hsr_slave_0: entered promiscuous mode [ 88.426995][ T5890] hsr_slave_1: entered promiscuous mode [ 88.433671][ T5890] debugfs: 'hsr0' already exists in 'hsr' [ 88.439861][ T5890] Cannot create hsr debugfs directory [ 88.663245][ T6065] __nla_validate_parse: 5 callbacks suppressed [ 88.663261][ T6065] netlink: 312 bytes leftover after parsing attributes in process `syz.0.861'. [ 88.697516][ T5890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.710150][ T5890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.728762][ T5890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.729360][ T6069] netlink: 84 bytes leftover after parsing attributes in process `syz.4.862'. [ 88.749264][ T5890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.824186][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.859637][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.882915][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.894031][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.901432][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.965530][ T6097] loop0: detected capacity change from 0 to 1024 [ 88.975260][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.982788][ T4776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.999687][ T6097] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.017734][ T6096] SELinux: failed to load policy [ 89.038943][ T6097] EXT4-fs: Ignoring removed nobh option [ 89.088560][ T6097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.134375][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.142891][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.201950][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 89.221361][ T6123] team0: entered promiscuous mode [ 89.226781][ T6123] team_slave_0: entered promiscuous mode [ 89.232818][ T6123] team_slave_1: entered promiscuous mode [ 89.243390][ T6123] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 89.256294][ T6123] team0: left promiscuous mode [ 89.261659][ T6123] team_slave_0: left promiscuous mode [ 89.267579][ T6123] team_slave_1: left promiscuous mode [ 89.276660][ T6127] loop4: detected capacity change from 0 to 512 [ 89.293697][ T6127] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 89.305086][ T6127] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 89.315845][ T6127] EXT4-fs (loop4): group descriptors corrupted! [ 89.467122][ T6139] unsupported nlmsg_type 40 [ 89.617807][ T6157] loop3: detected capacity change from 0 to 2048 [ 89.643006][ T6157] EXT4-fs: Ignoring removed bh option [ 89.682336][ T5890] veth0_vlan: entered promiscuous mode [ 89.697878][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.710982][ T5890] veth1_vlan: entered promiscuous mode [ 89.736638][ T5890] veth0_macvtap: entered promiscuous mode [ 89.745348][ T5890] veth1_macvtap: entered promiscuous mode [ 89.757839][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.790318][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.800768][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.827455][ T1969] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.841061][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.885'. [ 89.853974][ T6173] loop5: detected capacity change from 0 to 2048 [ 89.874004][ T1969] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.886316][ T1969] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896103][ T1969] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.896873][ T6181] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 89.969288][ T6181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.979534][ T6181] bond2: (slave bond3): making interface the new active one [ 89.988162][ T6181] bond2: (slave bond3): Enslaving as an active interface with an up link [ 90.160108][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.893'. [ 90.169924][ T6206] netlink: 212 bytes leftover after parsing attributes in process `syz.4.893'. [ 90.200068][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.893'. [ 90.217638][ T6207] loop5: detected capacity change from 0 to 2048 [ 90.228506][ T6210] netlink: 84 bytes leftover after parsing attributes in process `syz.6.896'. [ 90.249112][ T6212] loop3: detected capacity change from 0 to 512 [ 90.273618][ T6212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.313278][ T6212] EXT4-fs (loop3): 1 truncate cleaned up [ 90.320166][ T6212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.334596][ T6212] EXT4-fs error (device loop3): __ext4_iget:5426: inode #12: block 2: comm syz.3.897: invalid block [ 90.369256][ T6219] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 90.376560][ T6220] EXT4-fs error (device loop3): __ext4_iget:5426: inode #12: block 2: comm syz.3.897: invalid block [ 90.377230][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.899'. [ 90.419698][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.898'. [ 90.445554][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.501981][ T6228] random: crng reseeded on system resumption [ 90.524035][ T6226] loop3: detected capacity change from 0 to 2048 [ 90.590529][ T6228] geneve3: entered promiscuous mode [ 90.596097][ T6228] geneve3: entered allmulticast mode [ 90.657608][ T1667] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 35555 - 0 [ 90.698738][ T1667] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 35555 - 0 [ 90.765063][ T1667] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 35555 - 0 [ 90.801379][ T1667] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 35555 - 0 [ 90.995692][ T6238] loop4: detected capacity change from 0 to 512 [ 91.031453][ T6238] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.905: bg 0: block 393: padding at end of block bitmap is not set [ 91.047217][ T6238] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 91.057675][ T6238] EXT4-fs (loop4): 2 truncates cleaned up [ 91.065090][ T6238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.319853][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.338145][ T6254] bridge_slave_0: left allmulticast mode [ 91.344425][ T6254] bridge_slave_0: left promiscuous mode [ 91.350177][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.423470][ T6264] bond0: entered promiscuous mode [ 91.428973][ T6264] bond_slave_0: entered promiscuous mode [ 91.435229][ T6264] bond_slave_1: entered promiscuous mode [ 91.448867][ T6268] loop6: detected capacity change from 0 to 1024 [ 91.455952][ T6268] EXT4-fs: inline encryption not supported [ 91.465000][ T6264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.480920][ T6268] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 91.504286][ T6264] bond0: left promiscuous mode [ 91.509222][ T6264] bond_slave_0: left promiscuous mode [ 91.515053][ T6264] bond_slave_1: left promiscuous mode [ 91.704017][ T6284] netlink: 'syz.4.921': attribute type 13 has an invalid length. [ 91.733884][ T6291] netlink: 'syz.5.924': attribute type 30 has an invalid length. [ 91.752651][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 91.752668][ T29] audit: type=1400 audit(1768914884.782:5486): avc: denied { map } for pid=6287 comm="syz.5.924" path="socket:[19264]" dev="sockfs" ino=19264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.916035][ T6303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.940231][ T29] audit: type=1400 audit(1768914884.962:5487): avc: denied { mount } for pid=6298 comm="syz.0.928" name="/" dev="configfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.994858][ T6308] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 92.023813][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.123192][ T29] audit: type=1326 audit(1768914885.142:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6310 comm="syz.4.933" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd363e9acb9 code=0x0 [ 92.195136][ T29] audit: type=1326 audit(1768914885.192:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 92.220023][ T29] audit: type=1326 audit(1768914885.192:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 92.245375][ T29] audit: type=1326 audit(1768914885.192:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 92.270823][ T29] audit: type=1326 audit(1768914885.192:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 92.296257][ T29] audit: type=1326 audit(1768914885.192:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 92.321418][ T29] audit: type=1326 audit(1768914885.192:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 92.346281][ T29] audit: type=1326 audit(1768914885.192:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6314 comm="syz.0.