last executing test programs: 2.707551169s ago: executing program 1 (id=4088): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) 2.707027329s ago: executing program 1 (id=4089): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4084) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0xb}, @alu={0x4, 0x1, 0xd, 0x8, 0x3, 0x8, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x0, 0x0, 0xb111e6f2b94fd7f5, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x0, 0xffffffff, 0x153}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r1], &(0x7f00000007c0)=[{0x5, 0x2, 0xb}, {0x4, 0x2, 0x10, 0x9}], 0x10, 0xfffffff8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xd37}, @device_b, @broadcast, @initial, {0x3, 0x9}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x2}}, 0x1a, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 2.33222491s ago: executing program 4 (id=4100): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) r1 = syz_io_uring_setup(0xd7d, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) open(0x0, 0x141042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xe2, &(0x7f00000001c0)=""/226}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000dfffffff000000ff07000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) creat(0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) listen(0xffffffffffffffff, 0x0) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x0, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r10, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)) ioctl(r1, 0x8, &(0x7f0000000380)="060733768d7c2929ca03b231edd14c7ac5cdaa894ade3dc3dce4476ea1a5c92898b305e025e32f72ea1829b6cae63c908b2915558968b111a664744189638e4bddf514f5b60c01efb69ec8ea6881ca13ec03876cb185b92c175f5f4f0be15578f4429bf8394e4fc22ba45cdcc563517db9ef85ea48d5d15dc1c06e834cff5f18cf0d30be161738e92f2237a170d746a462cf35e7ef63a450f5d9e4f4689838db9aec65784ec0e5b1f7872d0fed19e5635aa0931bbdc3214706770ef56f2286bf8a4c580a8c32eff21777423de4c39d37edbfb03d646c15193d965edf") 1.734725639s ago: executing program 4 (id=4103): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d300000000000000008303030303030303030303034303030303030303030302c73686f72746e616d653d65722c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f636861727365743d757466f69e75731725e72216799ebd57484a7e1948a8aa65667265652c757466383d312c6e66733d6e6f7374616c655f726f2c73686f72742e616d653d6d697865642c757466383d306d653d77696e6e742c007aea3388304ddedb3208ceb9b2c23924743277bd2c0d0019d44efede967f3df81cce421f7aafa8aa7c706311ab7a0ce39abf7858b6ba6ef5206da03692650000000000000001d0559b166f8c433d34c03a60999dea3bab649a260b216354ecc726cd1f6519546e8ef6ae17a0da1b9313ef4b5633c5f1bf756a7816d304d61c4d15539bae9f6e8dc91d178c85744c5cc226ca0568f9f6da8997bc10100b836488e47d0b7e6ccffaf123b1000000"], 0x1, 0x250, &(0x7f0000002680)="$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") r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xcb33c2bd5ad13365, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @private}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f00000006c0)={0x18, 0x2, {0xffff, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000900)={0x18, 0x2, {0x0, @loopback}}, 0x1e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x12}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r6) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) 1.729153819s ago: executing program 4 (id=4106): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x51}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @map_val={0x18, 0x1}, @jmp={0x5, 0x1, 0xb, 0x4, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x6, 0x9, 0x8, 0xfffffffffffffff0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}]}, &(0x7f0000000480)='GPL\x00', 0x81, 0x26, &(0x7f0000000ac0)=""/38, 0x41100, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001080)=[{0x2, 0x4, 0x9, 0x3}, {0x4, 0x4, 0x10}, {0x4, 0x3, 0x4}, {0x0, 0x5, 0xa, 0x7}, {0x2, 0x1, 0x6, 0x1}, {0x5, 0x3, 0x0, 0xb}, {0x3, 0x3, 0x10, 0x3}, {0x1, 0x1, 0xa, 0x4}, {0x3, 0x3, 0xb, 0xb}], 0x10, 0x101}, 0x90) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) dup2(r3, r7) io_uring_setup(0x7d5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}) io_setup(0x0, &(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000), 0xfe, 0x246, &(0x7f0000000840)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r8 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000fc4fbe)=""/34, 0x22) lseek(r8, 0x8, 0x1) getdents64(r8, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) write$binfmt_script(r7, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.248979658s ago: executing program 4 (id=4110): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x24ab3000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="02", 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@link_local, @empty, @void, {@generic={0x8864, "f8e286d9fddb"}}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x6658, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000001ac0)=""/4096, &(0x7f0000000180)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@ieee802154, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@private}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r4, r6, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet6(r5, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c40)="e9", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x76, &(0x7f0000000000)={r9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000004c0)={r9, 0x74, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x200, @rand_addr=' \x01\x00', 0x1ff}, @in={0x2, 0x1, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x6}]}, &(0x7f0000000500)=0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) 1.22182918s ago: executing program 1 (id=4111): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f00002d4000/0x1000)=nil, 0x1000, 0x200000d, 0x10010, 0xffffffffffffffff, 0x7fff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 1.170154775s ago: executing program 1 (id=4112): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x36, 0x0, 0x0) mmap(&(0x7f00003a8000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe04, &(0x7f0000000180)={&(0x7f0000000340)={0x20, r2, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}]}]}, 0x20}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = dup(r4) pwritev(r5, &(0x7f00000006c0)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000080000000) r7 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, &(0x7f00000002c0)) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800005, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf}, 0x0, 0x100, 0x0, 0x0, 0x101, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) 964.449631ms ago: executing program 2 (id=4115): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) unshare(0x68060200) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc08c5334, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 910.052386ms ago: executing program 4 (id=4116): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0xcc7ab1a46271f3ed, 0x0, 0xfd, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x110000, &(0x7f00000004c0)=ANY=[@ANYBLOB="747261156b21dc7566646e6f3d06c9eb917901000000f1d50f447c0cd5a6e5faa82684779326f41ef2ed5c6681d44eb68bc5d7f987bea539b05db92849c9b965fe25e0689ed71d547b62010071d7141664bf5be45738e5173ccaeaec8e1a90aee1db09ed029e08bf0e96ef868e1775ebfd465c3ea38417942b574c3118fcaa832dd38fc6f95b576b22290f0d77cbf7df7d9b0401767649ca53b536f51e8003a9cb6637db496f4030f837bbb7bdf30e", @ANYRESDEC=0x0, @ANYBLOB="2c77cc987c783d", @ANYRESHEX=r0]) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) syncfs(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000001740)=""/4100, 0xa15b0}, {&(0x7f00000001c0)=""/57}], 0x1, 0x0, 0x63695dc5e766}, 0x700) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) 866.171659ms ago: executing program 0 (id=4117): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x250, &(0x7f0000002680)="$eJzs3EFrI2UYB/DHbt1tu+ymBxEUxBe96GXY1g8gQXZBLCh1I+pBmLVTDR2TkgmViLh78+rnWDx6E9Qv0Is37956EbzsQYw0Sd1kjYiwcWrz+0H7PuHNH55hJuGZQHLy7lefHOxX2X7ej5W1FCsR9+JBxOZpNfHEZF0Z1Zdj2r14+eqvPz339nvvv9Hc2bm5m9Kt5u1XtlNK15//7tPPv37hh/7Vd765/u2VON784OSX7Z+Pnz5+5uT32x+3q9SuUqfbT3m60+328ztlkfba1UGW0ltlkVdFaneqojezv192Dw8HKe/sXds47BVVlfLOIB0Ug9Tvpn5vkPKP8nYnZVmWrm0E/6R1f3c3b9bdBQuzevqv12vmlyJi/S/brft1NAUA1Ot8z/+nU4v5f3HM/8vgdP7fmLx+Z5n/AQAAAAAAAAAAAADg/+DBcNgYDoeNs/Xs70pErEXE2eO6+2QxnP/lNvXFvbWI8suj1lFrvI73m/vRjjKKuBGN+G10PUyM61uv79y8kUY24/vy7iR/96h1aTa/FY3YnJ/fGufTbP7J2JjOb0cjnpqf356bvxwvvTiVz6IRP34Y3Shjb3RdP8x/sZXSa2/uPJJfHz0PAAAALoIs/Wnu/XuW/d3+OP8vPh945P56NZ5drffYAQAAYFlUg88O8rIseooLWLwaEeegDcV0sfa4T8p6LKLVut+ZAACAx+3h0F93JwAAAAAAAAAAAAAAAAAAALC8/osfPKv7GAEAAAAAAAAAAAAAAAAAAAAAAOC8+CMAAP//i7gqKA==") r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xcb33c2bd5ad13365, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @private}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f00000006c0)={0x18, 0x2, {0xffff, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000900)={0x18, 0x2, {0x0, @loopback}}, 0x1e) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x12}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r6) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) 854.96049ms ago: executing program 3 (id=4118): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=@delchain={0xafc, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_route={{0xa}, {0x62c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xeb}, @TCA_ROUTE4_ACT={0x420, 0x6, [@m_bpf={0xe0, 0x19, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x6, 0x1, 0x3ff, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffdc9, 0x2, 0xffffffffffffffff, 0xb1d, 0xc7a}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x68, 0x6, "26c646727410d644e908793b866f28208c7c42275bc82c223287cbe09a9296d9366fb66fcfa8e70e4cb8fc48bbd606b3e21b8718649c14117604c8e27b64403006e75671773e17723a58bc392a9085351455900677f8c49afa7eecbd0142b7dd725b9472"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x104, 0x1f, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x3, 0x8, 0x5, 0xc0000000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff7}]}, {0x95, 0x6, "99a252c4659fd27195aeee6433c34bb6069fe2017d0e25965e7a9518ede8f4e86a6623bb1a676cf411d53ee421317309c76e01145daf69e6fe811ac925c922a6349e0706e880fecd2cf325055f559b50849d43ae91ce207de3909e071c36dcae37e79c195e1ad21d4500f1836c99fd9a26b5ef63337afb2f8bd403a0cc4f993e9aff759a21e00ede51a03a80cabb4d06ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x50, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x1c, 0x6, "0296a486cbee9555069afcec082dfb289eb21e4253503ad0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xb8, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xb}}]}, {0x73, 0x6, "5982498c1dca107f3a7004385c9139f544462b7a54366f14a83799c7e9e3ddcd6537440b4664f87d7042842e2f2ae9a2a31bbc08162afb957bbb7121cb5535b477e815c156a95072a35b52b770b48743a95f4ece2c85d7e442004c991bf53047dc2be0505f233d1027b2aa69983c8a"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x130, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7ff, 0x6, 0x9}, @rand_addr=0x64010100, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x7, 0xb}, @remote, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x8, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x36}, @local, 0x0, 0x1}}]}, {0x8d, 0x6, "a19dd7d13bf41e3bb05a7828b3d63481a3db3ac6b6ffebc227f896660182a7c08cf0ecd648bcb39379e8e9b27a100365212cd2d4ccbc3baa4d689acccbb78536b8388dbc8d7cf79dc744407272d2adc22d370b9a400708f73888149a5f8e81576b8575eea98338ef92e6c9b57dc0c278f5df69cae7e228736130b3eb08fa924c9d3c13ae4c3b4d3b0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x1f8, 0x6, [@m_skbedit={0x104, 0xe, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xc}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7fff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xc, 0x1, 0x6238, 0xffffffc7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0xb, 0x4, 0x4, 0x1}}]}, {0x76, 0x6, "36cc492d7e2e7c97c5b66e5aa1f2c04eb7b822f8b30ee90f96a8274995d7ee8db5eab2aa6449f0f8c822a237e1a53ab1fac68dc5383b2b01bfe5c49cee59453e8d08f709da1dcbc9f0750e27f6d6b9fd400cab689106e6723c4249dab69560163c8a6085b42a3257414770f303009ca12487"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xf0, 0x12, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12a3, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x7, 0x6, 0x5c36}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8f, 0x3, 0x6, 0x9}}]}, {0x87, 0x6, "6aafad9a8641a95a7989e9c5d616da09ec482b1cdbcc38cf642fb4c0249f09f8fb3fc99289acd75ea90d8611c26cdca8ed7012b444b4d675d25cdf57fa4bca63c4d19210fab779213f2024de7bcfe829be1b2b1a0b4943a25743b89895a7fb45df2f63768bbc034830d54659e50ff00c08eda1fa56439358be3d3eccb6cfc9c75f8975"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_fw={{0x7}, {0x490, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x2f0, 0x4, [@m_vlan={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x65, 0x6, "f370dfc26bda3e8bd45216da1aa3964ed3b60b4334447ba4ec948d16c5ea9e784cb150ef66ab93528c18790962548e5c98822116cbfdcf7c3a8c7c2ee29dd2ff997bf0d0f836545bbd9b9302deb518f69dfe39552cca68ac02e9c6dbf11370b01a"}, {0xc}, {0xc}}}, @m_ctinfo={0x140, 0x0, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xa9, 0x6, "8c4274210bf4344eee0ade94d895eb3f5fdc4ec866ec0d5005a60331686a8486fa8e91c85c847181e823fee4afb8a60979707828e026c45a9f6bd9f7ee27bef80232e58cb39f657808a8baeadea90445f236d2258ab3605aad1caf64002deeb4d8a5343c583834755ade8cf160436309025cb38b6c9299c2c1cd0ef13722520a49dd39f5764b7ab61e70dca6442cd72486bed389794867ca6a1ff829148784451724a821e4"}, {0xc}, {0xc}}}, @m_skbedit={0x80, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8}]}, {0x41, 0x6, "c7edfeac621139196345a6f8a58e296e7b575b7c0378eaffc10c3da07f6334206643a2e68c91a8b4902ecb43b8a7f223c44b62e3db93dda61a92e5954d"}, {0xc}, {0xc}}}, @m_skbmod={0x90, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x61, 0x6, "be55bff691533e94de09ed9bad82256009362c9d3574a6b99e33706b0f0231574705a47990aef3802fbf834b6a38694135ceea751b58dbb126083b120c1a2fdc50bdb043e9620b3ed622634d55d1ebdf64b587e4e5ce2f87cd842a014f"}, {0xc}, {0xc}}}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x130, 0x4, [@m_simple={0x12c, 0x0, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x7, 0x3, '9p\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}]}, {0x5c, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806e82a3b539579"}, {0xc}, {0xc}}}]}]}}]}, 0xafc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 822.248533ms ago: executing program 0 (id=4119): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x8}, 0x48) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, &(0x7f0000000000)) 808.423934ms ago: executing program 3 (id=4120): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') lseek(r4, 0x1, 0x0) lseek(r4, 0x18000000000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r5) syz_emit_ethernet(0x112, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000080000000fff00007fff0001"], 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040), 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x55) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100003063cb7a60000000064f0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004800128044000100697036677265746170000000340002801400060000000000000000000000000000000000060010000000000014000700000000000000000000000000000000010a0001"], 0x74}}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/17, 0x11}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000100)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000040)=0x10, 0x4) 805.959914ms ago: executing program 1 (id=4121): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x124) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4f24, @local}, {0x0, @link_local}, 0x12, {0x2, 0x0, @multicast1}, 'lo\x00'}) 782.828186ms ago: executing program 1 (id=4122): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4084) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0xb}, @alu={0x4, 0x1, 0xd, 0x8, 0x3, 0x8, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x1}], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x0, 0x0, 0xb111e6f2b94fd7f5, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x0, 0xffffffff, 