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 92.721616][ T6296] Set syz1 is full, maxelem 65536 reached [ 92.956185][ T6382] syzkaller0: entered promiscuous mode [ 92.962290][ T6382] syzkaller0: entered allmulticast mode [ 93.421445][ T6427] xt_bpf: check failed: parse error [ 93.554152][ T6444] batadv0: entered promiscuous mode [ 93.560670][ T6444] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.569446][ T6444] batadv0: left promiscuous mode [ 93.653409][ T6451] set_capacity_and_notify: 2 callbacks suppressed [ 93.653428][ T6451] loop3: detected capacity change from 0 to 512 [ 93.682951][ T6451] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 93.694223][ T6451] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 93.704431][ T6451] EXT4-fs (loop3): group descriptors corrupted! [ 93.734515][ T6454] loop0: detected capacity change from 0 to 512 [ 93.769131][ T6454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.970: bg 0: block 393: padding at end of block bitmap is not set [ 93.796278][ T6457] mmap: syz.6.971 (6457) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.808980][ T6454] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 93.819285][ T6454] EXT4-fs (loop0): 2 truncates cleaned up [ 93.826131][ T6454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.887318][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.965337][ T6471] __nla_validate_parse: 12 callbacks suppressed [ 93.965354][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 93.998410][ T6471] team0: entered promiscuous mode [ 94.003642][ T6471] team_slave_0: entered promiscuous mode [ 94.009504][ T6471] team_slave_1: entered promiscuous mode [ 94.031205][ T6471] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 94.059590][ T6471] team0: left promiscuous mode [ 94.064682][ T6471] team_slave_0: left promiscuous mode [ 94.070353][ T6471] team_slave_1: left promiscuous mode [ 94.094104][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.974'. [ 94.221648][ T6484] loop0: detected capacity change from 0 to 2048 [ 94.228843][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 94.243312][ T6469] netlink: 'syz.6.973': attribute type 6 has an invalid length. [ 94.263192][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.345936][ T6493] FAULT_INJECTION: forcing a failure. [ 94.345936][ T6493] name failslab, interval 1, probability 0, space 0, times 0 [ 94.359921][ T6493] CPU: 0 UID: 0 PID: 6493 Comm: syz.4.980 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.359949][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.359961][ T6493] Call Trace: [ 94.359969][ T6493] [ 94.359979][ T6493] __dump_stack+0x1d/0x30 [ 94.360011][ T6493] dump_stack_lvl+0x95/0xd0 [ 94.360110][ T6493] dump_stack+0x15/0x1b [ 94.360130][ T6493] should_fail_ex+0x263/0x280 [ 94.360161][ T6493] should_failslab+0x8c/0xb0 [ 94.360264][ T6493] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 94.360293][ T6493] ? __alloc_skb+0x2f0/0x4b0 [ 94.360326][ T6493] __alloc_skb+0x2f0/0x4b0 [ 94.360391][ T6493] ? __alloc_skb+0x219/0x4b0 [ 94.360425][ T6493] xfrm_alloc_userspi+0x52d/0x6f0 [ 94.360453][ T6493] ? __nla_parse+0x40/0x60 [ 94.360488][ T6493] xfrm_user_rcv_msg+0x576/0x670 [ 94.360537][ T6493] ? __kfree_skb+0x109/0x150 [ 94.360570][ T6493] ? nlmon_xmit+0x4f/0x60 [ 94.360595][ T6493] ? consume_skb+0x49/0x140 [ 94.360679][ T6493] netlink_rcv_skb+0x123/0x220 [ 94.360730][ T6493] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 94.360779][ T6493] xfrm_netlink_rcv+0x48/0x60 [ 94.360835][ T6493] netlink_unicast+0x5c0/0x690 [ 94.360929][ T6493] netlink_sendmsg+0x5c8/0x6f0 [ 94.360957][ T6493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.361024][ T6493] __sock_sendmsg+0x145/0x170 [ 94.361046][ T6493] ____sys_sendmsg+0x31e/0x4a0 [ 94.361117][ T6493] ___sys_sendmsg+0x195/0x1e0 [ 94.361236][ T6493] __x64_sys_sendmsg+0xd4/0x160 [ 94.361278][ T6493] x64_sys_call+0x17ba/0x3000 [ 94.361380][ T6493] do_syscall_64+0xc0/0x2a0 [ 94.361409][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.361431][ T6493] RIP: 0033:0x7fd363e9acb9 [ 94.361447][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.361465][ T6493] RSP: 002b:00007fd3628f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.361557][ T6493] RAX: ffffffffffffffda RBX: 00007fd364115fa0 RCX: 00007fd363e9acb9 [ 94.361574][ T6493] RDX: 000000000006484c RSI: 0000200000001580 RDI: 0000000000000003 [ 94.361591][ T6493] RBP: 00007fd3628f7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.361606][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.361618][ T6493] R13: 00007fd364116038 R14: 00007fd364115fa0 R15: 00007ffe7cef2698 [ 94.361647][ T6493] [ 94.741607][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.981'. [ 94.751500][ T6504] netlink: 212 bytes leftover after parsing attributes in process `syz.5.981'. [ 94.766207][ T6504] netlink: 32 bytes leftover after parsing attributes in process `syz.5.981'. [ 94.789147][ T6505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6505 comm=syz.0.984 [ 94.828906][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.987'. [ 95.015747][ T6513] vlan2: entered promiscuous mode [ 95.022905][ T6513] batadv0: entered promiscuous mode [ 95.127435][ T6539] netlink: 84 bytes leftover after parsing attributes in process `syz.3.996'. [ 95.141243][ T6540] loop4: detected capacity change from 0 to 512 [ 95.154170][ T6540] EXT4-fs (loop4): 1 truncate cleaned up [ 95.177625][ T6540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.210560][ T6540] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.994: bg 0: block 465: padding at end of block bitmap is not set [ 95.242926][ T6539] FAULT_INJECTION: forcing a failure. [ 95.242926][ T6539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.257140][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.3.996 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.257175][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.257191][ T6539] Call Trace: [ 95.257200][ T6539] [ 95.257210][ T6539] __dump_stack+0x1d/0x30 [ 95.257286][ T6539] dump_stack_lvl+0x95/0xd0 [ 95.257307][ T6539] dump_stack+0x15/0x1b [ 95.257367][ T6539] should_fail_ex+0x263/0x280 [ 95.257472][ T6539] should_fail+0xb/0x20 [ 95.257499][ T6539] should_fail_usercopy+0x1a/0x20 [ 95.257530][ T6539] _copy_to_user+0x20/0xa0 [ 95.257565][ T6539] simple_read_from_buffer+0xb5/0x130 [ 95.257636][ T6539] proc_fail_nth_read+0x10e/0x150 [ 95.257669][ T6539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.257697][ T6539] vfs_read+0x1ab/0x7f0 [ 95.257758][ T6539] ? __schedule+0x82d/0xc90 [ 95.257847][ T6539] ? __rcu_read_unlock+0x4e/0x70 [ 95.257912][ T6539] ? __fget_files+0x184/0x1c0 [ 95.257948][ T6539] ? mutex_lock+0x57/0x90 [ 95.257985][ T6539] ksys_read+0xdc/0x1a0 [ 95.258087][ T6539] __x64_sys_read+0x40/0x50 [ 95.258110][ T6539] x64_sys_call+0x2889/0x3000 [ 95.258140][ T6539] do_syscall_64+0xc0/0x2a0 [ 95.258215][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.258238][ T6539] RIP: 0033:0x7f33e661b58e [ 95.258263][ T6539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.258283][ T6539] RSP: 002b:00007f33e50b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.258304][ T6539] RAX: ffffffffffffffda RBX: 00007f33e50b76c0 RCX: 00007f33e661b58e [ 95.258354][ T6539] RDX: 000000000000000f RSI: 00007f33e50b70a0 RDI: 0000000000000005 [ 95.258372][ T6539] RBP: 00007f33e50b7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.258384][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.258397][ T6539] R13: 00007f33e68d6038 R14: 00007f33e68d5fa0 R15: 00007ffeccaef768 [ 95.258418][ T6539] [ 95.423186][ T6540] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.478426][ T6540] EXT4-fs (loop4): This should not happen!! Data will be lost [ 95.478426][ T6540] [ 95.488867][ T6540] EXT4-fs (loop4): Total free blocks count 0 [ 95.495243][ T6540] EXT4-fs (loop4): Free/Dirty block details [ 95.501220][ T6540] EXT4-fs (loop4): free_blocks=0 [ 95.506332][ T6540] EXT4-fs (loop4): dirty_blocks=2 [ 95.511413][ T6540] EXT4-fs (loop4): Block reservation details [ 95.517612][ T6540] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 95.547646][ T6547] netlink: 84 bytes leftover after parsing attributes in process `syz.0.998'. [ 95.590406][ T6550] SET target dimension over the limit! [ 95.618135][ T6548] netlink: 84 bytes leftover after parsing attributes in process `syz.3.997'. [ 95.662335][ T6548] netlink: 'syz.3.997': attribute type 3 has an invalid length. [ 95.670397][ T6548] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 95.744768][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.758738][ T6561] loop6: detected capacity change from 0 to 736 [ 95.913587][ T6568] loop5: detected capacity change from 0 to 2048 [ 95.997250][ T6585] loop3: detected capacity change from 0 to 128 [ 96.038344][ T6585] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 96.052727][ T6585] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.086728][ T3801] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.169643][ T6602] FAULT_INJECTION: forcing a failure. [ 96.169643][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 96.183125][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.5.1019 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.183158][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.183235][ T6602] Call Trace: [ 96.183244][ T6602] [ 96.183253][ T6602] __dump_stack+0x1d/0x30 [ 96.183279][ T6602] dump_stack_lvl+0x95/0xd0 [ 96.183358][ T6602] dump_stack+0x15/0x1b [ 96.183385][ T6602] should_fail_ex+0x263/0x280 [ 96.183416][ T6602] should_failslab+0x8c/0xb0 [ 96.183471][ T6602] __kmalloc_cache_noprof+0x64/0x4a0 [ 96.183496][ T6602] ? tcp_sendmsg_fastopen+0x172/0x520 [ 96.183552][ T6602] tcp_sendmsg_fastopen+0x172/0x520 [ 96.183633][ T6602] mptcp_sendmsg_fastopen+0x122/0x320 [ 96.183665][ T6602] mptcp_sendmsg+0xce7/0xf40 [ 96.183693][ T6602] ? avc_has_perm+0x101/0x190 [ 96.183768][ T6602] ? selinux_socket_sendmsg+0x192/0x1c0 [ 96.183873][ T6602] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 96.183898][ T6602] inet_sendmsg+0xc5/0xd0 [ 96.183971][ T6602] __sock_sendmsg+0x102/0x170 [ 96.183994][ T6602] ____sys_sendmsg+0x345/0x4a0 [ 96.184034][ T6602] ___sys_sendmsg+0x195/0x1e0 [ 96.184098][ T6602] __sys_sendmmsg+0x185/0x320 [ 96.184213][ T6602] __x64_sys_sendmmsg+0x57/0x70 [ 96.184282][ T6602] x64_sys_call+0x1e28/0x3000 [ 96.184344][ T6602] do_syscall_64+0xc0/0x2a0 [ 96.184367][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.184437][ T6602] RIP: 0033:0x7f91ff76acb9 [ 96.184463][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.184530][ T6602] RSP: 002b:00007f91fe1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.184550][ T6602] RAX: ffffffffffffffda RBX: 00007f91ff9e5fa0 RCX: 00007f91ff76acb9 [ 96.184567][ T6602] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 96.184583][ T6602] RBP: 00007f91fe1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.184599][ T6602] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 96.184614][ T6602] R13: 00007f91ff9e6038 R14: 00007f91ff9e5fa0 R15: 00007ffcd0575168 [ 96.184659][ T6602] [ 96.490690][ T6614] loop0: detected capacity change from 0 to 128 [ 96.497962][ T6614] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 96.607369][ T6621] loop4: detected capacity change from 0 to 512 [ 96.650188][ T6625] loop6: detected capacity change from 0 to 2048 [ 96.872844][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 96.872863][ T29] audit: type=1326 audit(1768917449.903:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.6.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 96.939101][ T29] audit: type=1400 audit(1768917449.963:5936): avc: denied { read } for pid=6634 comm="syz.6.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.998857][ T29] audit: type=1326 audit(1768917449.983:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.023691][ T29] audit: type=1326 audit(1768917449.983:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.048553][ T29] audit: type=1326 audit(1768917449.993:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.073929][ T29] audit: type=1326 audit(1768917449.993:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.098217][ T29] audit: type=1326 audit(1768917449.993:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.122298][ T29] audit: type=1326 audit(1768917449.993:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.146963][ T29] audit: type=1326 audit(1768917449.993:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.171511][ T29] audit: type=1326 audit(1768917449.993:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6634 comm="syz.6.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f19f345acb9 code=0x7ffc0000 [ 97.285773][ T6660] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 97.298584][ T6660] EXT4-fs (loop6): 1 truncate cleaned up [ 97.305457][ T6660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.445145][ T5890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.455313][ T6669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6669 comm=syz.4.1043 [ 97.515914][ T6657] netlink: 'syz.0.1041': attribute type 21 has an invalid length. [ 97.659304][ T6682] FAULT_INJECTION: forcing a failure. [ 97.659304][ T6682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.672973][ T6682] CPU: 1 UID: 0 PID: 6682 Comm: syz.3.1049 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.673008][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.673024][ T6682] Call Trace: [ 97.673032][ T6682] [ 97.673040][ T6682] __dump_stack+0x1d/0x30 [ 97.673133][ T6682] dump_stack_lvl+0x95/0xd0 [ 97.673222][ T6682] dump_stack+0x15/0x1b [ 97.673240][ T6682] should_fail_ex+0x263/0x280 [ 97.673343][ T6682] should_fail+0xb/0x20 [ 97.673411][ T6682] should_fail_usercopy+0x1a/0x20 [ 97.673485][ T6682] _copy_from_user+0x1c/0xb0 [ 97.673511][ T6682] __copy_msghdr+0x244/0x300 [ 97.673539][ T6682] ___sys_sendmsg+0x10c/0x1e0 [ 97.673608][ T6682] __sys_sendmmsg+0x185/0x320 [ 97.673645][ T6682] __x64_sys_sendmmsg+0x57/0x70 [ 97.673715][ T6682] x64_sys_call+0x1e28/0x3000 [ 97.673826][ T6682] do_syscall_64+0xc0/0x2a0 [ 97.673846][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.673866][ T6682] RIP: 0033:0x7f33e665acb9 [ 97.673880][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.673896][ T6682] RSP: 002b:00007f33e50b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.673991][ T6682] RAX: ffffffffffffffda RBX: 00007f33e68d5fa0 RCX: 00007f33e665acb9 [ 97.674012][ T6682] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 97.674024][ T6682] RBP: 00007f33e50b7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.674035][ T6682] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 97.674047][ T6682] R13: 00007f33e68d6038 R14: 00007f33e68d5fa0 R15: 00007ffeccaef768 [ 97.674065][ T6682] [ 97.884177][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.884177][ T319] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 97.908548][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.908548][ T319] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 97.923794][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.923794][ T319] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 97.938001][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.938001][ T319] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 97.952547][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.952547][ T319] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 97.966226][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.966226][ T319] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 97.982998][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.982998][ T319] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 97.996969][ T319] kworker/u8:6: attempt to access beyond end of device [ 97.996969][ T319] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 98.011385][ T319] kworker/u8:6: attempt to access beyond end of device [ 98.011385][ T319] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 98.026626][ T319] kworker/u8:6: attempt to access beyond end of device [ 98.026626][ T319] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 98.139135][ T6700] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 98.203310][ T6708] random: crng reseeded on system resumption [ 98.263559][ T6714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.271837][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.277573][ T6714] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.302582][ T6714] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1064: lblock 0 mapped to illegal pblock 0 (length 5) [ 98.317513][ T6714] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1064: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 98.350736][ T6714] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1064: lblock 0 mapped to illegal pblock 0 (length 1) [ 98.364496][ T6714] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1064: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 98.387649][ T6718] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 98.399409][ T6718] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 98.410254][ T6718] EXT4-fs (loop0): group descriptors corrupted! [ 98.420327][ T6714] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1064: lblock 0 mapped to illegal pblock 0 (length 1) [ 98.434587][ T6714] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 98.447384][ T6714] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.447384][ T6714] [ 98.461245][ T6714] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.1064: lblock 0 mapped to illegal pblock 0 (length 1) [ 98.472531][ T6725] tracefs: Bad value for 'mode' [ 98.476014][ T6714] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1064: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 98.499445][ T6714] EXT4-fs error (device loop3) in ext4_setattr:6035: Corrupt filesystem [ 98.524878][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.608435][ T6731] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.1072: corrupted in-inode xattr: bad e_name length [ 98.623872][ T6731] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1072: couldn't read orphan inode 12 (err -117) [ 98.637820][ T6737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6737 comm=syz.6.1071 [ 98.647162][ T6731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.698308][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.746591][ T6741] batadv0: entered promiscuous mode [ 98.756868][ T6741] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.767254][ T6741] batadv0: left promiscuous mode [ 98.889996][ T6760] set_capacity_and_notify: 7 callbacks suppressed [ 98.890017][ T6760] loop3: detected capacity change from 0 to 512 [ 98.903728][ T6760] ext4: Bad value for 'resgid' [ 98.908752][ T6760] ext4: Bad value for 'resgid' [ 98.916450][ T6760] process 'syz.3.1080' launched '/dev/fd/8' with NULL argv: empty string added [ 98.938141][ T6762] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 98.995780][ T6767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56080 sclass=netlink_route_socket pid=6767 comm=syz.5.1085 [ 98.999252][ T6769] loop3: detected capacity change from 0 to 736 [ 99.038244][ T6767] loop5: detected capacity change from 0 to 128 [ 99.046634][ T6762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.047142][ T6767] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.068009][ T6767] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.085390][ T6769] __nla_validate_parse: 15 callbacks suppressed [ 99.085409][ T6769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1086'. [ 99.091437][ T6767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23312 sclass=netlink_route_socket pid=6767 comm=syz.5.1085 [ 99.336649][ T6789] loop0: detected capacity change from 0 to 512 [ 99.354325][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1094'. [ 99.385464][ T6789] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1089: bg 0: block 393: padding at end of block bitmap is not set [ 99.441717][ T6789] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 99.487810][ T6789] EXT4-fs (loop0): 2 truncates cleaned up [ 99.510098][ T6804] loop5: detected capacity change from 0 to 8192 [ 99.511119][ T6789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.542446][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1098'. [ 99.570484][ T269] bond0: (slave bond_slave_0): interface is now down [ 99.578020][ T269] bond0: (slave bond_slave_1): interface is now down [ 99.593758][ T6810] loop4: detected capacity change from 0 to 736 [ 99.611717][ T269] bond0: now running without any active interface! [ 99.676491][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1099'. [ 99.706820][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.786694][ T6833] program syz.4.