0x153}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r1], &(0x7f00000007c0)=[{0x5, 0x2, 0xb}, {0x4, 0x2, 0x10, 0x9}], 0x10, 0xfffffff8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params, @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xd37}, @device_b, @broadcast, @initial, {0x3, 0x9}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x2}}, 0x1a, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 734.7185ms ago: executing program 0 (id=4123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x9c}}, 0x0) (fail_nth: 10) 414.219696ms ago: executing program 3 (id=4124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x0, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 413.227036ms ago: executing program 0 (id=4125): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000100)=r1, 0x4) (async) io_uring_enter(r1, 0x7df6, 0x2fe3, 0x12, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000640)="b9ff03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000000162079f7d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 411.799576ms ago: executing program 2 (id=4126): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x80, 0x7}]}, 0xc, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x48c042) r2 = fcntl$dupfd(r0, 0x406, r1) write(r2, &(0x7f0000000100)="86f38a0c64822c925447b173f2dee64fda1fdce8661d17e2496c08e5361631376b65935fea4133b0e27a7af18abea5e3d75fc2cf3add564c03b6a321cd0bacbcffd52960d5e339dd000927aae867461eb9b441e5ca96778f696df05eeca88542c1915bd96c84adceec5bc33f96802beaefa6516edeb9cf572805eda4ec40f94bb0aa5644138fae919a359ea827085aae27a1b7ab81cab9dc18efd27eb085596abd5a7896d6eaa6eac1ff8192b7c3e07e53d2d7abd087b72e6a03305aadc52dd5627be12904", 0xc5) sendmsg$NFT_BATCH(r1, &(0x7f0000004380)={&(0x7f0000000200), 0xc, &(0x7f0000004340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSETELEM={0x3eb0, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3e64, 0x3, 0x0, 0x1, [{0x2284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x231f417e}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x113c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd2, 0x1, "7def7635102e212beb201492b07d27582e57ce6d2b5da82a9734016cbd6802d35102fada83a47e6c1a897954f86851257e1869b3e2909afec2694731e375c503bd2571ccb4b41a5055e0e9061a5abe3e5720f7d8b4f206ac93dbcf87fb63b84aaf366bef8ab5aa8e4de524614603c169993ec94b2f70e88b5b2985cfb4788cb00abcd636d6a6cb16bfbddfdf494a8da3e5c8008e933a10eb54086f0921373feafe03889b100fee0a74cbca7ce27fbf11013261775ce1a5c6b88e4b0852740bbcaaf67a1e982e4bf82e167ae88037"}]}, @NFTA_SET_ELEM_KEY={0x10d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "e4f26f27cc06453c226adc08ddeebfc6517bc7036efbbdbe8a60"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7441}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5d}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4a7400af}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x510, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "b6dc860134a4a96f86f71407d54c5a55754344b1527242f7ccb07f276c1e97c02fbd15414c45d8c5f826f41b6470a5c812c8801dc5272c4c9725565f88a28412881ce299300a7fb4e1"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "6b500cdc0f050981860599fdf4ed5688163e862d998fbb830b95f81f9c342a9cc2b78d038452d62b09ba481d8ec12cd01d57fa4bec770cc870808e25d47b2b01086b74a69bc46bbd41e37c5a9e88d533213efb346f29296e01e7450cd9dcb6eb8d1bb7916663d89e6fbfaebe6b21160c950f19819068d6720cf28eeffcfd62dc50e325cb486e"}]}, @NFTA_SET_ELEM_KEY_END={0x1b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3a, 0x1, "1d848b6781405234144cc697dc2b02e46e337e3d55b81423885ec6825de9617e2c554eaa2aa270c920734f1c919742971399f532721b"}, @NFTA_DATA_VALUE={0x7b, 0x1, "e91aa1625a657d5115f32182200131a9fdd160e31415dfa4e1f98a8c6bf3606e198c376eaec18c133d73ccd85bfc7c82830a23e44fa5c069eaf632be20cc2acdba040f762210a3d77a930832fc2dda92895baa67e0432c83b58013e896b6026ed155936c97927246d4d4f82a81736ae73b2b390d593ae4"}, @NFTA_DATA_VALUE={0xf1, 0x1, "9cb0893f7d28fc536e50c078d4681db40e1197c181738745ab69e2ed5bc6d0076336ca8d39cbe4dec35ebef9bf9d0ffacf8684d0604ec8d85318cf14983c6996a8d7a6d8846410f48d94523f824f1e17f30ec2e934f18ba95f7c58180068be53ac0cf554f16d4f2946f8776349d479942e27d84ade0627a558a1e5cf8102f96ca586d739733172a1924ed74b56a855bd0da3022a4fd5c095e79203ff9cc58eb1b2406dc883a066a3db1b22c492be797098059e451526778bf4b652e37ff8ceee7d5179bb1f1eb927b892feb00cf64915fca98d50f5ccefabdd0c8de51eb6943de6b81b57572cf042174941e111"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfff5}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xde, 0x6, 0x1, 0x0, "da774a1c99cb680e99221870dbd9b547d8371a6288a69353ccd99ee1f5534919423d9ae210feb631521cea051a7cbce377727392a8f1582654292e218007a1d6956f90b5edb73b400621bb2b3b6b9d75d2479aaa333dad3f874df5b8720e8e89b74869f44395d28f3ffdbe7c0f92474843b4263b65333c0b89ac07f9e9d22c579b91438c5b98b278f53bf6fa7ab159fd13cc94d2c088969414e4281c858d504bcbc2009873e9aed7e0a7baddf5dc2ff659a746bcd0fbd7e03ed45aa12d26197841ad0853180ba49bdbf0c0bd02495709b33a29142277245c4c64"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x56, 0x1, "4975000f65408ecd39ab6ebe6d63f84cb5bfc915d355417157c4a0f3365bc2d279f01b759ee27db2ed0ee72c2ebd45955289d5dc58398d1dde1b21447fbdfae50e0dd8e6dfbf5ab439333ea0d8386bdd7c06"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x84, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x74, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xab, 0x1, "d7be91d6a56a4857785f3b01659b303f085842c3e9ecf0cfadad64966e76146d9cbec6fd8b17b613f6c7df30626dd1088e5129b1ee051a640f8866baedc38666a6d4b30f7c67af9a9a1b30112bcb596971bafdc58b2987ddaf0aa20e4927d782d02c74ab7fad6cb3a32f7ae2fcb21bcd6f5eb94165cedf6b454520af4dac21f39103e8dc85c6a80ad78e25a6297379f23cdcff0d6858911b7159168a3314dc55ee0ed1f83583b8"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "c2ba00ce9e21cd5e00b3b5fa965464a7e42383b22719a134b42752508b0c5d81f438842c"}]}, {0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "9f447d1efe57cbd61384c359afc60320fad7d2c42b49e6c428ff18427a239af4e6fe2c75dc2861af0d0a9735db6f02477697e3f6fae30e36fa68bd6efb47c0bedcd960029a56cef836b7c94a7ffa8828580aeb8faa5bd558a65c03592321d1e0034f52ad0734564acad193e8b74ae188e59efe7e6747385fb89016291af19a5e983268fcbf2e180343979c1fbdc7d01b676311f9b3380aa8de00ce7db33b973aa55412ea597034c59b168e1f356e901f2e22bdbf886c3f17e64a983e2ed9766935451f7d68bb5d5e0737d12f6da3fe1904ca111b8125595096c976c4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x70000000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x1140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_KEY_END={0x130, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "48e98aea14c428cd8475b68530"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000003}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "f57e980f4667d38021bfd61425c3cabfdd3aa9fd370899799255a12312b7695c44f3721621659b2644e5f593dfaa8c395115af477c0458dfb51ddcf665d6a9532199619e5a1e525dbd59a37ae4abd743df3a5e436590b226756acc7cfd3f7f3a4613cdec514e9a72e08b943eb23562663d84e3d50ed10bd1a767ed11dac7e43ef51fafb09f02471c550ba065f3bdb1cd918452f9a78644c8d86eb30bbdec126473bc0e1fee5e7b6704b79cdb9e3de22b247301d1d334658bcc92583f01b5fd222a8aaf32af58189897fb912ab000dcdcd47101f1197c"}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x3f08}, 0x1, 0x0, 0x0, 0x4048054}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) fcntl$setlease(r3, 0x400, 0x3) fsetxattr$security_ima(r3, &(0x7f00000043c0), &(0x7f0000004400)=@v2={0x5, 0x3, 0x10, 0x5, 0x44, "c6e5d9aa23ab72a1a767aba041f725c6237047dcc2410a66b5b499993120e1b62074804e194d71cf5d7a3074e7040567f4a80976584f8ca1e477bd9cdec37fd255c73ad3"}, 0x4d, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000004580)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x885) write$P9_RAUTH(r2, &(0x7f00000045c0)={0x14, 0x67, 0x1, {0x10, 0x3, 0x5}}, 0x14) sendmsg$IEEE802154_START_REQ(r4, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}]}, 0x1c}}, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000004740), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x78, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f0000006f80)=[{{&(0x7f0000004880), 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/208, 0xd0}], 0x1, &(0x7f0000004a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000004b40)=@abs, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000004bc0)=""/211, 0xd3}, {&(0x7f0000004cc0)=""/21, 0x15}, {&(0x7f0000004d00)=""/238, 0xee}, {&(0x7f0000004e00)=""/149, 0x95}, {&(0x7f0000004ec0)=""/175, 0xaf}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/47, 0x2f}], 0x7, &(0x7f0000006040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000006140), 0x6e, &(0x7f00000062c0)=[{&(0x7f00000061c0)=""/241, 0xf1}], 0x1, &(0x7f0000006300)}}, {{0x0, 0x0, &(0x7f00000067c0)=[{&(0x7f0000006340)=""/8, 0x8}, {&(0x7f0000006380)=""/8, 0x8}, {&(0x7f00000063c0)=""/152, 0x98}, {&(0x7f0000006480)=""/203, 0xcb}, {&(0x7f0000006580)=""/207, 0xcf}, {&(0x7f0000006680)=""/151, 0x97}, {&(0x7f0000006740)=""/116, 0x74}], 0x7, &(0x7f0000006840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}}, {{&(0x7f0000006900), 0x6e, &(0x7f0000006d80)=[{&(0x7f0000006980)=""/191, 0xbf}, {&(0x7f0000006a40)=""/157, 0x9d}, {&(0x7f0000006b00)=""/53, 0x35}, {&(0x7f0000006b40)=""/138, 0x8a}, {&(0x7f0000006c00)=""/214, 0xd6}, {&(0x7f0000006d00)=""/83, 0x53}], 0x6, &(0x7f0000006e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000006e80), 0x0, &(0x7f0000006ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xa8}}], 0x6, 0x40, &(0x7f0000007100)) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000007140)={0x0, 0x2}, &(0x7f0000007180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000071c0)={r14, 0xf, 0xff}, &(0x7f0000007200)=0x8) write(r11, &(0x7f0000007240)="6bad811d5d29a9a08286eb8e4950b14544200e97190ef4cc6bec845b0b4b59c1604edfc313c1e7259613fbb14b7c129a8df7f9348ece22c80f7603da4312679b8592379a42d5121003b1567323d2d8fe10783ec51fc608d6841406bed3e38bb6dce8430fbe220aa4d016480a62144c75a5f0c14c39c7b38dee121af90683bc1810", 0x81) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000007380), r9) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000008380)={&(0x7f0000007340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000008340)={&(0x7f00000073c0)={0xf64, r15, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0xed0, 0x8, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @private2, 0x3}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80000001}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @remote, 0x7f}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x708381d5, @mcast2, 0x4}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7d99adbccdb4de2a9414817425274cb9a2f351bb6dba0e582a2845e4cba98c57"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x2b4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0a76342accad3e9e19bac24fc30c9071f98a8cfc755408d63175911aa5bc0445"}]}, {0x4d0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebab834308aa188a0eb652e88cb922525b3eba1d81263b97bacae7070c004711"}, @WGPEER_A_ALLOWEDIPS={0x290, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x1a4, 0x9, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x408, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x370, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffffeff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8000}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xf64}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000083c0)) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f0000008440)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000008540)=0xe8) sendmsg$nl_generic(r7, &(0x7f0000008900)={&(0x7f0000008400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000088c0)={&(0x7f0000008580)={0x340, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {0x9}, [@typed={0x6, 0x50, 0x0, 0x0, @str=',\x00'}, @typed={0x8, 0x26, 0x0, 0x0, @u32=0x6}, @nested={0x66, 0x9, 0x0, 0x1, [@generic="2cd6a7786aad62c61587f8a7be79ddbffb99c3a0b5f6d3d30a6116b63f6554c36be4191be89248617f97b891efd82a1d0a28989cec452ca7bed22662ef3b0db47b829abd47b3", @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x1c, 0x0, 0x0, @uid=r16}]}, @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@loopback}, @generic="eaee3e366b97b6a27cf4c3935436ae772af9188ad84db928eb112e1a1c6ab03a3e64114aecd24c95091c746699b51e8f453b08d3c832dcfd61514f6d12b2054bce7201f461cca1134ffa37940ea6709476d3030b6da383053c084295b7dce9c24dbaa35a4772424454430a67e9c16b1f4241e4eeb0335f2137e726d47e2cd493cca2de", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x80000000}, @nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0xc1, 0x0, 0x0, @u32=0x6}]}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r13}, @nested={0x1fe, 0xbb, 0x0, 0x1, [@typed={0x36, 0xde, 0x0, 0x0, @binary="8cb910a2a3dea800308bf78790d6f93d1b2a161fd9bd277a59b72f58a5d78923885b3487e2ad2791ade43a4174bb6d31cdc3"}, @generic="f31d188635f3323604d7613821457a56260592d16e474a680d2a6c77fa20540700b6150bb473597f5f5b40d933c11e02ef61fa0872b7f9326dd53adee5", @typed={0x88, 0x28, 0x0, 0x0, @binary="b567755cfc3c0c1ea4133a5f23b3737d0f7328b5bfc743a51f789bab1e838c2f96fd075fb74ee3d1bc19cfc323abd3de65b9df12efe907cf6bbb34e3594a357149aef483431e3ef0f23464ebeb78ca2b204c7951c0ca7dbefaac9e76020c8fc8178f06fda6d428ea33031317c8133069d92571d56a823075c010b2603ad89610cea275a9"}, @typed={0x4, 0xa6, 0x0, 0x0, @binary}, @generic="ef08b51591b86e952a6156beddace38a6994c5e4d42871476b3b433faeb3a68789afdcdcde9a4da10af7513858e8fd8d00ba9f82d5afea0e030c", @typed={0xc, 0x9d, 0x0, 0x0, @u64=0x8000000000000001}, @generic="400f2a74c8620c2ed183075c947fedc2399c6e898038f1720b7d1d5b14714a7db01a0de3f9a36f5b52f7857dcdf24ea9b665f730d22e57cad4edb1e220be15880b5d4cc193df35613c12d16b9ed0cf92934b44220b87e27529f6a15067ae40de90fd57c9a250438acadfac444cba6227c7247af834ca1bc7d53a18e5c4a7c1c3020ed101041388386e2cd10afb7db63005f560d15ad892439ca7fd0cb7d11b5397ddd7580640c5380e200afedfb3b22736a3da"]}, @typed={0x8, 0x5a, 0x0, 0x0, @u32=0x4}]}, 0x340}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 369.41684ms ago: executing program 0 (id=4127): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@auto_da_alloc}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@orlov}], [], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$eJzs3LtvHMUfAPDvrh/55Wknv/DIA3IQEBYBO3YCpKAABFIaJCQooDSOiUKcBMVGIlFEAkKhRPwFQImEREVDBQ0CKhAt9AgpQmkSKJDR7u3ad76zcz77fAn3+Uh3ntmdvZnv7o5vdsfrAHpWJXtLIrZFxK8RMVTN1heoVH/cvH5p6q/rl6aSmJ9/+c8kL3fj+qWpsmi53dYiM5JGpB8ksa9JvbMXLp6enJmZPl/kx+bOvDU2e+Hi46fOTJ6cPjl9duLYsaNHxp96cuKJdYkzi+vG3nfP7d9z/LWPX5yaj9d/+CJr77ZifW0cVcNrrrMSlZgvLC4dzN8fXvOn316216ST/i42hFXpi4jscA3k/X8o+mLx4A3FC+93tXFAR2XfTTsblvYVP9OF7y/gvyjRx6FHld/42fVv+drI8Ue3XXs2e5/O479ZvKpr+iPNrmWHq1fsfR2qf1tEvHrl70+yVzS9DwEAsL6+ycY/jzUb/6Vxd025HcUcynBEHIqIXRHx/4jYHRF3ReRl74mIe1dZf2VJvnH88/PmtgJrUTb+e7qY26of/6VFiWQhtz2PfyB549TM9OFin4zEwKYsP75CHd8+/8tHy62r1Iz/sldWfzkWLNrxR/+m+m1OTM5NriHkOtfei9jb3yz+ZGEmINsDeyJibxufn+2zU49+vj9L79jauP7W8a9gHeaZ5j+LeKR6/K/EkvhLSbWm5eYnx/4XM9OHx8qzotGPP119qTY/UJNeGv9Gz51lx39L0/O/iL/sBuV87ezq67j624fLXtM0Hv8kWjn/B5NX8vRgseydybm58+MRg8WCuuUTi9uW+bJ8Fv/Iweb9f1fEP58W2+2LiOwkvi8i7o+IA0XbH4iIByPi4Arxf//cQ2+uvIfaPP/XQRb/iZWOf8RwUjtf30ai7/R3Xy9Xf2u//47mqZFiSSu//1pt4Fr2HQAAANwp0nwOOklHy3TNzandsSWdOTc7d6gSb589UZ2rHo6BtLzTNVRzP3S8uDdc5ieW5I9ExM78L4025/nRqXMz27sZOJA/q1PX/yNNR0er637v1B+9ALePVc051T4d+OVX698YYEN5XhN6l/4PvUv/h96l/0Pvatb/L0fc7EJTgA3m+x96l/4PvUv/h96l/0NPanwkvvx3K+086b+Y2HV8TZv3UKKvQ58ctf+0owOJSLu+69pPpLcs80x0vBkHisSmiGh1q8sdPaZLzx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7378BAAD//+rs4gk=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4105, 0x1009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000080), 0x1, 0x4f4, &(0x7f0000000540)="$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") timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0x19038, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') read$char_usb(r2, &(0x7f0000000140)=""/189, 0xfffffecd) 368.61195ms ago: executing program 3 (id=4128): r0 = creat(0x0, 