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.806796][ T6835] netlink: 'syz.0.1103': attribute type 3 has an invalid length. [ 99.820728][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1107'. [ 99.896108][ T6845] loop0: detected capacity change from 0 to 2048 [ 99.903199][ T6845] EXT4-fs: Ignoring removed bh option [ 99.933322][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.060467][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.077027][ T6853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6853 comm=syz.6.1112 [ 100.099669][ T6854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6854 comm=syz.6.1112 [ 100.222052][ T6864] 9p: Bad value for 'wfdno' [ 100.455604][ T6886] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1122'. [ 100.473639][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1121'. [ 100.504006][ T6890] loop5: detected capacity change from 0 to 512 [ 100.510916][ T6890] EXT4-fs: Ignoring removed i_version option [ 100.517817][ T6890] EXT4-fs: Ignoring removed bh option [ 100.528385][ T6884] geneve2: entered promiscuous mode [ 100.546840][ T6884] geneve2: entered allmulticast mode [ 100.587302][ T6890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.629502][ T6890] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.667587][ T6838] syz.4.1106 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 100.682438][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.4.1106 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.682502][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.682542][ T6838] Call Trace: [ 100.682552][ T6838] [ 100.682562][ T6838] __dump_stack+0x1d/0x30 [ 100.682595][ T6838] dump_stack_lvl+0x95/0xd0 [ 100.682624][ T6838] dump_stack+0x15/0x1b [ 100.682650][ T6838] dump_header+0x80/0x240 [ 100.682695][ T6838] oom_kill_process+0x295/0x350 [ 100.682718][ T6838] out_of_memory+0x97d/0xb80 [ 100.682770][ T6838] try_charge_memcg+0x62e/0xa10 [ 100.682823][ T6838] obj_cgroup_charge_pages+0xa6/0x150 [ 100.682853][ T6838] __memcg_kmem_charge_page+0x9e/0x170 [ 100.682941][ T6838] __alloc_frozen_pages_noprof+0x18a/0x350 [ 100.682981][ T6838] alloc_pages_mpol+0xb3/0x260 [ 100.683023][ T6838] alloc_pages_noprof+0x8f/0x130 [ 100.683089][ T6838] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 100.683127][ T6838] __kvmalloc_node_noprof+0x471/0x680 [ 100.683203][ T6838] ? ip_set_alloc+0x24/0x30 [ 100.683336][ T6838] ? ip_set_alloc+0x24/0x30 [ 100.683368][ T6838] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 100.683464][ T6838] ip_set_alloc+0x24/0x30 [ 100.683530][ T6838] hash_netiface_create+0x282/0x740 [ 100.683577][ T6838] ? __pfx_hash_netiface_create+0x10/0x10 [ 100.683621][ T6838] ip_set_create+0x3cf/0x970 [ 100.683670][ T6838] ? __nla_parse+0x40/0x60 [ 100.683699][ T6838] nfnetlink_rcv_msg+0x509/0x5d0 [ 100.683749][ T6838] netlink_rcv_skb+0x123/0x220 [ 100.683815][ T6838] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.683851][ T6838] nfnetlink_rcv+0x167/0x1720 [ 100.683882][ T6838] ? __kfree_skb+0x109/0x150 [ 100.683925][ T6838] ? nlmon_xmit+0x4f/0x60 [ 100.683947][ T6838] ? consume_skb+0x49/0x140 [ 100.683975][ T6838] ? nlmon_xmit+0x4f/0x60 [ 100.683995][ T6838] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 100.684091][ T6838] ? __dev_queue_xmit+0x139a/0x1f20 [ 100.684122][ T6838] ? __dev_queue_xmit+0x148/0x1f20 [ 100.684230][ T6838] ? ref_tracker_free+0x37d/0x3e0 [ 100.684261][ T6838] ? __netlink_deliver_tap+0x4dc/0x500 [ 100.684308][ T6838] netlink_unicast+0x5c0/0x690 [ 100.684342][ T6838] netlink_sendmsg+0x5c8/0x6f0 [ 100.684364][ T6838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.684384][ T6838] __sock_sendmsg+0x145/0x170 [ 100.684478][ T6838] ____sys_sendmsg+0x31e/0x4a0 [ 100.684518][ T6838] ___sys_sendmsg+0x195/0x1e0 [ 100.684562][ T6838] __x64_sys_sendmsg+0xd4/0x160 [ 100.684635][ T6838] x64_sys_call+0x17ba/0x3000 [ 100.684661][ T6838] do_syscall_64+0xc0/0x2a0 [ 100.684686][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.684709][ T6838] RIP: 0033:0x7fd363e9acb9 [ 100.684726][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.684745][ T6838] RSP: 002b:00007fd3628d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.684767][ T6838] RAX: ffffffffffffffda RBX: 00007fd364116090 RCX: 00007fd363e9acb9 [ 100.684781][ T6838] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 100.684875][ T6838] RBP: 00007fd363f08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 100.684888][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.684901][ T6838] R13: 00007fd364116128 R14: 00007fd364116090 R15: 00007ffe7cef2698 [ 100.684920][ T6838] [ 100.684930][ T6838] memory: usage 307196kB, limit 307200kB, failcnt 444 [ 100.818615][ T6890] syzkaller1: entered promiscuous mode [ 100.822228][ T6838] memory+swap: usage 307576kB, limit 9007199254740988kB, failcnt 0 [ 100.827094][ T6890] syzkaller1: entered allmulticast mode [ 100.832216][ T6838] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 100.832240][ T6838] Memory cgroup stats for /syz4: [ 101.074140][ T6838] cache 0 [ 101.082688][ T6838] rss 0 [ 101.085665][ T6838] shmem 0 [ 101.088807][ T6838] mapped_file 0 [ 101.092600][ T6838] dirty 0 [ 101.095722][ T6838] writeback 0 [ 101.099301][ T6838] workingset_refault_anon 126 [ 101.104147][ T6838] workingset_refault_file 642 [ 101.109109][ T6838] swap 385024 [ 101.112552][ T6838] swapcached 4096 [ 101.116487][ T6838] pgpgin 47331 [ 101.119905][ T6838] pgpgout 47330 [ 101.123826][ T6838] pgfault 59573 [ 101.127494][ T6838] pgmajfault 64 [ 101.131193][ T6838] inactive_anon 0 [ 101.134973][ T6838] active_anon 0 [ 101.138680][ T6838] inactive_file 0 [ 101.142652][ T6838] active_file 0 [ 101.146320][ T6838] unevictable 0 [ 101.149845][ T6838] hierarchical_memory_limit 314572800 [ 101.155460][ T6838] hierarchical_memsw_limit 9223372036854771712 [ 101.162234][ T6838] total_cache 0 [ 101.165834][ T6838] total_rss 0 [ 101.169404][ T6838] total_shmem 0 [ 101.173208][ T6838] total_mapped_file 0 [ 101.177547][ T6838] total_dirty 0 [ 101.181240][ T6838] total_writeback 0 [ 101.185204][ T6838] total_workingset_refault_anon 126 [ 101.190696][ T6838] total_workingset_refault_file 642 [ 101.196399][ T6838] total_swap 385024 [ 101.200246][ T6838] total_swapcached 4096 [ 101.205293][ T6838] total_pgpgin 47331 [ 101.209219][ T6838] total_pgpgout 47330 [ 101.213338][ T6838] total_pgfault 59573 [ 101.217475][ T6838] total_pgmajfault 64 [ 101.221694][ T6838] total_inactive_anon 0 [ 101.225983][ T6838] total_active_anon 0 [ 101.229987][ T6838] total_inactive_file 0 [ 101.234476][ T6838] total_active_file 0 [ 101.238863][ T6838] total_unevictable 0 [ 101.243842][ T6838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1106,pid=6832,uid=0 [ 101.259727][ T6838] Memory cgroup out of memory: Killed process 6832 (syz.4.1106) total-vm:96180kB, anon-rss:1204kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 101.279659][ T6917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1128'. [ 101.439090][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.729832][ T6982] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 101.770561][ T6986] veth0: entered promiscuous mode [ 101.811231][ T6990] 8021q: adding VLAN 0 to HW filter on device bond5 [ 101.834817][ T6990] bond4: (slave bond5): making interface the new active one [ 101.843312][ T6990] bond4: (slave bond5): Enslaving as an active interface with an up link [ 101.854845][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1146'. [ 101.899514][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 101.899532][ T29] audit: type=1326 audit(1768917454.914:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ff76acb9 code=0x7ffc0000 [ 101.946777][ T7003] loop5: detected capacity change from 0 to 512 [ 101.953526][ T29] audit: type=1326 audit(1768917454.964:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f91ff76acb9 code=0x7ffc0000 [ 101.977490][ T29] audit: type=1326 audit(1768917454.964:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ff76acb9 code=0x7ffc0000 [ 102.001588][ T29] audit: type=1326 audit(1768917454.964:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f91ff76acb9 code=0x7ffc0000 [ 102.025767][ T29] audit: type=1326 audit(1768917454.964:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ff76acb9 code=0x7ffc0000 [ 102.050469][ T29] audit: type=1326 audit(1768917454.964:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f91ff76acb9 code=0x7ffc0000 [ 102.076028][ T29] audit: type=1326 audit(1768917454.964:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91ff76aa22 