0x0) io_setup(0x202, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000002b00)=ANY=[@ANYBLOB, @ANYBLOB="cda4f2c100da83c209a36d586b5983c8f924afda46e7a52081bdb5f00d2578c5c04ffeca488d6ea02faa25344e0e0c425709dc89cfbde15beec6eab63d56ae079a570afc128c97e2d150c9dd4953f6ba3a9d0387452ff570c48d7db2d6a0f2c297542ef599712e05049b70b5afcbd8360096cd7e4a9beae91e69befd5183db23332e266c38500565f6b90de5780c9bb2aa58676bf91cc3ed817ade08566c68df72d8f7479c771fde73f151e96f0aba7ee513ae22b41671ca6839f0fe755da2bc3467365b91ea684756f4d49ae3119524b3d213ab506b9346374c2198de62d8eee06a96c4e300c3", @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x61, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0xdfa}, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x109140) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x1, r1, &(0x7f0000000080), 0x20000000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001600)={0x34, 0x0, 0x0, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x5, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x9, 0xa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/319], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 367.69355ms ago: executing program 2 (id=4129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xfff5, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 334.346723ms ago: executing program 2 (id=4130): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x250, &(0x7f0000002680)="$eJzs3EFrI2UYB/DHbt1tu+ymBxEUxBe96GXY1g8gQXZBLCh1I+pBmLVTDR2TkgmViLh78+rnWDx6E9Qv0Is37956EbzsQYw0Sd1kjYiwcWrz+0H7PuHNH55hJuGZQHLy7lefHOxX2X7ej5W1FCsR9+JBxOZpNfHEZF0Z1Zdj2r14+eqvPz339nvvv9Hc2bm5m9Kt5u1XtlNK15//7tPPv37hh/7Vd765/u2VON784OSX7Z+Pnz5+5uT32x+3q9SuUqfbT3m60+328ztlkfba1UGW0ltlkVdFaneqojezv192Dw8HKe/sXds47BVVlfLOIB0Ug9Tvpn5vkPKP8nYnZVmWrm0E/6R1f3c3b9bdBQuzevqv12vmlyJi/S/brft1NAUA1Ot8z/+nU4v5f3HM/8vgdP7fmLx+Z5n/AQAAAAAAAAAAAADg/+DBcNgYDoeNs/Xs70pErEXE2eO6+2QxnP/lNvXFvbWI8suj1lFrvI73m/vRjjKKuBGN+G10PUyM61uv79y8kUY24/vy7iR/96h1aTa/FY3YnJ/fGufTbP7J2JjOb0cjnpqf356bvxwvvTiVz6IRP34Y3Shjb3RdP8x/sZXSa2/uPJJfHz0PAAAALoIs/Wnu/XuW/d3+OP8vPh945P56NZ5drffYAQAAYFlUg88O8rIseooLWLwaEeegDcV0sfa4T8p6LKLVut+ZAACAx+3h0F93JwAAAAAAAAAAAAAAAAAAALC8/osfPKv7GAEAAAAAAAAAAAAAAAAAAAAAAOC8+CMAAP//i7gqKA==") socket$inet(0x2, 0x2, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xcb33c2bd5ad13365, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @private}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f00000006c0)={0x18, 0x2, {0xffff, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000900)={0x18, 0x2, {0x0, @loopback}}, 0x1e) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r5) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 200.485293ms ago: executing program 2 (id=4131): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000024c0)=@delchain={0xaec, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_route={{0xa}, {0x62c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xeb}, @TCA_ROUTE4_ACT={0x420, 0x6, [@m_bpf={0xe0, 0x19, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x6, 0x1, 0x3ff, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffdc9, 0x2, 0xffffffffffffffff, 0xb1d, 0xc7a}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x68, 0x6, "26c646727410d644e908793b866f28208c7c42275bc82c223287cbe09a9296d9366fb66fcfa8e70e4cb8fc48bbd606b3e21b8718649c14117604c8e27b64403006e75671773e17723a58bc392a9085351455900677f8c49afa7eecbd0142b7dd725b9472"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x104, 0x1f, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x3, 0x8, 0x5, 0xc0000000}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff7}]}, {0x95, 0x6, "99a252c4659fd27195aeee6433c34bb6069fe2017d0e25965e7a9518ede8f4e86a6623bb1a676cf411d53ee421317309c76e01145daf69e6fe811ac925c922a6349e0706e880fecd2cf325055f559b50849d43ae91ce207de3909e071c36dcae37e79c195e1ad21d4500f1836c99fd9a26b5ef63337afb2f8bd403a0cc4f993e9aff759a21e00ede51a03a80cabb4d06ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x50, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x1c, 0x6, "0296a486cbee9555069afcec082dfb289eb21e4253503ad0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xb8, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xb}}]}, {0x73, 0x6, "5982498c1dca107f3a7004385c9139f544462b7a54366f14a83799c7e9e3ddcd6537440b4664f87d7042842e2f2ae9a2a31bbc08162afb957bbb7121cb5535b477e815c156a95072a35b52b770b48743a95f4ece2c85d7e442004c991bf53047dc2be0505f233d1027b2aa69983c8a"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x130, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7ff, 0x6, 0x9}, @rand_addr=0x64010100, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x7, 0xb}, @remote, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x8, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x36}, @local, 0x0, 0x1}}]}, {0x8d, 0x6, "a19dd7d13bf41e3bb05a7828b3d63481a3db3ac6b6ffebc227f896660182a7c08cf0ecd648bcb39379e8e9b27a100365212cd2d4ccbc3baa4d689acccbb78536b8388dbc8d7cf79dc744407272d2adc22d370b9a400708f73888149a5f8e81576b8575eea98338ef92e6c9b57dc0c278f5df69cae7e228736130b3eb08fa924c9d3c13ae4c3b4d3b0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x1f8, 0x6, [@m_skbedit={0x104, 0xe, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xc}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7fff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xc, 0x1, 0x6238, 0xffffffc7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0xb, 0x4, 0x4, 0x1}}]}, {0x76, 0x6, "36cc492d7e2e7c97c5b66e5aa1f2c04eb7b822f8b30ee90f96a8274995d7ee8db5eab2aa6449f0f8c822a237e1a53ab1fac68dc5383b2b01bfe5c49cee59453e8d08f709da1dcbc9f0750e27f6d6b9fd400cab689106e6723c4249dab69560163c8a6085b42a3257414770f303009ca12487"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xf0, 0x12, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12a3, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7f, 0x7, 0x6, 0x5c36}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8f, 0x3, 0x6, 0x9}}]}, {0x87, 0x6, "6aafad9a8641a95a7989e9c5d616da09ec482b1cdbcc38cf642fb4c0249f09f8fb3fc99289acd75ea90d8611c26cdca8ed7012b444b4d675d25cdf57fa4bca63c4d19210fab779213f2024de7bcfe829be1b2b1a0b4943a25743b89895a7fb45df2f63768bbc034830d54659e50ff00c08eda1fa56439358be3d3eccb6cfc9c75f8975"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_fw={{0x7}, {0x480, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x2f0, 0x4, [@m_vlan={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x65, 0x6, "f370dfc26bda3e8bd45216da1aa3964ed3b60b4334447ba4ec948d16c5ea9e784cb150ef66ab93528c18790962548e5c98822116cbfdcf7c3a8c7c2ee29dd2ff997bf0d0f836545bbd9b9302deb518f69dfe39552cca68ac02e9c6dbf11370b01a"}, {0xc}, {0xc}}}, @m_ctinfo={0x140, 0x0, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xa9, 0x6, "8c4274210bf4344eee0ade94d895eb3f5fdc4ec866ec0d5005a60331686a8486fa8e91c85c847181e823fee4afb8a60979707828e026c45a9f6bd9f7ee27bef80232e58cb39f657808a8baeadea90445f236d2258ab3605aad1caf64002deeb4d8a5343c583834755ade8cf160436309025cb38b6c9299c2c1cd0ef13722520a49dd39f5764b7ab61e70dca6442cd72486bed389794867ca6a1ff829148784451724a821e4"}, {0xc}, {0xc}}}, @m_skbedit={0x80, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8}]}, {0x41, 0x6, "c7edfeac621139196345a6f8a58e296e7b575b7c0378eaffc10c3da07f6334206643a2e68c91a8b4902ecb43b8a7f223c44b62e3db93dda61a92e5954d"}, {0xc}, {0xc}}}, @m_skbmod={0x90, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x61, 0x6, "be55bff691533e94de09ed9bad82256009362c9d3574a6b99e33706b0f0231574705a47990aef3802fbf834b6a38694135ceea751b58dbb126083b120c1a2fdc50bdb043e9620b3ed622634d55d1ebdf64b587e4e5ce2f87cd842a014f"}, {0xc}, {0xc}}}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_ACT={0x134, 0x4, [@m_simple={0x130, 0x0, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x7, 0x3, '9p\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18}]}, {0x5d, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806e82a3b539579ff"}, {0xc}, {0xc}}}]}]}}]}, 0xaec}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 154.250227ms ago: executing program 3 (id=4132): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x124) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4f24, @local}, {0x0, @link_local}, 0x12, {0x2, 0x0, @multicast1}, 'lo\x00'}) 150.772108ms ago: executing program 3 (id=4133): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, &(0x7f0000000000)) 145.509028ms ago: executing program 2 (id=4134): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') lseek(r4, 0x1, 0x0) lseek(r4, 0x18000000000, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r5) syz_emit_ethernet(0x112, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000080000000fff00007fff0001"], 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040), 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x55) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100003063cb7a60000000064f0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004800128044000100697036677265746170000000340002801400060000000000000000000000000000000000060010000000000014000700000000000000000000000000000000010a0001"], 0x74}}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/17, 0x11}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000100)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000040)=0x10, 0x4) 536.03µs ago: executing program 0 (id=4135): r0 = creat(0x0, 0x0) io_setup(0x202, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000002b00)=ANY=[@ANYBLOB, @ANYBLOB="cda4f2c100da83c209a36d586b5983c8f924afda46e7a52081bdb5f00d2578c5c04ffeca488d6ea02faa25344e0e0c425709dc89cfbde15beec6eab63d56ae079a570afc128c97e2d150c9dd4953f6ba3a9d0387452ff570c48d7db2d6a0f2c297542ef599712e05049b70b5afcbd8360096cd7e4a9beae91e69befd5183db23332e266c38500565f6b90de5780c9bb2aa58676bf91cc3ed817ade08566c68df72d8f7479c771fde73f151e96f0aba7ee513ae22b41671ca6839f0fe755da2bc3467365b91ea684756f4d49ae3119524b3d213ab506b9346374c2198de62d8eee06a96c4e300c3", @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x0, 0x61, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0xdfa}, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x109140) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x124b, &(0x7f0000001880)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x278, 0x168, 0x9, 0x278, 0xb, 0x378, 0x250, 0x250, 0x378, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x278, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) (fail_nth: 6) 0s ago: executing program 4 (id=4136): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_io_uring_setup(0x520b, &(0x7f0000000180)={0x0, 0xfffffffc, 0x2, 0x0, 0x320}, &(0x7f0000000480)=0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006b790490f23da1339f8d85546d40f8431acf233a038aa557946128a6effe", @ANYRES16=r7, @ANYBLOB="010000000000000000002400000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r0, 0x0, 0x1, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) kernel console output (not intermixed with test programs): 377.294327][T16422] __sock_sendmsg+0x140/0x180 [ 377.294428][T16422] ____sys_sendmsg+0x312/0x410 [ 377.294473][T16422] __sys_sendmsg+0x1e9/0x280 [ 377.294543][T16422] __x64_sys_sendmsg+0x46/0x50 [ 377.294568][T16422] x64_sys_call+0x26f8/0x2e00 [ 377.294592][T16422] do_syscall_64+0xc9/0x1c0 [ 377.294615][T16422] ? clear_bhb_loop+0x55/0xb0 [ 377.294657][T16422] ? clear_bhb_loop+0x55/0xb0 [ 377.294682][T16422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.294744][T16422] RIP: 0033:0x7f735fe77299 [ 377.294838][T16422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.294854][T16422] RSP: 002b:00007f735eaf7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.294872][T16422] RAX: ffffffffffffffda RBX: 00007f7360005f80 RCX: 00007f735fe77299 [ 377.294884][T16422] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 377.294896][T16422] RBP: 00007f735eaf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.294907][T16422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.294918][T16422] R13: 000000000000000b R14: 00007f7360005f80 R15: 00007ffd51d2c438 [ 377.294933][T16422] [ 377.305597][T16424] loop0: detected capacity change from 0 to 512 [ 377.305942][T16424] EXT4-fs: Ignoring removed orlov option [ 377.314388][T16424] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 377.314411][T16424] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 377.314476][T16424] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3757: Corrupt directory, running e2fsck is recommended [ 377.347295][T16424] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 377.348782][ C1] eth0: bad gso: type: 1, size: 1408 [ 377.369043][T16424] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3757: corrupted in-inode xattr: overlapping e_value [ 377.567507][T16435] FAULT_INJECTION: forcing a failure. [ 377.567507][T16435] name failslab, interval 1, probability 0, space 0, times 0 [ 377.572696][T16424] EXT4-fs (loop0): Remounting filesystem read-only [ 377.578640][T16435] CPU: 1 UID: 0 PID: 16435 Comm: syz.1.3759 Not tainted 6.11.0-rc1-syzkaller #0 [ 377.578666][T16435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 377.578676][T16435] Call Trace: [ 377.584569][T16424] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 377.597996][T16435] [ 377.598009][T16435] dump_stack_lvl+0xf2/0x150 [ 377.598039][T16435] dump_stack+0x15/0x20 [ 377.657739][T16435] should_fail_ex+0x229/0x230 [ 377.662511][T16435] ? __sigqueue_alloc+0xf6/0x180 [ 377.667520][T16435] should_failslab+0x8f/0xb0 [ 377.672110][T16435] kmem_cache_alloc_noprof+0x4c/0x290 [ 377.677516][T16435] __sigqueue_alloc+0xf6/0x180 [ 377.682381][T16435] __send_signal_locked+0x139/0x700 [ 377.687609][T16435] send_signal_locked+0x28f/0x3a0 [ 377.692629][T16435] do_send_sig_info+0x9f/0xf0 [ 377.697425][T16435] group_send_sig_info+0x6d/0x90 [ 377.702400][T16435] bpf_send_signal_common+0x1a5/0x230 [ 377.707836][T16435] ? __pfx_bpf_send_signal+0x10/0x10 [ 377.713185][T16435] bpf_send_signal+0x19/0x30 [ 377.717804][T16435] ___bpf_prog_run+0x9ab/0x46c0 [ 377.722758][T16435] __bpf_prog_run32+0x74/0xa0 [ 377.727440][T16435] ? __rcu_read_lock+0x36/0x50 [ 377.732253][T16435] bpf_trace_run2+0x104/0x1d0 [ 377.737059][T16435] ? alloc_netdev_mqs+0x7a5/0x8d0 [ 377.742089][T16435] ? free_netdev+0x7d/0x340 [ 377.746622][T16435] ? free_netdev+0x7d/0x340 [ 377.751183][T16435] kfree+0x20d/0x290 [ 377.755247][T16435] free_netdev+0x7d/0x340 [ 377.759578][T16435] ? __pfx_hsr_newlink+0x10/0x10 [ 377.764533][T16435] rtnl_newlink+0x10f4/0x1690 [ 377.769249][T16435] ? security_capable+0x64/0x80 [ 377.774102][T16435] ? ns_capable+0x7d/0xb0 [ 377.778491][T16435] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.783666][T16435] rtnetlink_rcv_msg+0x6aa/0x710 [ 377.788692][T16435] ? ref_tracker_free+0x3a5/0x410 [ 377.793798][T16435] ? __dev_queue_xmit+0x161/0x1fe0 [ 377.798907][T16435] netlink_rcv_skb+0x12c/0x230 [ 377.803694][T16435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.809171][T16435] rtnetlink_rcv+0x1c/0x30 [ 377.813576][T16435] netlink_unicast+0x593/0x670 [ 377.818347][T16435] netlink_sendmsg+0x5cc/0x6e0 [ 377.823195][T16435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.828495][T16435] __sock_sendmsg+0x140/0x180 [ 377.833310][T16435] ____sys_sendmsg+0x312/0x410 [ 377.838326][T16435] __sys_sendmsg+0x1e9/0x280 [ 377.843046][T16435] __x64_sys_sendmsg+0x46/0x50 [ 377.847812][T16435] x64_sys_call+0x26f8/0x2e00 [ 377.852499][T16435] do_syscall_64+0xc9/0x1c0 [ 377.857110][T16435] ? clear_bhb_loop+0x55/0xb0 [ 377.861788][T16435] ? clear_bhb_loop+0x55/0xb0 [ 377.866462][T16435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.872359][T16435] RIP: 0033:0x7f735fe77299 [ 377.876794][T16435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.897157][T16435] RSP: 002b:00007f735eaf7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.905608][T16435] RAX: ffffffffffffffda RBX: 00007f7360005f80 RCX: 00007f735fe77299 [ 377.913645][T16435] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 377.921678][T16435] RBP: 00007f735eaf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.929634][T16435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.937591][T16435] R13: 000000000000000b R14: 00007f7360005f80 R15: 00007ffd51d2c438 [ 377.945582][T16435] [ 377.958908][T16437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.966141][T16437] IPv6: NLM_F_CREATE should be set when creating new route [ 377.973394][T16437] IPv6: NLM_F_CREATE should be set when creating new route [ 378.008418][ C1] eth0: bad gso: type: 1, size: 1408 [ 378.019308][T16424] loop0: detected capacity change from 0 to 512 [ 378.026660][T16424] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 378.036557][T16424] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 