code=0x7ffc0000 [ 102.100674][ T29] audit: type=1326 audit(1768917454.964:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91ff72b58e code=0x7ffc0000 [ 102.125697][ T29] audit: type=1326 audit(1768917454.964:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f91ff76aae7 code=0x7ffc0000 [ 102.149956][ T29] audit: type=1326 audit(1768917454.964:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91ff72b58e code=0x7ffc0000 [ 102.178863][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 102.195007][ T52] bond0: (slave bond_slave_0): interface is now down [ 102.202079][ T52] bond0: (slave bond_slave_1): interface is now down [ 102.235529][ T7011] sch_tbf: burst 21478 is lower than device lo mtu (65550) ! [ 102.277965][ T7014] team0: entered promiscuous mode [ 102.283388][ T7014] team_slave_0: entered promiscuous mode [ 102.289553][ T7014] team_slave_1: entered promiscuous mode [ 102.304120][ T7014] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.313027][ T7014] team0: left promiscuous mode [ 102.318502][ T7014] team_slave_0: left promiscuous mode [ 102.323718][ T7019] loop4: detected capacity change from 0 to 128 [ 102.325004][ T7014] team_slave_1: left promiscuous mode [ 102.341997][ T7019] msdos: Bad value for 'gid' [ 102.347124][ T7019] msdos: Bad value for 'gid' [ 102.352389][ T1601] bond0: (slave bond_slave_0): interface is now down [ 102.359567][ T1601] bond0: (slave bond_slave_1): interface is now down [ 102.412221][ T7024] FAULT_INJECTION: forcing a failure. [ 102.412221][ T7024] name failslab, interval 1, probability 0, space 0, times 0 [ 102.425658][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.4.1156 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.425770][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.425783][ T7024] Call Trace: [ 102.425851][ T7024] [ 102.425861][ T7024] __dump_stack+0x1d/0x30 [ 102.425891][ T7024] dump_stack_lvl+0x95/0xd0 [ 102.425918][ T7024] dump_stack+0x15/0x1b [ 102.425942][ T7024] should_fail_ex+0x263/0x280 [ 102.426040][ T7024] should_failslab+0x8c/0xb0 [ 102.426061][ T7024] kmem_cache_alloc_noprof+0x68/0x490 [ 102.426081][ T7024] ? dst_alloc+0xbd/0x100 [ 102.426247][ T7024] dst_alloc+0xbd/0x100 [ 102.426308][ T7024] ? __ip_select_ident+0xf2/0x1a0 [ 102.426332][ T7024] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 102.426363][ T7024] ip_route_output_key_hash+0x63/0xa0 [ 102.426449][ T7024] tcp_v4_connect+0x3e4/0xaf0 [ 102.426480][ T7024] mptcp_connect+0x5d8/0x900 [ 102.426564][ T7024] __inet_stream_connect+0x169/0x7f0 [ 102.426700][ T7024] ? should_failslab+0x8c/0xb0 [ 102.426718][ T7024] ? __kmalloc_cache_noprof+0x245/0x4a0 [ 102.426739][ T7024] ? tcp_sendmsg_fastopen+0x172/0x520 [ 102.426769][ T7024] tcp_sendmsg_fastopen+0x43a/0x520 [ 102.426797][ T7024] mptcp_sendmsg_fastopen+0x122/0x320 [ 102.426821][ T7024] mptcp_sendmsg+0xce7/0xf40 [ 102.426840][ T7024] ? avc_has_perm+0x101/0x190 [ 102.426883][ T7024] ? selinux_socket_sendmsg+0x192/0x1c0 [ 102.426907][ T7024] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 102.427025][ T7024] inet_sendmsg+0xc5/0xd0 [ 102.427125][ T7024] __sock_sendmsg+0x102/0x170 [ 102.427146][ T7024] ____sys_sendmsg+0x345/0x4a0 [ 102.427303][ T7024] ___sys_sendmsg+0x195/0x1e0 [ 102.427349][ T7024] __sys_sendmmsg+0x185/0x320 [ 102.427387][ T7024] __x64_sys_sendmmsg+0x57/0x70 [ 102.427416][ T7024] x64_sys_call+0x1e28/0x3000 [ 102.427450][ T7024] do_syscall_64+0xc0/0x2a0 [ 102.427470][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.427490][ T7024] RIP: 0033:0x7fd363e9acb9 [ 102.427504][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.427521][ T7024] RSP: 002b:00007fd3628f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.427603][ T7024] RAX: ffffffffffffffda RBX: 00007fd364115fa0 RCX: 00007fd363e9acb9 [ 102.427615][ T7024] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 102.427626][ T7024] RBP: 00007fd3628f7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.427637][ T7024] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 102.427648][ T7024] R13: 00007fd364116038 R14: 00007fd364115fa0 R15: 00007ffe7cef2698 [ 102.427673][ T7024] [ 102.712079][ T4776] bond0: (slave bond_slave_0): interface is now down [ 102.719070][ T4776] bond0: (slave bond_slave_1): interface is now down [ 102.744610][ T4776] bond0: now running without any active interface! [ 102.783631][ T7031] 9p: Bad value for 'wfdno' [ 102.793231][ T7034] FAULT_INJECTION: forcing a failure. [ 102.793231][ T7034] name failslab, interval 1, probability 0, space 0, times 0 [ 102.806684][ T7034] CPU: 0 UID: 0 PID: 7034 Comm: syz.4.1161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.806749][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.806763][ T7034] Call Trace: [ 102.806772][ T7034] [ 102.806783][ T7034] __dump_stack+0x1d/0x30 [ 102.806830][ T7034] dump_stack_lvl+0x95/0xd0 [ 102.806857][ T7034] dump_stack+0x15/0x1b [ 102.806972][ T7034] should_fail_ex+0x263/0x280 [ 102.807003][ T7034] should_failslab+0x8c/0xb0 [ 102.807032][ T7034] kmem_cache_alloc_noprof+0x68/0x490 [ 102.807055][ T7034] ? dst_alloc+0xbd/0x100 [ 102.807137][ T7034] dst_alloc+0xbd/0x100 [ 102.807172][ T7034] ip_route_input_rcu+0x1683/0x1c10 [ 102.807212][ T7034] ip_route_input_noref+0x5f/0x90 [ 102.807323][ T7034] ip_rcv_finish_core+0x312/0xb60 [ 102.807351][ T7034] ? iptable_mangle_hook+0x119/0x260 [ 102.807389][ T7034] ip_rcv_finish+0x100/0x1c0 [ 102.807418][ T7034] ip_rcv+0x62/0x160 [ 102.807443][ T7034] ? __pfx_ip_rcv_finish+0x10/0x10 [ 102.807526][ T7034] ? __pfx_ip_rcv+0x10/0x10 [ 102.807552][ T7034] __netif_receive_skb+0xff/0x270 [ 102.807581][ T7034] ? tun_rx_batched+0xd1/0x440 [ 102.807686][ T7034] netif_receive_skb+0x4b/0x2d0 [ 102.807720][ T7034] ? should_failslab+0x8c/0xb0 [ 102.807747][ T7034] ? tun_rx_batched+0xd1/0x440 [ 102.807813][ T7034] tun_rx_batched+0x106/0x440 [ 102.807844][ T7034] ? eth_type_trans+0x215/0x3d0 [ 102.807938][ T7034] tun_get_user+0x2011/0x27c0 [ 102.807984][ T7034] ? ref_tracker_alloc+0x1f2/0x2f0 [ 102.808014][ T7034] tun_chr_write_iter+0x15e/0x210 [ 102.808110][ T7034] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 102.808133][ T7034] vfs_write+0x5a6/0x9f0 [ 102.808159][ T7034] ksys_write+0xdc/0x1a0 [ 102.808229][ T7034] __x64_sys_write+0x40/0x50 [ 102.808250][ T7034] x64_sys_call+0x2847/0x3000 [ 102.808282][ T7034] do_syscall_64+0xc0/0x2a0 [ 102.808355][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.808381][ T7034] RIP: 0033:0x7fd363e5b58e [ 102.808402][ T7034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.808483][ T7034] RSP: 002b:00007fd3628f6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.808550][ T7034] RAX: ffffffffffffffda RBX: 00007fd3628f76c0 RCX: 00007fd363e5b58e [ 102.808569][ T7034] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8 [ 102.808584][ T7034] RBP: 00007fd3628f7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.808600][ T7034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.808615][ T7034] R13: 00007fd364116038 R14: 00007fd364115fa0 R15: 00007ffe7cef2698 [ 102.808641][ T7034] [ 103.131554][ T7041] EXT4-fs: inline encryption not supported [ 103.170320][ T7041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.196684][ T7045] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1164: invalid indirect mapped block 256 (level 2) [ 103.238604][ T7047] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 103.258941][ T7045] EXT4-fs (loop6): 2 truncates cleaned up [ 103.291086][ T7045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.312160][ T7047] EXT4-fs (loop4): Remounting filesystem read-only [ 103.401514][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.555856][ T7065] IPv6: NLM_F_REPLACE set, but no existing node found! [ 103.819331][ T7070] geneve4: entered promiscuous mode [ 103.824831][ T7070] geneve4: entered allmulticast mode [ 103.949767][ T7077] set_capacity_and_notify: 3 callbacks suppressed [ 103.949786][ T7077] loop3: detected capacity change from 0 to 512 [ 104.040415][ T7077] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 104.052683][ T7077] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 104.063726][ T7077] EXT4-fs (loop3): group descriptors corrupted! [ 104.077220][ T5890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.095055][ T7081] program syz.5.