378.053659][T16424] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3757: bg 0: block 18: invalid block bitmap [ 378.068092][T16424] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 378.078004][T16424] EXT4-fs (loop0): 1 truncate cleaned up [ 378.084012][T16424] ext2 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.142767][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3763'. [ 378.180798][T16449] bond1: entered promiscuous mode [ 378.247830][T16465] loop1: detected capacity change from 0 to 256 [ 378.374054][T16472] loop3: detected capacity change from 0 to 1764 [ 378.399105][T16472] iso9660: Unknown parameter 'RZ' [ 378.457360][T16479] loop2: detected capacity change from 0 to 512 [ 378.474687][T16479] EXT4-fs: Ignoring removed orlov option [ 378.481632][T16479] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 378.493375][T16479] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 378.503655][T16479] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3774: Corrupt directory, running e2fsck is recommended [ 378.533518][T16479] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 378.572252][T16479] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3774: corrupted in-inode xattr: overlapping e_value [ 378.620404][T16479] EXT4-fs (loop2): Remounting filesystem read-only [ 378.630782][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3775'. [ 378.639973][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.647602][T16483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.660160][T16489] loop1: detected capacity change from 0 to 4096 [ 378.667472][T16479] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 378.726598][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.734291][T16483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.742766][T16491] FAULT_INJECTION: forcing a failure. [ 378.742766][T16491] name failslab, interval 1, probability 0, space 0, times 0 [ 378.755931][T16491] CPU: 1 UID: 0 PID: 16491 Comm: syz.1.3776 Not tainted 6.11.0-rc1-syzkaller #0 [ 378.764962][T16491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 378.775057][T16491] Call Trace: [ 378.778354][T16491] [ 378.781295][T16491] dump_stack_lvl+0xf2/0x150 [ 378.785902][T16491] dump_stack+0x15/0x20 [ 378.790102][T16491] should_fail_ex+0x229/0x230 [ 378.794911][T16491] ? __iomap_dio_rw+0x14e/0x1090 [ 378.799958][T16491] should_failslab+0x8f/0xb0 [ 378.804571][T16491] __kmalloc_cache_noprof+0x4b/0x2a0 [ 378.809870][T16491] __iomap_dio_rw+0x14e/0x1090 [ 378.814771][T16491] ? __rcu_read_unlock+0x4e/0x70 [ 378.819723][T16491] ? avc_has_perm+0xd4/0x160 [ 378.824466][T16491] iomap_dio_rw+0x40/0x90 [ 378.828860][T16491] ext4_file_write_iter+0xaa4/0xe30 [ 378.834073][T16491] ? ext4_file_write_iter+0x531/0xe30 [ 378.839546][T16491] do_iter_readv_writev+0x3b0/0x470 [ 378.845314][T16491] vfs_writev+0x2e0/0x880 [ 378.849724][T16491] __se_sys_pwritev2+0x10c/0x1d0 [ 378.854673][T16491] __x64_sys_pwritev2+0x78/0x90 [ 378.859750][T16491] x64_sys_call+0x1c81/0x2e00 [ 378.864441][T16491] do_syscall_64+0xc9/0x1c0 [ 378.869038][T16491] ? clear_bhb_loop+0x55/0xb0 [ 378.873789][T16491] ? clear_bhb_loop+0x55/0xb0 [ 378.878524][T16491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.884497][T16491] RIP: 0033:0x7f735fe77299 [ 378.888927][T16491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.909585][T16491] RSP: 002b:00007f735ead6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 378.918003][T16491] RAX: ffffffffffffffda RBX: 00007f7360006058 RCX: 00007f735fe77299 [ 378.926028][T16491] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 000000000000000a [ 378.934000][T16491] RBP: 00007f735ead60a0 R08: 0000000000000000 R09: 0000000000000003 [ 378.941969][T16491] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000001 [ 378.949939][T16491] R13: 000000000000006e R14: 00007f7360006058 R15: 00007ffd51d2c438 [ 378.957978][T16491] [ 378.989316][T16479] loop2: detected capacity change from 0 to 512 [ 378.996479][T16479] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 379.005654][T16479] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 379.017292][T16494] loop3: detected capacity change from 0 to 512 [ 379.026513][T16479] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3774: bg 0: block 18: invalid block bitmap [ 379.039125][T16479] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 379.048324][T16479] EXT4-fs (loop2): 1 truncate cleaned up [ 379.054441][T16479] ext2 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.125268][T16483] ref_ctr_offset mismatch. inode: 0x12e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 379.172573][T16483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3775'. [ 379.206933][ T29] kauditd_printk_skb: 2254 callbacks suppressed [ 379.206991][ T29] audit: type=1326 audit(1722219969.535:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.3.3784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ad5517299 code=0x0 [ 379.208987][T16514] loop1: detected capacity change from 0 to 512 [ 379.247804][T16514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3783'. [ 379.544853][T16527] loop4: detected capacity change from 0 to 1764 [ 379.573784][T16527] iso9660: Unknown parameter 'RZ' [ 379.699300][T16529] loop2: detected capacity change from 0 to 512 [ 379.724778][T16529] EXT4-fs: Ignoring removed orlov option [ 379.745239][T16529] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 379.756903][T16529] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 379.767204][T16529] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3788: Corrupt directory, running e2fsck is recommended [ 379.793939][T16529] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 379.804455][T16529] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3788: corrupted in-inode xattr: overlapping e_value [ 379.841649][T16529] EXT4-fs (loop2): Remounting filesystem read-only [ 379.855422][T16529] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 379.878332][T16529] loop2: detected capacity change from 0 to 512 [ 379.885186][T16529] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 379.894282][T16529] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 379.904678][T16529] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3788: bg 0: block 18: invalid block bitmap [ 379.918338][T16529] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 379.927455][T16529] EXT4-fs (loop2): 1 truncate cleaned up [ 379.933817][T16529] ext2 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.408599][T16537] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 381.776003][T16557] loop3: detected capacity change from 0 to 1024 [ 385.410838][T16564] loop4: detected capacity change from 0 to 512 [ 385.420818][T16565] loop2: detected capacity change from 0 to 512 [ 385.436787][T16564] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3798: corrupted in-inode xattr: invalid ea_ino [ 385.441641][T16576] loop3: detected capacity change from 0 to 512 [ 385.450606][T16564] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3798: couldn't read orphan inode 15 (err -117) [ 385.458001][T16565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3796'. [ 385.469493][T16564] EXT4-fs mount: 49 callbacks suppressed [ 385.469552][T16564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.488395][T16576] EXT4-fs: Ignoring removed orlov option [ 385.527335][T16576] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 385.538907][T16576] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 385.549737][T16576] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3799: Corrupt directory, running e2fsck is recommended [ 385.587334][T15580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.601569][T16576] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 385.621388][T16576] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3799: corrupted in-inode xattr: overlapping e_value [ 385.638613][T16576] EXT4-fs (loop3): Remounting filesystem read-only [ 385.646398][T16576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.665258][T16576] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 385.673515][T16576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.690211][ C1] eth0: bad gso: type: 1, size: 1408 [ 385.708910][T16594] loop1: detected capacity change from 0 to 512 [ 385.720722][T16576] loop3: detected capacity change from 0 to 512 [ 385.728465][T16576] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 385.737635][T16576] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 385.738593][T16594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.759901][T16595] loop4: detected capacity change from 0 to 1764 [ 385.774730][T16595] iso9660: Unknown parameter 'RZ' [ 385.774802][T16576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3799: bg 0: block 18: invalid block bitmap [ 385.792412][T16576] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 385.802567][T16576] EXT4-fs (loop3): 1 truncate cleaned up [ 385.808708][T16576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.820994][T16576] ext2 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.833908][T16594] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.896899][ T29] audit: type=1400 audit(1722219976.225:4241): avc: denied { watch_reads } for pid=16593 comm="syz.1.3805" path="/146/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.935101][T13996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.956829][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.972258][ T29] audit: type=1400 audit(1722219976.255:4242): avc: denied { execute } for pid=16605 comm="syz.0.3808" path="/syzcgroup/cpu/syz0/syz1/cpuset.memory_pressure" dev="cgroup" ino=474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 385.998443][ T29] audit: type=1400 audit(1722219976.255:4243): avc: denied { getopt } for pid=16593 comm="syz.1.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 386.058850][T16615] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 386.083974][T16614] loop1: detected capacity change from 0 to 512 [ 386.111626][T16614] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3811: corrupted in-inode xattr: invalid ea_ino [ 386.142643][T16614] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3811: couldn't read orphan inode 15 (err -117) [ 386.190170][T16614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.338188][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.338379][ C1] eth0: bad gso: type: 1, size: 1408 [ 386.365019][T16636] loop1: detected capacity change from 0 to 1024 [ 386.372255][T16636] EXT4-fs: Ignoring removed oldalloc option [ 386.414002][T16636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.442870][T16645] loop0: detected capacity change from 0 to 512 [ 386.450436][T16645] EXT4-fs: Ignoring removed orlov option [ 386.466098][T16645] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 386.477645][T16645] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 386.487863][T16645] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3819: Corrupt directory, running e2fsck is recommended [ 386.522885][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.547380][T16645] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 386.556092][T16645] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3819: corrupted in-inode xattr: overlapping e_value [ 386.572544][T16645] EXT4-fs (loop0): Remounting filesystem read-only [ 386.579877][T16645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.593427][T16645] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 386.600653][T16645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.628097][T16649] netlink: 'syz.1.3820': attribute type 10 has an invalid length. [ 386.650795][T16651] loop2: detected capacity change from 0 to 512 [ 386.659808][T16649] loop1: detected capacity change from 0 to 1024 [ 386.668336][T16649] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 386.680681][T16651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.694322][T16651] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.715814][T16645] loop0: detected capacity change from 0 to 512 [ 386.716710][T16649] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 386.716867][T16649] EXT4-fs (loop1): orphan cleanup on readonly fs [ 386.717407][T16649] EXT4-fs error (device loop1): __ext4_get_inode_loc:4436: comm syz.1.3820: Invalid inode table block 0 in block_group 0 [ 386.717485][T16649] EXT4-fs (loop1): Remounting filesystem read-only [ 386.717497][T16649] Quota error (device loop1): write_blk: dquota write failed [ 386.717510][T16649] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 386.717541][T16649] EXT4-fs (loop1): 1 truncate cleaned up [ 386.718086][T16649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.718193][T16649] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 386.718390][T16649] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.725950][T16649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3820'. [ 386.727239][T16649] loop1: detected capacity change from 0 to 136 [ 386.727391][T16649] iso9660: Unknown parameter 'overòiderpckperm' [ 386.732683][T16649] loop1: detected capacity change from 0 to 1024 [ 386.732888][T16649] ext4: Unknown parameter 'mask' [ 386.876122][T16645] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 386.894288][T13407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.923330][T16661] netlink: 'syz.1.3823': attribute type 10 has an invalid length. [ 386.937199][T16661] loop1: detected capacity change from 0 to 1024 [ 386.944271][T16661] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 386.956515][T16645] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 386.966099][T16645] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3819: bg 0: block 18: invalid block bitmap [ 386.979694][T16645] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 386.988705][T16645] EXT4-fs (loop0): 1 truncate cleaned up [ 386.994870][T16645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.008481][T16645] ext2 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.031514][T16079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.043633][T16661] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 387.068820][T16661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 387.082979][T16661] EXT4-fs error (device loop1): __ext4_get_inode_loc:4436: comm syz.1.3823: Invalid inode table block 0 in block_group 0 [ 387.101506][T16667] erspan0: entered allmulticast mode [ 387.107232][T16661] EXT4-fs (loop1): Remounting filesystem read-only [ 387.113797][T16661] Quota error (device loop1): write_blk: dquota write failed [ 387.121225][T16661] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 387.144223][T16667] bridge0: entered promiscuous mode [ 387.158020][T16667] bridge0: left promiscuous mode [ 387.166131][T16661] EXT4-fs (loop1): 1 truncate cleaned up [ 387.172220][T16661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.186506][T16661] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 387.193324][T16661] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.241771][T16672] netlink: 'syz.0.3826': attribute type 5 has an invalid length. [ 387.249594][T16672] netlink: 'syz.0.3826': attribute type 11 has an invalid length. [ 387.261766][T16661] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3823'. [ 387.289384][T16661] loop1: detected capacity change from 0 to 136 [ 387.304780][T16661] iso9660: Unknown parameter 'overòiderpckperm' [ 387.317856][T16661] loop1: detected capacity change from 0 to 1024 [ 387.324435][T16661] ext4: Unknown parameter 'mask' [ 387.351894][T16674] loop1: detected capacity change from 0 to 512 [ 387.390012][T16674] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3828: corrupted in-inode xattr: invalid ea_ino [ 387.426864][T16674] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3828: couldn't read orphan inode 15 (err -117) [ 387.441244][T16674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.484638][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.541544][T16691] loop0: detected capacity change from 0 to 512 [ 387.553899][T16693] loop1: detected capacity change from 0 to 512 [ 387.562124][T16693] EXT4-fs: Ignoring removed orlov option [ 387.568791][T16684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 387.575307][T16684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 387.583155][T16684] vhci_hcd vhci_hcd.0: Device attached [ 387.592872][T16688] vhci_hcd: connection closed [ 387.593145][ T1662] vhci_hcd: stop threads [ 387.602150][ T1662] vhci_hcd: release socket [ 387.606604][ T1662] vhci_hcd: disconnect device [ 387.613130][T16693] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 387.624726][T16693] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 387.634901][T16693] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3834: Corrupt directory, running e2fsck is recommended [ 387.663222][T16693] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 387.672205][T16693] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3834: corrupted in-inode xattr: overlapping e_value [ 387.687202][T16693] EXT4-fs (loop1): Remounting filesystem read-only [ 387.694921][T16693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.708427][T16693] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 387.715242][T16693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.727611][T16691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.740863][T16691] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.765118][T16079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.789911][T16693] loop1: detected capacity change from 0 to 512 [ 387.796942][T16693] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 387.806425][T16693] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 387.816357][T16693] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3834: bg 0: block 18: invalid block bitmap [ 387.829881][T16693] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 387.839039][T16693] EXT4-fs (loop1): 1 truncate cleaned up [ 387.845619][T16693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.857740][T16693] ext2 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.881870][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.916853][T16704] loop1: detected capacity change from 0 to 512 [ 387.928168][T16704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3836'. [ 387.958560][T16702] FAULT_INJECTION: forcing a failure. [ 387.958560][T16702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 387.971922][T16702] CPU: 0 UID: 0 PID: 16702 Comm: syz.0.3837 Not tainted 6.11.0-rc1-syzkaller #0 [ 387.981022][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 387.991116][T16702] Call Trace: [ 387.994438][T16702] [ 387.997453][T16702] dump_stack_lvl+0xf2/0x150 [ 388.002111][T16702] dump_stack+0x15/0x20 [ 388.006380][T16702] should_fail_ex+0x229/0x230 [ 388.011090][T16702] should_fail_alloc_page+0xfd/0x110 [ 388.016390][T16702] __alloc_pages_noprof+0x109/0x360 [ 388.021610][T16702] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 388.027064][T16702] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 388.032450][T16702] handle_mm_fault+0xd6d/0x2940 [ 388.037433][T16702] exc_page_fault+0x296/0x650 [ 388.042802][T16702] asm_exc_page_fault+0x26/0x30 [ 388.047717][T16702] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 388.053630][T16702] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 388.073324][T16702] RSP: 0018:ffffc90000ecbd40 EFLAGS: 00050216 [ 388.079457][T16702] RAX: 0000000000000000 RBX: 0000000020004600 RCX: 0000000000000020 [ 388.087520][T16702] RDX: 0000000000000000 RSI: ffff888226c6b020 RDI: 0000000020004600 [ 388.095495][T16702] RBP: 0000000000000020 R08: 0000000080000000 R09: 0000000000000000 [ 388.103478][T16702] R10: 0001888226c6b020 R11: 0001888226c6b03f R12: 0000000020004620 [ 388.111703][T16702] R13: ffff888226c6b020 R14: 0000000000000020 R15: ffff888226c6b020 [ 388.119746][T16702] _copy_to_user+0x77/0xa0 [ 388.124283][T16702] aio_read_events+0x1fa/0x3c0 [ 388.129158][T16702] do_io_getevents+0x29c/0x400 [ 388.133932][T16702] ? __pfx_autoremove_wake_function+0x10/0x10 [ 388.140386][T16702] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 388.145716][T16702] __x64_sys_io_getevents+0xca/0x190 [ 388.151021][T16702] x64_sys_call+0x26a8/0x2e00 [ 388.155727][T16702] do_syscall_64+0xc9/0x1c0 [ 388.160289][T16702] ? clear_bhb_loop+0x55/0xb0 [ 388.165101][T16702] ? clear_bhb_loop+0x55/0xb0 [ 388.169799][T16702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.175707][T16702] RIP: 0033:0x7f49f8f77299 [ 388.180117][T16702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.199803][T16702] RSP: 002b:00007f49f7bf7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 388.208388][T16702] RAX: ffffffffffffffda RBX: 00007f49f9105f80 RCX: 00007f49f8f77299 [ 388.216434][T16702] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f49f7bc7000 [ 388.224483][T16702] RBP: 00007f49f7bf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.232463][T16702] R10: 0000000020004600 R11: 0000000000000246 R12: 0000000000000001 [ 388.240526][T16702] R13: 000000000000000b R14: 00007f49f9105f80 R15: 00007ffc935070d8 [ 388.248586][T16702] [ 388.276581][T16707] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.293023][T16707] vhci_hcd: invalid port number 209 [ 388.298432][T16707] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 388.321744][T16707] loop1: detected capacity change from 0 to 512 [ 388.330530][T16707] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3838: bad orphan inode 17 [ 388.341045][T16707] ext4_test_bit(bit=16, block=4) = 1 [ 388.346408][T16707] is_bad_inode(inode)=0 [ 388.350620][T16707] NEXT_ORPHAN(inode)=0 [ 388.354773][T16707] max_ino=32 [ 388.358123][T16707] i_nlink=1 [ 388.363466][T16707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.379773][T16707] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3838: bg 0: block 7: invalid block bitmap [ 388.394251][ T29] audit: type=1400 audit(1722219978.725:4244): avc: denied { setopt } for pid=16706 comm="syz.1.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.424475][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.780484][T16739] loop0: detected capacity change from 0 to 512 [ 388.797869][T16739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.820555][T16739] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.859517][T16079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.894242][T16743] FAULT_INJECTION: forcing a failure. [ 388.894242][T16743] name failslab, interval 1, probability 0, space 0, times 0 [ 388.907280][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.0.3846 Not tainted 6.11.0-rc1-syzkaller #0 [ 388.916483][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 388.926546][T16743] Call Trace: [ 388.929851][T16743] [ 388.932775][T16743] dump_stack_lvl+0xf2/0x150 [ 388.937479][T16743] dump_stack+0x15/0x20 [ 388.941706][T16743] should_fail_ex+0x229/0x230 [ 388.946479][T16743] ? __alloc_skb+0x10b/0x310 [ 388.951065][T16743] should_failslab+0x8f/0xb0 [ 388.955661][T16743] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 388.961527][T16743] ? __alloc_skb+0x1b5/0x310 [ 388.966124][T16743] __alloc_skb+0x10b/0x310 [ 388.970545][T16743] alloc_skb_with_frags+0x7f/0x400 [ 388.975702][T16743] ? avc_has_perm+0xd4/0x160 [ 388.980293][T16743] sock_alloc_send_pskb+0x435/0x4f0 [ 388.985591][T16743] unix_dgram_sendmsg+0x472/0xff0 [ 388.990642][T16743] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 388.996342][T16743] __sock_sendmsg+0x140/0x180 [ 389.001361][T16743] ____sys_sendmsg+0x312/0x410 [ 389.006184][T16743] __sys_sendmmsg+0x269/0x500 [ 389.010942][T16743] __x64_sys_sendmmsg+0x57/0x70 [ 389.015817][T16743] x64_sys_call+0x2b4e/0x2e00 [ 389.020510][T16743] do_syscall_64+0xc9/0x1c0 [ 389.025064][T16743] ? clear_bhb_loop+0x55/0xb0 [ 389.029800][T16743] ? clear_bhb_loop+0x55/0xb0 [ 389.034516][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.040415][T16743] RIP: 0033:0x7f49f8f77299 [ 389.044835][T16743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.064485][T16743] RSP: 002b:00007f49f7bf7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 389.072908][T16743] RAX: ffffffffffffffda RBX: 00007f49f9105f80 RCX: 00007f49f8f77299 [ 389.080925][T16743] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000004 [ 389.088910][T16743] RBP: 00007f49f7bf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.096883][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.104860][T16743] R13: 000000000000000b R14: 00007f49f9105f80 R15: 00007ffc935070d8 [ 389.112838][T16743] [ 389.359786][T16750] loop1: detected capacity change from 0 to 512 [ 389.405924][T16750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3848'. [ 389.430738][T16751] loop0: detected capacity change from 0 to 256 [ 389.438447][T16751] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 389.493743][T16754] loop1: detected capacity change from 0 to 512 [ 389.518653][T16754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.547217][T16754] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.561781][T16758] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 389.596040][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.679667][T16764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 389.686886][T16764] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 389.695650][T16764] vhci_hcd vhci_hcd.0: Device attached [ 389.723646][T16765] usbip_core: unknown command [ 389.729010][T16765] vhci_hcd: unknown pdu 3281309441 [ 389.734520][T16765] usbip_core: unknown command [ 389.745788][ T1662] vhci_hcd: stop threads [ 389.750096][ T1662] vhci_hcd: release socket [ 389.754544][ T1662] vhci_hcd: disconnect device [ 389.910335][T16768] loop2: detected capacity change from 0 to 1024 [ 389.920161][T16768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.985826][T13407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.004063][ T29] audit: type=1400 audit(1722219980.325:4245): avc: denied { mounton } for pid=16770 comm="syz.2.3853" path="/249/file0" dev="ramfs" ino=59249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 391.145091][T16789] FAULT_INJECTION: forcing a failure. [ 391.145091][T16789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.158234][T16789] CPU: 0 UID: 0 PID: 16789 Comm: syz.1.3859 Not tainted 6.11.0-rc1-syzkaller #0 [ 391.167321][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 391.177520][T16789] Call Trace: [ 391.180944][T16789] [ 391.183895][T16789] dump_stack_lvl+0xf2/0x150 [ 391.188502][T16789] dump_stack+0x15/0x20 [ 391.192667][T16789] should_fail_ex+0x229/0x230 [ 391.197437][T16789] should_fail+0xb/0x10 [ 391.201608][T16789] should_fail_usercopy+0x1a/0x20 [ 391.207482][T16789] _copy_from_iter+0xd3/0xb00 [ 391.212290][T16789] ? kmalloc_reserve+0x16e/0x190 [ 391.217353][T16789] ? __build_skb_around+0x196/0x1f0 [ 391.222571][T16789] ? __alloc_skb+0x21f/0x310 [ 391.227172][T16789] ? __virt_addr_valid+0x1ed/0x250 [ 391.232294][T16789] ? __check_object_size+0x35b/0x510 [ 391.237694][T16789] netlink_sendmsg+0x460/0x6e0 [ 391.242495][T16789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.247831][T16789] __sock_sendmsg+0x140/0x180 [ 391.252710][T16789] ____sys_sendmsg+0x312/0x410 [ 391.257548][T16789] __sys_sendmsg+0x1e9/0x280 [ 391.262161][T16789] __x64_sys_sendmsg+0x46/0x50 [ 391.267177][T16789] x64_sys_call+0x26f8/0x2e00 [ 391.271982][T16789] do_syscall_64+0xc9/0x1c0 [ 391.276792][T16789] ? clear_bhb_loop+0x55/0xb0 [ 391.281519][T16789] ? clear_bhb_loop+0x55/0xb0 [ 391.286311][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.292327][T16789] RIP: 0033:0x7f735fe77299 [ 391.296896][T16789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.318186][T16789] RSP: 002b:00007f735eaf7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.326707][T16789] RAX: ffffffffffffffda RBX: 00007f7360005f80 RCX: 00007f735fe77299 [ 391.334757][T16789] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 391.342740][T16789] RBP: 00007f735eaf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.350725][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.358798][T16789] R13: 000000000000000b R14: 00007f7360005f80 R15: 00007ffd51d2c438 [ 391.367045][T16789] [ 392.209242][T16804] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 392.216602][T16804] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 392.224610][T16804] vhci_hcd vhci_hcd.0: Device attached [ 392.232051][T16808] usbip_core: unknown command [ 392.236906][T16808] vhci_hcd: unknown pdu 3281309441 [ 392.242251][T16808] usbip_core: unknown command [ 392.251954][ T50] vhci_hcd: stop threads [ 392.256243][ T50] vhci_hcd: release socket [ 392.260680][ T50] vhci_hcd: disconnect device [ 393.051662][T16813] loop1: detected capacity change from 0 to 8192 [ 393.249614][T16820] 9pnet_fd: Insufficient options for proto=fd [ 393.528239][ T29] audit: type=1400 audit(1722219983.855:4246): avc: denied { getopt } for pid=16821 comm="syz.1.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 395.794300][T16837] loop2: detected capacity change from 0 to 512 [ 395.828794][T16841] loop1: detected capacity change from 0 to 512 [ 395.841256][T16837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.872687][T16841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.874429][T16845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 395.885887][T16837] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.892379][T16845] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 395.892565][T16845] vhci_hcd vhci_hcd.0: Device attached [ 395.923223][T16841] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.945715][T16853] vhci_hcd: connection closed [ 395.948165][ T425] vhci_hcd: stop threads [ 395.957276][ T425] vhci_hcd: release socket [ 395.961701][ T425] vhci_hcd: disconnect device [ 395.970904][T13407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.026729][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.197269][T16866] loop1: detected capacity change from 0 to 8192 [ 396.237887][T16844] chnl_net:caif_netlink_parms(): no params data found [ 396.329868][T16844] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.337050][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.356666][T16844] bridge_slave_0: entered allmulticast mode [ 396.374907][T16844] bridge_slave_0: entered promiscuous mode [ 396.384571][T16844] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.391756][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.429482][T16844] bridge_slave_1: entered allmulticast mode [ 396.446826][T16844] bridge_slave_1: entered promiscuous mode [ 396.497049][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.536537][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.612122][T16898] loop0: detected capacity change from 0 to 1764 [ 396.619540][T16898] iso9660: Unknown parameter 'RZ' [ 401.721966][ C1] eth0: bad gso: type: 1, size: 1408 [ 401.729287][T16901] loop0: detected capacity change from 0 to 512 [ 401.753251][T16844] team0: Port device team_slave_0 added [ 401.753590][T16901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.766893][T16844] team0: Port device team_slave_1 added [ 401.778817][T16901] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.812401][T16911] loop1: detected capacity change from 0 to 512 [ 401.820264][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.827357][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.853558][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.865766][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.865779][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.865843][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.883732][T16867] chnl_net:caif_netlink_parms(): no params data found [ 401.935488][T16844] hsr_slave_0: entered promiscuous mode [ 401.942098][T16844] hsr_slave_1: entered promiscuous mode [ 401.948559][T16844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.949511][T16079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.956649][T16844] Cannot create hsr debugfs directory [ 401.984086][ T3290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.033635][ T3290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.046444][T16867] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.053624][T16867] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.061447][T16867] bridge_slave_0: entered allmulticast mode [ 402.080272][T16867] bridge_slave_0: entered promiscuous mode [ 402.097414][ T3290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.103743][T16930] loop1: detected capacity change from 0 to 1764 [ 402.119812][T16867] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.127159][T16867] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.134954][T16930] iso9660: Unknown parameter 'RZ' [ 402.138157][T16867] bridge_slave_1: entered allmulticast mode [ 402.152491][T16867] bridge_slave_1: entered promiscuous mode [ 402.177516][ T3290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.199519][ C1] eth0: bad gso: type: 1, size: 1408 [ 402.220930][T16867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.246342][T16867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.282761][ T3290] bridge_slave_1: left allmulticast mode [ 402.288676][ T3290] bridge_slave_1: left promiscuous mode [ 402.294639][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.303268][ T3290] bridge_slave_0: left allmulticast mode [ 402.309084][ T3290] bridge_slave_0: left promiscuous mode [ 402.314933][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.402951][T16935] loop0: detected capacity change from 0 to 1024 [ 402.409673][T16935] EXT4-fs: quotafile must be on filesystem root [ 402.428255][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.439881][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.450171][ T3290] bond0 (unregistering): Released all slaves [ 402.472207][T16867] team0: Port device team_slave_0 added [ 402.480572][T16867] team0: Port device team_slave_1 added [ 402.500955][T16867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.507969][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.533956][T16867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.549428][T16867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.556598][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.560326][T16938] loop1: detected capacity change from 0 to 512 [ 402.582544][T16867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.613201][T16867] hsr_slave_0: entered promiscuous mode [ 402.619698][T16867] hsr_slave_1: entered promiscuous mode [ 402.626504][T16867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.631878][T16942] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3900'. [ 402.634306][T16867] Cannot create hsr debugfs directory [ 402.644892][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 402.668282][ T3290] hsr_slave_0: left promiscuous mode [ 402.674155][ T3290] hsr_slave_1: left promiscuous mode [ 402.688608][ T3290] veth1_macvtap: left promiscuous mode [ 402.694227][ T3290] veth0_macvtap: left promiscuous mode [ 402.700212][ T3290] veth1_vlan: left promiscuous mode [ 402.706519][ T3290] veth0_vlan: left promiscuous mode [ 402.732814][T16954] loop1: detected capacity change from 0 to 512 [ 402.739848][T16954] EXT4-fs: Ignoring removed orlov option [ 402.750094][T16954] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 402.762662][T16954] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 402.772905][T16954] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3903: Corrupt directory, running e2fsck is recommended [ 402.800659][T16954] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 402.809909][T16954] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3903: corrupted in-inode xattr: overlapping e_value [ 402.824875][T16954] EXT4-fs (loop1): Remounting filesystem read-only [ 402.832168][T16954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.844872][T16954] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 402.851928][T16954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.869402][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 402.870860][T16954] loop1: detected capacity change from 0 to 512 [ 402.883639][T16954] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 402.883743][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 402.892691][T16954] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 402.910756][T16954] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3903: bg 0: block 18: invalid block bitmap [ 402.923834][T16954] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 402.932923][T16954] EXT4-fs (loop1): 1 truncate cleaned up [ 402.939046][T16954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.951242][T16954] ext2 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.975111][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.010006][T16962] netlink: 'syz.2.3906': attribute type 16 has an invalid length. [ 403.023243][T16962] loop2: detected capacity change from 0 to 512 [ 403.035938][T16962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.039914][ C1] eth0: bad gso: type: 1, size: 1408 [ 403.048921][T16962] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.071134][T16962] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.3906: Directory hole found for htree leaf block 0 [ 403.078468][T16967] loop1: detected capacity change from 0 to 512 [ 403.106799][T16962] netlink: 'syz.2.3906': attribute type 3 has an invalid length. [ 403.118243][T16867] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.157763][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3906'. [ 403.169404][T16970] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 406.344824][T16844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.191229][T16844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.204531][T16844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.216972][T16844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.226127][T13407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.242851][T16867] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.263545][T16977] loop2: detected capacity change from 0 to 164 [ 408.297885][T16980] loop1: detected capacity change from 0 to 512 [ 408.300171][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.325647][T16980] EXT4-fs: Ignoring removed orlov option [ 408.332848][T16867] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.356780][T16980] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 408.368452][T16980] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 408.378619][T16980] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3913: Corrupt directory, running e2fsck is recommended [ 408.394096][T16844] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.422041][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.429184][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.468584][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.475715][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.522045][T16844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.532538][T16844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.606221][T16980] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 408.616918][T16980] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3913: corrupted in-inode xattr: overlapping e_value [ 408.632316][T16980] EXT4-fs (loop1): Remounting filesystem read-only [ 408.639723][T16980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.653758][T16980] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 408.660912][T16980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.677170][ C1] eth0: bad gso: type: 1, size: 1408 [ 408.682266][T16867] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.729236][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.739001][T16996] loop2: detected capacity change from 0 to 512 [ 408.773338][T16980] loop1: detected capacity change from 0 to 512 [ 408.780369][T16980] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 408.791668][T16980] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 408.801805][T16980] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3913: bg 0: block 18: invalid block bitmap [ 408.815709][T16980] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 408.824988][T16980] EXT4-fs (loop1): 1 truncate cleaned up [ 408.830950][T16980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.843142][T16980] ext2 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.884905][T16867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 408.893825][T16867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 408.904312][T16867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 408.913695][T16867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.954031][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.096977][T17009] loop1: detected capacity change from 0 to 512 [ 409.107613][T16867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.126210][T17009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.145762][T17014] loop2: detected capacity change from 0 to 1024 [ 409.153610][T16867] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.161707][T17009] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.176349][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.183450][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.202109][T16867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.212562][T16867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.225155][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.232378][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.309295][T16844] veth0_vlan: entered promiscuous mode [ 409.319235][T17014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.378376][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.418171][ C1] eth0: bad gso: type: 1, size: 1408 [ 409.422940][T17032] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 409.436741][T16844] veth1_vlan: entered promiscuous mode [ 409.451356][T16844] veth0_macvtap: entered promiscuous mode [ 409.459037][T16844] veth1_macvtap: entered promiscuous mode [ 409.479015][T17014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.542123][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.552711][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.562853][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.573331][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.583415][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.593971][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.603807][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.614265][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.624096][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.634554][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.692688][T17048] loop1: detected capacity change from 0 to 512 [ 409.729564][T17048] EXT4-fs: Ignoring removed orlov option [ 409.749758][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.768963][T17048] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 409.780573][T17048] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 409.790934][T17048] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3925: Corrupt directory, running e2fsck is recommended [ 409.831420][T17048] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 409.841129][T17048] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3925: corrupted in-inode xattr: overlapping e_value [ 409.856607][T17048] EXT4-fs (loop1): Remounting filesystem read-only [ 409.863570][T17048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.879957][T17048] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 409.887017][T17048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.905652][T17048] loop1: detected capacity change from 0 to 512 [ 409.912615][T17048] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 409.921419][T17048] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 409.930827][T17048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3925: bg 0: block 18: invalid block bitmap [ 409.943588][T17048] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 409.952932][T17048] EXT4-fs (loop1): 1 truncate cleaned up [ 409.959071][T17048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.971168][T17048] ext2 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.983441][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.994110][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.004175][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.014663][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.024515][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.034944][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.044929][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.055440][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.065309][T16844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.076222][T16844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.110656][ T29] audit: type=1400 audit(1722220000.435:4247): avc: denied { setopt } for pid=17056 comm="syz.0.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 410.184196][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.201313][T16867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.235328][T16844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.244069][T16844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.252925][T16844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.261670][T16844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.280557][T17065] loop2: detected capacity change from 0 to 512 [ 410.345802][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.357017][T17065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.370842][T17065] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.452457][T16867] veth0_vlan: entered promiscuous mode [ 410.479498][T16867] veth1_vlan: entered promiscuous mode [ 410.522518][T16867] veth0_macvtap: entered promiscuous mode [ 410.532240][T13407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.556563][T17080] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 410.567821][T16867] veth1_macvtap: entered promiscuous mode [ 410.582237][T17080] ip6t_rpfilter: unknown options [ 410.592368][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.602930][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.612832][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.623306][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.633171][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.644157][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.654270][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.664813][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.674688][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.685158][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.695149][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.705609][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.722785][T17082] loop2: detected capacity change from 0 to 512 [ 410.734451][T17082] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 410.755298][T16867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.770365][T17082] bridge_slave_0: default FDB implementation only supports local addresses [ 410.798286][T17084] loop1: detected capacity change from 0 to 128 [ 410.864104][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.874634][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.884746][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.895215][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.905123][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.915586][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.925409][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.935867][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.945775][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.956275][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.966113][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.976703][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.996996][T16867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.004707][T17090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3937'. [ 411.030774][T17090] tap0: tun_chr_ioctl cmd 1074025677 [ 411.046642][T17094] loop1: detected capacity change from 0 to 512 [ 411.053606][T17090] tap0: linktype set to 0 [ 411.062488][T16867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.071291][T16867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.080138][T16867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.088978][T16867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.130938][T17098] loop0: detected capacity