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.106242][ T7083] 9p: Bad value for 'wfdno' [ 104.136952][ T7086] syzkaller0: entered promiscuous mode [ 104.143063][ T7086] syzkaller0: entered allmulticast mode [ 104.326630][ T7093] loop4: detected capacity change from 0 to 512 [ 104.487100][ T7111] loop0: detected capacity change from 0 to 128 [ 104.580248][ T7115] __nla_validate_parse: 7 callbacks suppressed [ 104.580267][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 104.617721][ T7115] team0: entered promiscuous mode [ 104.622886][ T7115] team_slave_0: entered promiscuous mode [ 104.628690][ T7115] team_slave_1: entered promiscuous mode [ 104.649547][ T7115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.671690][ T7115] team0: left promiscuous mode [ 104.676699][ T7115] team_slave_0: left promiscuous mode [ 104.682202][ T7115] team_slave_1: left promiscuous mode [ 104.733510][ T7120] 9p: Bad value for 'wfdno' [ 104.805462][ T7122] loop4: detected capacity change from 0 to 512 [ 104.824302][ T7124] loop0: detected capacity change from 0 to 1024 [ 104.836174][ T7126] loop3: detected capacity change from 0 to 1024 [ 104.852223][ T7124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.871405][ T7122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.892658][ T7126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.899322][ T7124] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.918860][ T7122] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.930752][ T7124] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.1190: lblock 0 mapped to illegal pblock 0 (length 5) [ 104.946864][ T7124] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 104.967740][ T7126] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.983442][ T7124] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.1190: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.020805][ T7126] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1191: lblock 0 mapped to illegal pblock 0 (length 5) [ 105.036026][ T7087] syz.5.1175 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 105.051829][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.5.1175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.051858][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.051874][ T7087] Call Trace: [ 105.051884][ T7087] [ 105.051974][ T7087] __dump_stack+0x1d/0x30 [ 105.052002][ T7087] dump_stack_lvl+0x95/0xd0 [ 105.052035][ T7087] dump_stack+0x15/0x1b [ 105.052134][ T7087] dump_header+0x80/0x240 [ 105.052163][ T7087] oom_kill_process+0x295/0x350 [ 105.052194][ T7087] out_of_memory+0x97d/0xb80 [ 105.052219][ T7087] try_charge_memcg+0x62e/0xa10 [ 105.052304][ T7087] obj_cgroup_charge_pages+0xa6/0x150 [ 105.052356][ T7087] __memcg_kmem_charge_page+0x9e/0x170 [ 105.052394][ T7087] __alloc_frozen_pages_noprof+0x18a/0x350 [ 105.052497][ T7087] alloc_pages_mpol+0xb3/0x260 [ 105.052547][ T7087] alloc_pages_noprof+0x8f/0x130 [ 105.052599][ T7087] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 105.052647][ T7087] __kvmalloc_node_noprof+0x471/0x680 [ 105.052673][ T7087] ? ip_set_alloc+0x24/0x30 [ 105.052790][ T7087] ? ip_set_alloc+0x24/0x30 [ 105.052840][ T7087] ip_set_alloc+0x24/0x30 [ 105.052942][ T7087] hash_netiface_create+0x282/0x740 [ 105.053035][ T7087] ? __pfx_hash_netiface_create+0x10/0x10 [ 105.053081][ T7087] ip_set_create+0x3cf/0x970 [ 105.053117][ T7087] ? __nla_parse+0x40/0x60 [ 105.053145][ T7087] nfnetlink_rcv_msg+0x509/0x5d0 [ 105.053249][ T7087] netlink_rcv_skb+0x123/0x220 [ 105.053290][ T7087] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 105.053400][ T7087] nfnetlink_rcv+0x167/0x1720 [ 105.053434][ T7087] ? __kfree_skb+0x109/0x150 [ 105.053460][ T7087] ? nlmon_xmit+0x4f/0x60 [ 105.053483][ T7087] ? consume_skb+0x49/0x140 [ 105.053530][ T7087] ? nlmon_xmit+0x4f/0x60 [ 105.053551][ T7087] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 105.053585][ T7087] ? __dev_queue_xmit+0x139a/0x1f20 [ 105.053696][ T7087] ? __dev_queue_xmit+0x148/0x1f20 [ 105.053798][ T7087] ? ref_tracker_free+0x37d/0x3e0 [ 105.053834][ T7087] ? __netlink_deliver_tap+0x4dc/0x500 [ 105.053912][ T7087] netlink_unicast+0x5c0/0x690 [ 105.053962][ T7087] netlink_sendmsg+0x5c8/0x6f0 [ 105.053990][ T7087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.054070][ T7087] __sock_sendmsg+0x145/0x170 [ 105.054101][ T7087] ____sys_sendmsg+0x31e/0x4a0 [ 105.054141][ T7087] ___sys_sendmsg+0x195/0x1e0 [ 105.054242][ T7087] __x64_sys_sendmsg+0xd4/0x160 [ 105.054281][ T7087] x64_sys_call+0x17ba/0x3000 [ 105.054360][ T7087] do_syscall_64+0xc0/0x2a0 [ 105.054386][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.054413][ T7087] RIP: 0033:0x7f91ff76acb9 [ 105.054432][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.054455][ T7087] RSP: 002b:00007f91fe1a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.054511][ T7087] RAX: ffffffffffffffda RBX: 00007f91ff9e6090 RCX: 00007f91ff76acb9 [ 105.054530][ T7087] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 105.054547][ T7087] RBP: 00007f91ff7d8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 105.054622][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.054635][ T7087] R13: 00007f91ff9e6128 R14: 00007f91ff9e6090 R15: 00007ffcd0575168 [ 105.054734][ T7087] [ 105.054722][ T7126] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 105.054744][ T7087] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 105.075025][ T7124] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 105.076575][ T7087] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 105.092115][ T7133] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.1190: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.093435][ T7087] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 105.100237][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 105.102290][ T7087] Memory cgroup stats for /syz5: [ 105.110773][ T7133] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 105.123362][ T7087] cache 0 [ 105.128842][ T7133] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.128842][ T7133] [ 105.129495][ T7126] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1191: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.135203][ T7087] rss 4096 [ 105.135215][ T7087] shmem 0 [ 105.142043][ T7124] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.1190: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.145107][ T7087] mapped_file 0 [ 105.174317][ T7126] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 105.177757][ T7087] dirty 0 [ 105.184034][ T7124] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 105.188573][ T7087] writeback 0 [ 105.188585][ T7087] workingset_refault_anon 54 [ 105.200158][ T7124] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 105.203603][ T7087] workingset_refault_file 0 [ 105.203619][ T7087] swap 192512 [ 105.256976][ T7126] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.1191: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.261035][ T7087] swapcached 12288 [ 105.267278][ T7126] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 105.271505][ T7087] pgpgin 22338 [ 105.271518][ T7087] pgpgout 22335 [ 105.277135][ T7126] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.277135][ T7126] [ 105.282163][ T7087] pgfault 19261 [ 105.282177][ T7087] pgmajfault 26 [ 105.282186][ T7087] inactive_anon 12288 [ 105.282196][ T7087] active_anon 0 [ 105.282205][ T7087] inactive_file 0 [ 105.298868][ T7126] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.1191: lblock 0 mapped to illegal pblock 0 (length 1) [ 105.302653][ T7087] active_file 0 [ 105.325545][ T7126] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 105.338440][ T7087] unevictable 0 [ 105.338455][ T7087] hierarchical_memory_limit 314572800 [ 105.338467][ T7087] hierarchical_memsw_limit 9223372036854771712 [ 105.338477][ T7087] total_cache 0 [ 105.401291][ T7126] EXT4-fs error (device loop3) in ext4_setattr:6035: Corrupt filesystem [ 105.410134][ T7087] total_rss 4096 [ 105.410149][ T7087] total_shmem 0 [ 105.410159][ T7087] total_mapped_file 0 [ 105.757024][ T7087] total_dirty 0 [ 105.761167][ T7087] total_writeback 0 [ 105.765313][ T7087] total_workingset_refault_anon 54 [ 105.771562][ T7087] total_workingset_refault_file 0 [ 105.777346][ T7087] total_swap 192512 [ 105.781774][ T7087] total_swapcached 12288 [ 105.786373][ T7087] total_pgpgin 22338 [ 105.790672][ T7087] total_pgpgout 22335 [ 105.794987][ T7087] total_pgfault 19261 [ 105.799279][ T7087] total_pgmajfault 26 [ 105.803513][ T7087] total_inactive_anon 12288 [ 105.808132][ T7087] total_active_anon 0 [ 105.812690][ T7087] total_inactive_file 0 [ 105.817197][ T7087] total_active_file 0 [ 105.821247][ T7087] total_unevictable 0 [ 105.825350][ T7087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1175,pid=7080,uid=0 [ 105.840597][ T7087] Memory cgroup out of memory: Killed process 7080 (syz.5.1175) total-vm:96180kB, anon-rss:1204kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 105.860745][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.871690][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 105.954499][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.975441][ T7087] syz.5.1175 (7087) used greatest stack depth: 7208 bytes left [ 106.041929][ T7155] program syz.3.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.065192][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 106.074589][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1198'. [ 106.110587][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 106.134894][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 106.174306][ T7162] 9p: Bad value for 'wfdno' [ 106.238854][ T7165] loop4: detected capacity change from 0 to 512 [ 106.296896][ T7165] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 106.308437][ T7165] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 106.319037][ T7165] EXT4-fs (loop4): group descriptors corrupted! [ 106.434294][ T7179] loop5: detected capacity change from 0 to 512 [ 106.443694][ T7179] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1207: invalid indirect mapped block 256 (level 2) [ 106.458943][ T7179] EXT4-fs (loop5): 2 truncates cleaned up [ 106.465792][ T7179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.696812][ T7184] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.075113][ T7160] syz.3.1197 (7160) used greatest stack depth: 7080 bytes left [ 107.090594][ T7186] loop0: detected capacity change from 0 to 128 [ 107.099790][ T7186] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.112793][ T7186] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.130269][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 107.130288][ T29] audit: type=1400 audit(1768917460.144:6102): avc: denied { ioctl } for pid=7185 comm="syz.0.1208" path="/266/file1/file1" dev="loop0" ino=12 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.192922][ T29] audit: type=1326 audit(1768917460.194:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.217445][ T29] audit: type=1326 audit(1768917460.194:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.242018][ T29] audit: type=1326 audit(1768917460.194:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.266944][ T29] audit: type=1326 audit(1768917460.194:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.291357][ T29] audit: type=1326 audit(1768917460.194:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.316275][ T29] audit: type=1326 audit(1768917460.194:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.316308][ T6542] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 107.340678][ T29] audit: type=1326 audit(1768917460.194:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.377893][ T29] audit: type=1326 audit(1768917460.194:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.402402][ T29] audit: type=1326 audit(1768917460.204:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7190 comm="syz.3.