change from 0 to 512 [ 411.140486][T17098] EXT4-fs: Ignoring removed orlov option [ 411.169458][T17098] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 411.181276][T17098] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 411.191502][T17098] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3939: Corrupt directory, running e2fsck is recommended [ 411.253226][T17103] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3940'. [ 411.266434][T17103] loop4: detected capacity change from 0 to 128 [ 411.338939][T17107] loop2: detected capacity change from 0 to 512 [ 411.347411][T17098] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 411.383795][T17098] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3939: corrupted in-inode xattr: overlapping e_value [ 411.412804][T17098] EXT4-fs (loop0): Remounting filesystem read-only [ 411.430905][T17098] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 411.457159][T17094] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.469972][T17094] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.3938: corrupted inode contents [ 411.483886][T17094] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #19: comm syz.1.3938: mark_inode_dirty error [ 411.499944][T17094] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.3938: corrupted inode contents [ 411.512356][T17094] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #19: comm syz.1.3938: mark_inode_dirty error [ 411.526286][T17094] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #19: comm syz.1.3938: mark inode dirty (error -117) [ 411.540577][T17094] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 411.555297][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3878'. [ 411.578191][T17107] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.594777][T17098] loop0: detected capacity change from 0 to 512 [ 411.601704][T17098] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 411.654185][T17121] 9pnet: Could not find request transport: fä [ 411.680372][T17098] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 411.694852][T17098] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3939: bg 0: block 18: invalid block bitmap [ 411.708197][T17098] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 411.717434][T17098] EXT4-fs (loop0): 1 truncate cleaned up [ 411.723530][T17098] ext2 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.787857][T17139] loop3: detected capacity change from 0 to 256 [ 411.794798][T17120] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 411.801846][T17120] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 411.809556][T17120] vhci_hcd vhci_hcd.0: Device attached [ 411.843063][T17126] vhci_hcd: connection closed [ 411.844854][ T1662] vhci_hcd: stop threads [ 411.853799][ T1662] vhci_hcd: release socket [ 411.858266][ T1662] vhci_hcd: disconnect device [ 411.877091][T17139] FAT-fs (loop3): Directory bread(block 64) failed [ 411.893330][T17146] loop2: detected capacity change from 0 to 128 [ 411.903719][T17139] FAT-fs (loop3): Directory bread(block 65) failed [ 411.914022][T17139] FAT-fs (loop3): Directory bread(block 66) failed [ 411.940927][T17145] loop0: detected capacity change from 0 to 1024 [ 411.952480][T17139] FAT-fs (loop3): Directory bread(block 67) failed [ 411.977965][T17139] FAT-fs (loop3): Directory bread(block 68) failed [ 412.000443][T17139] FAT-fs (loop3): Directory bread(block 69) failed [ 412.021948][T17139] FAT-fs (loop3): Directory bread(block 70) failed [ 412.043524][T17139] FAT-fs (loop3): Directory bread(block 71) failed [ 412.071324][T17139] FAT-fs (loop3): Directory bread(block 72) failed [ 412.097862][T17139] FAT-fs (loop3): Directory bread(block 73) failed [ 412.166852][ T29] audit: type=1400 audit(1722220002.495:4248): avc: denied { ioctl } for pid=17160 comm="syz.3.3959" path="socket:[60934]" dev="sockfs" ino=60934 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 412.263505][T17170] netlink: 'syz.2.3962': attribute type 4 has an invalid length. [ 412.325418][T17170] loop2: detected capacity change from 0 to 256 [ 412.340509][T17175] loop0: detected capacity change from 0 to 128 [ 412.389496][T17170] FAT-fs (loop2): Directory bread(block 64) failed [ 412.429854][T17170] FAT-fs (loop2): Directory bread(block 65) failed [ 412.457860][T17170] FAT-fs (loop2): Directory bread(block 66) failed [ 412.491385][T17170] FAT-fs (loop2): Directory bread(block 67) failed [ 412.518919][T17185] loop3: detected capacity change from 0 to 256 [ 412.527101][T17170] FAT-fs (loop2): Directory bread(block 68) failed [ 412.550990][T17170] FAT-fs (loop2): Directory bread(block 69) failed [ 412.566660][T17187] netlink: 'syz.4.3970': attribute type 10 has an invalid length. [ 412.581951][T17181] loop0: detected capacity change from 0 to 8192 [ 412.592043][T17170] FAT-fs (loop2): Directory bread(block 70) failed [ 412.601080][T17185] FAT-fs (loop3): Directory bread(block 64) failed [ 412.613343][T17170] FAT-fs (loop2): Directory bread(block 71) failed [ 412.621033][T17185] FAT-fs (loop3): Directory bread(block 65) failed [ 412.630386][T17187] loop4: detected capacity change from 0 to 1024 [ 412.647408][T17170] FAT-fs (loop2): Directory bread(block 72) failed [ 412.654083][T17185] FAT-fs (loop3): Directory bread(block 66) failed [ 412.670618][T17187] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 412.681085][T17170] FAT-fs (loop2): Directory bread(block 73) failed [ 412.696108][T17185] FAT-fs (loop3): Directory bread(block 67) failed [ 412.709643][T16079] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 412.718228][T16079] FAT-fs (loop0): Filesystem has been set read-only [ 412.737110][T17185] FAT-fs (loop3): Directory bread(block 68) failed [ 412.743660][T17185] FAT-fs (loop3): Directory bread(block 69) failed [ 412.753603][T17187] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 412.780697][T17187] EXT4-fs (loop4): orphan cleanup on readonly fs [ 412.795795][T16079] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 412.807035][T17185] FAT-fs (loop3): Directory bread(block 70) failed [ 412.813551][T17185] FAT-fs (loop3): Directory bread(block 71) failed [ 412.831582][T17187] EXT4-fs error (device loop4): __ext4_get_inode_loc:4436: comm syz.4.3970: Invalid inode table block 0 in block_group 0 [ 412.848889][T16079] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 412.863158][T17185] FAT-fs (loop3): Directory bread(block 72) failed [ 418.307611][T17185] FAT-fs (loop3): Directory bread(block 73) failed [ 418.318603][T17198] loop2: detected capacity change from 0 to 128 [ 418.325134][T17185] FAT-fs (loop3): Directory bread(block 74) failed [ 418.333327][T17185] FAT-fs (loop3): Directory bread(block 75) failed [ 418.339966][T17185] FAT-fs (loop3): Directory bread(block 76) failed [ 418.346638][T17185] FAT-fs (loop3): Directory bread(block 77) failed [ 418.353210][T17185] FAT-fs (loop3): Directory bread(block 78) failed [ 418.359878][T17185] FAT-fs (loop3): Directory bread(block 79) failed [ 418.366967][T17185] FAT-fs (loop3): Directory bread(block 80) failed [ 418.373649][T17185] FAT-fs (loop3): Directory bread(block 81) failed [ 418.380335][T17185] FAT-fs (loop3): Directory bread(block 82) failed [ 418.391170][T17187] EXT4-fs (loop4): Remounting filesystem read-only [ 418.397799][T17187] Quota error (device loop4): write_blk: dquota write failed [ 418.405211][T17187] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 418.415244][T17187] EXT4-fs (loop4): 1 truncate cleaned up [ 419.576382][T17187] EXT4-fs mount: 10 callbacks suppressed [ 419.576479][T17187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.597017][T17187] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 419.603914][T17187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.697947][ T3290] bridge_slave_1: left allmulticast mode [ 419.703628][ T3290] bridge_slave_1: left promiscuous mode [ 419.709479][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.718288][ T3290] bridge_slave_0: left allmulticast mode [ 419.723965][ T3290] bridge_slave_0: left promiscuous mode [ 419.729867][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.791004][ T3290] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 419.800507][T17223] loop1: detected capacity change from 0 to 128 [ 424.933969][ C1] eth0: bad gso: type: 1, size: 1408 [ 424.947103][ T3290] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 424.955411][ T3290] bridge1 (unregistering): left promiscuous mode [ 425.017826][T17244] loop2: detected capacity change from 0 to 256 [ 425.027167][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.029510][T17244] FAT-fs (loop2): Directory bread(block 64) failed [ 425.042453][T17244] FAT-fs (loop2): Directory bread(block 65) failed [ 425.049375][T17244] FAT-fs (loop2): Directory bread(block 66) failed [ 425.056187][T17244] FAT-fs (loop2): Directory bread(block 67) failed [ 425.056473][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.064503][T17244] FAT-fs (loop2): Directory bread(block 68) failed [ 425.079563][T17244] FAT-fs (loop2): Directory bread(block 69) failed [ 425.086184][T17244] FAT-fs (loop2): Directory bread(block 70) failed [ 425.087190][ T3290] bond0 (unregistering): Released all slaves [ 425.092687][T17244] FAT-fs (loop2): Directory bread(block 71) failed [ 425.102743][ T3290] bond1 (unregistering): Released all slaves [ 425.105413][T17244] FAT-fs (loop2): Directory bread(block 72) failed [ 425.113592][ T29] audit: type=1400 audit(1722220015.435:4249): avc: denied { read } for pid=17241 comm="syz.1.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.118243][T17244] FAT-fs (loop2): Directory bread(block 73) failed [ 425.217763][ T3290] IPVS: stopping master sync thread 16169 ... [ 425.226925][ T3290] hsr_slave_0: left promiscuous mode [ 425.227039][T17259] loop2: detected capacity change from 0 to 256 [ 425.238590][ T3290] hsr_slave_1: left promiscuous mode [ 425.246435][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.253863][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.261947][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.269404][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.278832][ T3290] veth1_macvtap: left promiscuous mode [ 425.284435][ T3290] veth0_macvtap: left promiscuous mode [ 425.290164][ T3290] veth1_vlan: left promiscuous mode [ 425.295422][ T3290] veth0_vlan: left promiscuous mode [ 425.360941][T17269] FAULT_INJECTION: forcing a failure. [ 425.360941][T17269] name failslab, interval 1, probability 0, space 0, times 0 [ 425.373975][T17269] CPU: 0 UID: 0 PID: 17269 Comm: syz.3.4004 Not tainted 6.11.0-rc1-syzkaller #0 [ 425.376678][T17270] loop2: detected capacity change from 0 to 512 [ 425.382994][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 425.383007][T17269] Call Trace: [ 425.383014][T17269] [ 425.383021][T17269] dump_stack_lvl+0xf2/0x150 [ 425.410196][T17269] dump_stack+0x15/0x20 [ 425.414401][T17269] should_fail_ex+0x229/0x230 [ 425.419137][T17269] ? __alloc_skb+0x10b/0x310 [ 425.423796][T17269] should_failslab+0x8f/0xb0 [ 425.428409][T17269] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 425.434245][T17269] __alloc_skb+0x10b/0x310 [ 425.438660][T17269] alloc_skb_with_frags+0x7f/0x400 [ 425.443772][T17269] ? fib6_rule_lookup+0x265/0x4e0 [ 425.448786][T17269] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 425.454574][T17269] ? memcg_list_lru_alloc+0xd2/0x740 [ 425.459919][T17269] sock_alloc_send_pskb+0x435/0x4f0 [ 425.465123][T17269] ? xfrm_lookup_with_ifid+0x8d1/0x12e0 [ 425.470688][T17269] rawv6_send_hdrinc+0x16e/0xac0 [ 425.475629][T17269] ? xfrm_lookup_route+0xcf/0x110 [ 425.480665][T17269] rawv6_sendmsg+0xddf/0xf40 [ 425.485301][T17269] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 425.491238][T17269] inet_sendmsg+0xc5/0xd0 [ 425.496185][T17269] __sock_sendmsg+0x102/0x180 [ 425.500948][T17269] sock_write_iter+0x164/0x1b0 [ 425.505714][T17269] vfs_write+0x78f/0x900 [ 425.510069][T17269] ? __pfx_sock_write_iter+0x10/0x10 [ 425.515403][T17269] ksys_write+0xeb/0x1b0 [ 425.519672][T17269] __x64_sys_write+0x42/0x50 [ 425.524262][T17269] x64_sys_call+0x2a40/0x2e00 [ 425.528945][T17269] do_syscall_64+0xc9/0x1c0 [ 425.533493][T17269] ? clear_bhb_loop+0x55/0xb0 [ 425.538213][T17269] ? clear_bhb_loop+0x55/0xb0 [ 425.542940][T17269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.549042][T17269] RIP: 0033:0x7f1fc5dc7299 [ 425.553505][T17269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.573144][T17269] RSP: 002b:00007f1fc4a47048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.581740][T17269] RAX: ffffffffffffffda RBX: 00007f1fc5f55f80 RCX: 00007f1fc5dc7299 [ 425.590089][T17269] RDX: 0000000000000046 RSI: 00000000200003c0 RDI: 0000000000000003 [ 425.598066][T17269] RBP: 00007f1fc4a470a0 R08: 0000000000000000 R09: 0000000000000000 [ 425.606039][T17269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.614011][T17269] R13: 000000000000000b R14: 00007f1fc5f55f80 R15: 00007fffb1774478 [ 425.622044][T17269] [ 425.627991][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 425.638164][T17270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.650863][T17270] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.651217][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 425.705451][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 425.741478][T17283] loop3: detected capacity change from 0 to 256 [ 425.753944][T17283] FAT-fs (loop3): Directory bread(block 64) failed [ 425.762062][T17283] FAT-fs (loop3): Directory bread(block 65) failed [ 425.768841][T17283] FAT-fs (loop3): Directory bread(block 66) failed [ 425.774275][T17227] chnl_net:caif_netlink_parms(): no params data found [ 425.775584][T17283] FAT-fs (loop3): Directory bread(block 67) failed [ 425.788764][T17283] FAT-fs (loop3): Directory bread(block 68) failed [ 425.795325][T17283] FAT-fs (loop3): Directory bread(block 69) failed [ 425.801856][T17283] FAT-fs (loop3): Directory bread(block 70) failed [ 425.808373][T17283] FAT-fs (loop3): Directory bread(block 71) failed [ 425.814925][T17283] FAT-fs (loop3): Directory bread(block 72) failed [ 425.821548][T17283] FAT-fs (loop3): Directory bread(block 73) failed [ 425.834368][T17227] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.841499][T17227] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.849049][T17227] bridge_slave_0: entered allmulticast mode [ 425.864193][T17227] bridge_slave_0: entered promiscuous mode [ 425.868930][T17290] loop1: detected capacity change from 0 to 512 [ 425.879662][T17227] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.886817][T17227] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.902179][T17227] bridge_slave_1: entered allmulticast mode [ 425.909782][T17227] bridge_slave_1: entered promiscuous mode [ 425.941060][T17227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.955899][T17227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.976998][T17227] team0: Port device team_slave_0 added [ 425.983408][T17227] team0: Port device team_slave_1 added [ 426.002383][T17227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.009394][T17227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.035442][T17227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.050120][T17227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.057110][T17227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.084159][T17227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.122991][T17305] loop1: detected capacity change from 0 to 128 [ 426.131355][T17307] FAULT_INJECTION: forcing a failure. [ 426.131355][T17307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.144666][T17307] CPU: 1 UID: 0 PID: 17307 Comm: syz.3.4017 Not tainted 6.11.0-rc1-syzkaller #0 [ 426.153686][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 426.163728][T17307] Call Trace: [ 426.166993][T17307] [ 426.169938][T17307] dump_stack_lvl+0xf2/0x150 [ 426.174544][T17307] dump_stack+0x15/0x20 [ 426.178723][T17307] should_fail_ex+0x229/0x230 [ 426.183396][T17307] should_fail+0xb/0x10 [ 426.187601][T17307] should_fail_usercopy+0x1a/0x20 [ 426.192627][T17307] _copy_to_user+0x1e/0xa0 [ 426.197212][T17307] simple_read_from_buffer+0xa0/0x110 [ 426.202568][T17307] proc_fail_nth_read+0xfc/0x140 [ 426.207518][T17307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 