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 107.487234][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.499862][ T7196] 9p: Bad value for 'wfdno' [ 107.548339][ T3321] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.623197][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1219'. [ 107.668976][ T7212] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 107.678256][ T7215] loop6: detected capacity change from 0 to 1024 [ 107.709676][ T7215] EXT4-fs: Ignoring removed orlov option [ 107.730145][ T7215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.812699][ T7234] FAULT_INJECTION: forcing a failure. [ 107.812699][ T7234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.827405][ T7234] CPU: 1 UID: 0 PID: 7234 Comm: syz.3.1225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.827436][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.827450][ T7234] Call Trace: [ 107.827459][ T7234] [ 107.827469][ T7234] __dump_stack+0x1d/0x30 [ 107.827499][ T7234] dump_stack_lvl+0x95/0xd0 [ 107.827535][ T7234] dump_stack+0x15/0x1b [ 107.827560][ T7234] should_fail_ex+0x263/0x280 [ 107.827590][ T7234] should_fail+0xb/0x20 [ 107.827694][ T7234] should_fail_usercopy+0x1a/0x20 [ 107.827739][ T7234] _copy_to_user+0x20/0xa0 [ 107.827773][ T7234] simple_read_from_buffer+0xb5/0x130 [ 107.827820][ T7234] proc_fail_nth_read+0x10e/0x150 [ 107.827877][ T7234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.827968][ T7234] vfs_read+0x1ab/0x7f0 [ 107.828008][ T7234] ? __rcu_read_unlock+0x4e/0x70 [ 107.828070][ T7234] ? __fget_files+0x184/0x1c0 [ 107.828097][ T7234] ? mutex_lock+0x57/0x90 [ 107.828133][ T7234] ksys_read+0xdc/0x1a0 [ 107.828156][ T7234] __x64_sys_read+0x40/0x50 [ 107.828180][ T7234] x64_sys_call+0x2889/0x3000 [ 107.828287][ T7234] do_syscall_64+0xc0/0x2a0 [ 107.828313][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.828339][ T7234] RIP: 0033:0x7f33e661b58e [ 107.828358][ T7234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.828381][ T7234] RSP: 002b:00007f33e50b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.828438][ T7234] RAX: ffffffffffffffda RBX: 00007f33e50b76c0 RCX: 00007f33e661b58e [ 107.828456][ T7234] RDX: 000000000000000f RSI: 00007f33e50b70a0 RDI: 0000000000000003 [ 107.828472][ T7234] RBP: 00007f33e50b7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.828488][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.828504][ T7234] R13: 00007f33e68d6038 R14: 00007f33e68d5fa0 R15: 00007ffeccaef768 [ 107.828654][ T7234] [ 108.172430][ T7244] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.193753][ T7251] 9p: Bad value for 'wfdno' [ 108.229312][ T7252] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.242523][ T7244] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.339364][ T5414] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.351059][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1234'. [ 108.361083][ T7257] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 108.400444][ T7215] Set syz1 is full, maxelem 65536 reached [ 108.472020][ T7259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.516878][ T7259] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.556354][ T5890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.605861][ T7259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1233'. [ 108.620421][ T7268] netlink: 'syz.6.1237': attribute type 13 has an invalid length. [ 108.759024][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.777889][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1241'. [ 108.840376][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.927642][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.515468][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1255'. [ 109.740444][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 109.760258][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 109.773328][ T7292] Set syz1 is full, maxelem 65536 reached [ 109.814383][ T7327] set_capacity_and_notify: 3 callbacks suppressed [ 109.814400][ T7327] loop3: detected capacity change from 0 to 1024 [ 109.828979][ T7327] EXT4-fs: Ignoring removed orlov option [ 109.843123][ T7327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.862953][ T7329] loop6: detected capacity change from 0 to 512 [ 109.959073][ T7340] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1264'. [ 109.989445][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.075432][ T7346] loop0: detected capacity change from 0 to 2048 [ 110.091411][ T7356] loop4: detected capacity change from 0 to 2048 [ 110.109064][ T7352] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 110.119000][ T7356] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 110.139241][ T7356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.181523][ T7352] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 110.214248][ T7363] SET target dimension over the limit! [ 110.226648][ T7352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7352 comm=syz.3.1269 [ 110.316901][ T7370] loop6: detected capacity change from 0 to 512 [ 110.341618][ T7372] loop4: detected capacity change from 0 to 512 [ 110.349329][ T7370] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1276: invalid indirect mapped block 256 (level 2) [ 110.425110][ T7370] EXT4-fs (loop6): 2 truncates cleaned up [ 110.447824][ T7370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.482833][ T7377] loop3: detected capacity change from 0 to 128 [ 110.740583][ T7391] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.774735][ T7377] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1277'. [ 110.932051][ T7394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.943053][ T7394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 110.954111][ T7394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 35555 - 0 [ 111.000956][ T7396] loop5: detected capacity change from 0 to 512 [ 111.089565][ T7396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.165372][ T7396] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.228434][ T5890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.300180][ T7394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.311153][ T7394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.322277][ T7394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 35555 - 0 [ 111.342259][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1284'. [ 111.373273][ T7407] loop3: detected capacity change from 0 to 512 [ 111.399233][ T7407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1288: bg 0: block 393: padding at end of block bitmap is not set [ 111.425466][ T7407] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 111.435159][ T7407] EXT4-fs (loop3): 2 truncates cleaned up [ 111.479745][ T7394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.485022][ T7407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.490883][ T7394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.515349][ T7394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 35555 - 0 [ 111.527580][ T7415] xt_l2tp: missing protocol rule (udp|l2tpip) [ 111.535735][ T7414] loop6: detected capacity change from 0 to 128 [ 111.547671][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.566180][ T7414] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 111.580609][ T7414] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.608329][ T7394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.619285][ T7394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.630091][ T7394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 35555 - 0 [ 111.657137][ T5890] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.690976][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.719003][ T7424] 9p: Bad value for 'wfdno' [ 111.750566][ T1969] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 35555 - 0 [ 111.750609][ T1969] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.750643][ T1969] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 111.773122][ T1969] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 35555 - 0 [ 111.773162][ T1969] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.773204][ T1969] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 111.783912][ T1969] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 35555 - 0 [ 111.783997][ T1969] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.784030][ T1969] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 111.790647][ T7431] 9p: Bad value for 'wfdno' [ 111.792778][ T1969] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 35555 - 0 [ 111.792813][ T1969] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.792904][ T1969] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 111.846119][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 111.913457][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1298'. [ 111.997909][ T7442] vlan0: entered promiscuous mode [ 112.010629][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1301'. [ 112.010648][ T7449] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1301'. [ 112.010667][ T7449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1301'. [ 112.237449][ T7457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.262261][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.266288][ T7457] bond4: (slave bond0): Enslaving as an active interface with a down link [ 112.320111][ T7457] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 112.320375][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.387425][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.387505][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.390333][ T7457] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 112.450204][ T37] bond4: (slave bond0): failed to get link speed/duplex [ 112.519251][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 112.519353][ T29] audit: type=1326 audit(1768917465.535:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 112.519536][ T29] audit: type=1326 audit(1768917465.535:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 112.519805][ T29] audit: type=1326 audit(1768917465.535:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 112.578521][ T1969] bond4: (slave bond0): failed to get link speed/duplex [ 112.604100][ T29] audit: type=1400 audit(1768917465.635:6483): avc: denied { append } for pid=7453 comm="syz.0.1303" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.604538][ T29] audit: type=1326 audit(1768917465.635:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 112.604612][ T29] audit: type=1326 audit(1768917465.635:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.0.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07636dacb9 code=0x7ffc0000 [ 112.689769][ T2136] bond0: (slave bridge0): interface is now down [ 112.692087][ T1969] bond4: (slave bond0): failed to get link speed/duplex [ 112.762018][ T29] audit: type=1400 audit(1768917465.785:6486): avc: denied { map } for pid=7473 comm="syz.6.1310" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.809722][ T37] bond4: (slave bond0): failed to get link speed/duplex [ 112.830307][ T2136] bond0: (slave bridge0): interface is now down [ 112.839246][ T2136] bond0: now running without any active interface! [ 112.870171][ T7481] 9p: Bad value for 'wfdno' [ 112.962650][ T7490] 9p: Bad value for 'wfdno' [ 113.041853][ T29] audit: type=1326 audit(1768917466.065:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 113.068247][ T29] audit: type=1326 audit(1768917466.065:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 113.135292][ T29] audit: type=1326 audit(1768917466.065:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f33e665acb9 code=0x7ffc0000 [ 113.277339][ T7513] futex_wake_op: syz.0.1326 tries to shift op by -65; fix this program [ 113.315889][ T7511] team0: entered promiscuous mode [ 113.321812][ T7511] team_slave_0: entered promiscuous mode [ 113.328035][ T7511] team_slave_1: entered promiscuous mode [ 113.346687][ T7511] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.367854][ T7511] team0: left promiscuous mode [ 113.373122][ T7511] team_slave_0: left promiscuous mode [ 113.378802][ T7511] team_slave_1: left promiscuous mode [ 113.413053][ T7519] 9p: Bad value for 'wfdno' [ 113.435693][ T7515] syzkaller0: entered promiscuous mode [ 113.441606][ T7515] syzkaller0: entered allmulticast mode [ 113.519720][ T7527] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1332: invalid indirect mapped block 256 (level 2) [ 113.534315][ T7527] EXT4-fs (loop6): 2 truncates cleaned up [ 113.541554][ T7527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.772711][ T7545] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.878866][ T7548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.035260][ T7554] FAULT_INJECTION: forcing a failure. [ 114.035260][ T7554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.049691][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.0.1339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.049728][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.049741][ T7554] Call Trace: [ 114.049747][ T7554] [ 114.049755][ T7554] __dump_stack+0x1d/0x30 [ 114.049849][ T7554] dump_stack_lvl+0x95/0xd0 [ 114.049877][ T7554] dump_stack+0x15/0x1b [ 114.049902][ T7554] should_fail_ex+0x263/0x280 [ 114.049926][ T7554] should_fail+0xb/0x20 [ 114.049949][ T7554] should_fail_usercopy+0x1a/0x20 [ 114.050014][ T7554] _copy_from_user+0x1c/0xb0 [ 114.050049][ T7554] __sys_sendto+0x1ca/0x380 [ 114.050148][ T7554] __x64_sys_sendto+0x76/0x90 [ 114.050180][ T7554] x64_sys_call+0x29a7/0x3000 [ 114.050211][ T7554] do_syscall_64+0xc0/0x2a0 [ 114.050233][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.050331][ T7554] RIP: 0033:0x7f076369b58e [ 114.050348][ T7554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.050366][ T7554] RSP: 002b:00007f0762135e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.050392][ T7554] RAX: ffffffffffffffda RBX: 00007f07621376c0 RCX: 00007f076369b58e [ 114.050406][ T7554] RDX: 0000000000000020 RSI: 00007f0762136000 RDI: 0000000000000006 [ 114.050461][ T7554] RBP: 0000000000000000 R08: 00007f0762135f04 R09: 000000000000000c [ 114.050477][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 114.050494][ T7554] R13: 00007f0762135f58 R14: 00007f0762136000 R15: 0000000000000000 [ 114.050515][ T7554] [ 114.257888][ T7548] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.366908][ T5890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.407875][ T7563] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.434666][ T7563] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.448033][ T7561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.491150][ T7561] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.497217][ T7568] netlink: 'syz.6.1343': attribute type 21 has an invalid length. [ 114.547019][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.557998][ T3801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.624733][ T7576] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 114.650411][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.665680][ T7573] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.700225][ T7576] EXT4-fs (loop6): 1 truncate cleaned up [ 114.719843][ T7576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.735619][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.766933][ T5414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.925612][ T7597] __nla_validate_parse: 10 callbacks suppressed [ 114.925746][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1353'. [ 114.951833][ T5890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.978092][ T7601] 9p: Bad value for 'wfdno' [ 115.034326][ T7597] vlan2: entered promiscuous mode [ 115.040875][ T7597] batadv0: entered promiscuous mode [ 115.235822][ T7613] futex_wake_op: syz.3.1354 tries to shift op by -1; fix this program [ 115.421934][ T7625] set_capacity_and_notify: 14 callbacks suppressed [ 115.421961][ T7625] loop6: detected capacity change from 0 to 512 [ 115.436404][ T7625] ================================================================== [ 115.445425][ T7625] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 115.454419][ T7625] [ 115.456917][ T7625] write to 0xffff888104b95c24 of 4 bytes by task 3309 on cpu 0: [ 115.464760][ T7625] fsnotify_detach_mark+0xb9/0x160 [ 115.470133][ T7625] fsnotify_destroy_mark+0x6f/0x150 [ 115.475391][ T7625] __se_sys_inotify_rm_watch+0xe8/0x170 [ 115.481343][ T7625] __x64_sys_inotify_rm_watch+0x31/0x40 [ 115.487385][ T7625] x64_sys_call+0x2a15/0x3000 [ 115.492409][ T7625] do_syscall_64+0xc0/0x2a0 [ 115.497365][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.503641][ T7625] [ 115.506338][ T7625] read to 0xffff888104b95c24 of 4 bytes by task 7625 on cpu 1: [ 115.514243][ T7625] fsnotify_handle_inode_event+0x125/0x220 [ 115.520749][ T7625] fsnotify+0x15d0/0x1730 [ 115.525386][ T7625] __fsnotify_parent+0x2f8/0x3a0 [ 115.530613][ T7625] __fput+0x1de/0x650 [ 115.534796][ T7625] fput_close_sync+0xad/0x190 [ 115.543136][ T7625] __x64_sys_close+0x55/0xf0 [ 115.548094][ T7625] x64_sys_call+0x2c25/0x3000 [ 115.553668][ T7625] do_syscall_64+0xc0/0x2a0 [ 115.558371][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.565247][ T7625] [ 115.567927][ T7625] value changed: 0x00000003 -> 0x00000000 [ 115.574323][ T7625] [ 115.576951][ T7625] Reported by Kernel Concurrency Sanitizer on: [ 115.583601][ T7625] CPU: 1 UID: 0 PID: 7625 Comm: syz.6.1362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.594224][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.605188][ T7625] ================================================================== [ 122.748716][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!