426.213062][T17307] vfs_read+0x1a2/0x6e0 [ 426.217203][T17307] ? __rcu_read_unlock+0x4e/0x70 [ 426.222164][T17307] ? __fget_files+0x1da/0x210 [ 426.227001][T17307] ksys_read+0xeb/0x1b0 [ 426.231193][T17307] __x64_sys_read+0x42/0x50 [ 426.235809][T17307] x64_sys_call+0x2a36/0x2e00 [ 426.240499][T17307] do_syscall_64+0xc9/0x1c0 [ 426.245080][T17307] ? clear_bhb_loop+0x55/0xb0 [ 426.249766][T17307] ? clear_bhb_loop+0x55/0xb0 [ 426.254438][T17307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.260398][T17307] RIP: 0033:0x7f1fc5dc5d7c [ 426.264807][T17307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 426.284512][T17307] RSP: 002b:00007f1fc4a47040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 426.292948][T17307] RAX: ffffffffffffffda RBX: 00007f1fc5f55f80 RCX: 00007f1fc5dc5d7c [ 426.301042][T17307] RDX: 000000000000000f RSI: 00007f1fc4a470b0 RDI: 0000000000000005 [ 426.309184][T17307] RBP: 00007f1fc4a470a0 R08: 0000000000000000 R09: 0000000000000000 [ 426.317365][T17307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.325365][T17307] R13: 000000000000000b R14: 00007f1fc5f55f80 R15: 00007fffb1774478 [ 426.333376][T17307] [ 426.353195][T13407] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.373209][T17227] hsr_slave_0: entered promiscuous mode [ 426.381616][T17312] loop3: detected capacity change from 0 to 256 [ 426.391101][T17227] hsr_slave_1: entered promiscuous mode [ 426.402991][T17312] FAT-fs (loop3): Directory bread(block 64) failed [ 426.410957][T17312] FAT-fs (loop3): Directory bread(block 65) failed [ 426.417931][T17227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.427045][T17312] FAT-fs (loop3): Directory bread(block 66) failed [ 426.433599][T17312] FAT-fs (loop3): Directory bread(block 67) failed [ 426.440178][T17227] Cannot create hsr debugfs directory [ 426.458609][T17312] FAT-fs (loop3): Directory bread(block 68) failed [ 426.479874][T17312] FAT-fs (loop3): Directory bread(block 69) failed [ 426.494998][T17312] FAT-fs (loop3): Directory bread(block 70) failed [ 426.511170][T17312] FAT-fs (loop3): Directory bread(block 71) failed [ 426.534680][T17312] FAT-fs (loop3): Directory bread(block 72) failed [ 426.551691][T17312] FAT-fs (loop3): Directory bread(block 73) failed [ 426.577313][T17227] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.679148][T17227] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.698064][ T29] audit: type=1400 audit(1722220016.995:4250): avc: denied { read } for pid=17315 comm="syz.2.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 426.787804][T17227] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.831781][T17333] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 426.858985][T17227] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.929817][T17227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.945367][T17227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.959322][T17227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.970356][T17227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.043349][T17227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.071704][T17227] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.091140][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.098416][ T8930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.126028][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.133133][ T8930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.169619][T17227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.282313][T17227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.323561][T17345] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 427.415268][T17227] veth0_vlan: entered promiscuous mode [ 427.431918][T17227] veth1_vlan: entered promiscuous mode [ 427.469436][T17227] veth0_macvtap: entered promiscuous mode [ 427.486498][T17227] veth1_macvtap: entered promiscuous mode [ 427.510780][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.521321][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.531214][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.541714][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.551731][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.562337][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.572171][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.583153][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.593094][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.603561][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.613506][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.623960][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.641049][T17227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.652178][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.662811][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.672719][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.683179][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.693035][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.704637][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.714465][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.725081][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.735085][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.745624][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.756516][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.767230][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.785765][T17227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.796710][T17227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.805625][T17227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.814411][T17227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.823093][T17227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.884710][T17352] netlink: 'syz.0.3991': attribute type 10 has an invalid length. [ 427.901333][T17352] loop0: detected capacity change from 0 to 1024 [ 427.909349][T17352] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 427.921750][T17352] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 427.929832][T17352] EXT4-fs (loop0): orphan cleanup on readonly fs [ 427.937985][T17352] EXT4-fs error (device loop0): __ext4_get_inode_loc:4436: comm syz.0.3991: Invalid inode table block 0 in block_group 0 [ 427.951311][T17352] EXT4-fs (loop0): Remounting filesystem read-only [ 427.957902][T17352] Quota error (device loop0): write_blk: dquota write failed [ 427.965355][T17352] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 427.979213][T17352] EXT4-fs (loop0): 1 truncate cleaned up [ 434.541059][T17352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.596807][T17352] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 434.612425][T17361] loop2: detected capacity change from 0 to 128 [ 434.619244][T17352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.668835][T17363] loop1: detected capacity change from 0 to 512 [ 434.698525][T17363] ext4: Unknown parameter 'noacl' [ 434.724975][ T29] audit: type=1326 audit(1722220025.045:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735fe77299 code=0x7ffc0000 [ 434.754631][T17370] FAULT_INJECTION: forcing a failure. [ 434.754631][T17370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.756314][T17377] FAULT_INJECTION: forcing a failure. [ 434.756314][T17377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.767792][T17370] CPU: 1 UID: 0 PID: 17370 Comm: syz.2.4035 Not tainted 6.11.0-rc1-syzkaller #0 [ 434.789876][T17370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 434.799984][T17370] Call Trace: [ 434.803252][T17370] [ 434.806340][T17370] dump_stack_lvl+0xf2/0x150 [ 434.811077][T17370] dump_stack+0x15/0x20 [ 434.815300][T17370] should_fail_ex+0x229/0x230 [ 434.819982][T17370] should_fail+0xb/0x10 [ 434.824151][T17370] should_fail_usercopy+0x1a/0x20 [ 434.829231][T17370] _copy_from_iter+0xd3/0xb00 [ 434.833986][T17370] ? kmalloc_reserve+0x16e/0x190 [ 434.839084][T17370] ? __build_skb_around+0x196/0x1f0 [ 434.844577][T17370] ? __alloc_skb+0x21f/0x310 [ 434.849161][T17370] ? __virt_addr_valid+0x1ed/0x250 [ 434.854300][T17370] ? __check_object_size+0x35b/0x510 [ 434.859620][T17370] netlink_sendmsg+0x460/0x6e0 [ 434.864390][T17370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.869748][T17370] __sock_sendmsg+0x140/0x180 [ 434.874535][T17370] ____sys_sendmsg+0x312/0x410 [ 434.879388][T17370] __sys_sendmsg+0x1e9/0x280 [ 434.884043][T17370] __x64_sys_sendmsg+0x46/0x50 [ 434.888826][T17370] x64_sys_call+0x26f8/0x2e00 [ 434.893813][T17370] do_syscall_64+0xc9/0x1c0 [ 434.898407][T17370] ? clear_bhb_loop+0x55/0xb0 [ 434.903135][T17370] ? clear_bhb_loop+0x55/0xb0 [ 434.907877][T17370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.913845][T17370] RIP: 0033:0x7fa0e7607299 [ 434.918263][T17370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.937911][T17370] RSP: 002b:00007fa0e6287048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.946322][T17370] RAX: ffffffffffffffda RBX: 00007fa0e7795f80 RCX: 00007fa0e7607299 [ 434.954285][T17370] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 434.962246][T17370] RBP: 00007fa0e62870a0 R08: 0000000000000000 R09: 0000000000000000 [ 434.970204][T17370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.978209][T17370] R13: 000000000000000b R14: 00007fa0e7795f80 R15: 00007ffc79d32ca8 [ 434.986218][T17370] [ 434.989233][T17377] CPU: 0 UID: 0 PID: 17377 Comm: syz.0.4037 Not tainted 6.11.0-rc1-syzkaller #0 [ 434.998400][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 435.008476][T17377] Call Trace: [ 435.012012][T17377] [ 435.014944][T17377] dump_stack_lvl+0xf2/0x150 [ 435.019589][T17377] dump_stack+0x15/0x20 [ 435.023744][T17377] should_fail_ex+0x229/0x230 [ 435.028489][T17377] should_fail+0xb/0x10 [ 435.032710][T17377] should_fail_usercopy+0x1a/0x20 [ 435.037807][T17377] _copy_from_iter+0x249/0xb00 [ 435.042576][T17377] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 435.048255][T17377] ? alloc_pages_noprof+0xe1/0x100 [ 435.053376][T17377] copy_page_from_iter+0x14f/0x280 [ 435.058555][T17377] rds_message_copy_from_user+0x2ae/0x6b0 [ 435.064312][T17377] rds_sendmsg+0x9ee/0x1400 [ 435.068837][T17377] ? __pfx_rds_sendmsg+0x10/0x10 [ 435.073790][T17377] __sock_sendmsg+0x140/0x180 [ 435.078477][T17377] ____sys_sendmsg+0x312/0x410 [ 435.083241][T17377] __sys_sendmsg+0x1e9/0x280 [ 435.087907][T17377] __x64_sys_sendmsg+0x46/0x50 [ 435.092671][T17377] x64_sys_call+0x26f8/0x2e00 [ 435.097388][T17377] do_syscall_64+0xc9/0x1c0 [ 435.101925][T17377] ? clear_bhb_loop+0x55/0xb0 [ 435.106723][T17377] ? clear_bhb_loop+0x55/0xb0 [ 435.111523][T17377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.117492][T17377] RIP: 0033:0x7f5f469a7299 [ 435.121907][T17377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.141605][T17377] RSP: 002b:00007f5f45627048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.150024][T17377] RAX: ffffffffffffffda RBX: 00007f5f46b35f80 RCX: 00007f5f469a7299 [ 435.158001][T17377] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 435.166063][T17377] RBP: 00007f5f456270a0 R08: 0000000000000000 R09: 0000000000000000 [ 435.174053][T17377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.182072][T17377] R13: 000000000000000b R14: 00007f5f46b35f80 R15: 00007ffdd2b49768 [ 435.190038][T17377] [ 435.203267][ T29] audit: type=1326 audit(1722220025.075:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f735fe77299 code=0x7ffc0000 [ 435.227386][ T29] audit: type=1326 audit(1722220025.075:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735fe77299 code=0x7ffc0000 [ 435.250864][ T29] audit: type=1326 audit(1722220025.075:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f735fe77299 code=0x7ffc0000 [ 435.308499][T17389] loop1: detected capacity change from 0 to 256 [ 435.341306][T17389] FAT-fs (loop1): Directory bread(block 64) failed [ 435.348030][T17389] FAT-fs (loop1): Directory bread(block 65) failed [ 435.354004][T17393] loop3: detected capacity change from 0 to 1764 [ 435.355730][T17389] FAT-fs (loop1): Directory bread(block 66) failed [ 435.367836][T17383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 435.374388][T17383] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.382166][T17383] vhci_hcd vhci_hcd.0: Device attached [ 435.382310][T17389] FAT-fs (loop1): Directory bread(block 67) failed [ 435.395047][T17391] vhci_hcd: connection closed [ 435.404799][ T1662] vhci_hcd: stop threads [ 435.407336][T17393] iso9660: Unknown parameter 'RZ' [ 435.409511][ T1662] vhci_hcd: release socket [ 435.423237][ T1662] vhci_hcd: disconnect device [ 435.424386][T17389] FAT-fs (loop1): Directory bread(block 68) failed [ 435.454622][T17389] FAT-fs (loop1): Directory bread(block 69) failed [ 435.479663][T17389] FAT-fs (loop1): Directory bread(block 70) failed [ 435.494812][T17401] netlink: 'syz.2.4044': attribute type 10 has an invalid length. [ 435.496041][T17389] FAT-fs (loop1): Directory bread(block 71) failed [ 435.520367][T17401] loop2: detected capacity change from 0 to 1024 [ 435.520881][T17389] FAT-fs (loop1): Directory bread(block 72) failed [ 435.534911][T17401] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 435.540636][T17389] FAT-fs (loop1): Directory bread(block 73) failed [ 435.563598][T17401] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 435.582091][T17401] EXT4-fs (loop2): orphan cleanup on readonly fs [ 435.602586][T17401] EXT4-fs error (device loop2): __ext4_get_inode_loc:4436: comm syz.2.4044: Invalid inode table block 0 in block_group 0 [ 435.636407][T17401] EXT4-fs (loop2): Remounting filesystem read-only [ 435.642969][T17401] Quota error (device loop2): write_blk: dquota write failed [ 435.650402][T17401] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 435.671960][T17405] loop1: detected capacity change from 0 to 512 [ 435.685335][T17401] EXT4-fs (loop2): 1 truncate cleaned up [ 435.697699][T17401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.723621][T17401] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 435.732104][T17405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.746933][T17401] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.760338][T17405] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.789285][T17401] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4044'. [ 435.789385][T14567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.811568][ T3290] bridge_slave_1: left allmulticast mode [ 435.817343][ T3290] bridge_slave_1: left promiscuous mode [ 435.823164][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.838686][ T3290] bridge_slave_0: left allmulticast mode [ 435.844532][ T3290] bridge_slave_0: left promiscuous mode [ 435.851020][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.862197][T17411] loop2: detected capacity change from 0 to 136 [ 435.869410][T17410] loop1: detected capacity change from 0 to 128 [ 435.876850][T17411] iso9660: Unknown parameter 'overòiderpckperm' [ 435.888379][T17411] loop2: detected capacity change from 0 to 1024 [ 435.895607][T17411] ext4: Unknown parameter 'mask' [ 436.038392][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.049690][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.068917][ T3290] bond0 (unregistering): Released all slaves [ 436.085393][ T29] audit: type=1400 audit(1722220026.415:4255): avc: denied { ioctl } for pid=17412 comm="syz.1.4047" path="socket:[61359]" dev="sockfs" ino=61359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 436.169272][T17427] loop2: detected capacity change from 0 to 512 [ 436.181911][T17427] ext3: Bad value for 'journal_dev' [ 436.198187][ T3290] hsr_slave_0: left promiscuous mode [ 436.215904][ T3290] hsr_slave_1: left promiscuous mode [ 436.227022][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.234567][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.252298][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.259853][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.279171][T17427] loop2: detected capacity change from 0 to 8192 [ 436.281906][ T3290] veth1_macvtap: left promiscuous mode [ 436.291326][ T3290] veth0_macvtap: left promiscuous mode [ 436.294639][T17427] vfat: Unknown parameter 'nombcache' [ 436.296901][ T3290] veth1_vlan: left promiscuous mode [ 436.307598][ T3290] veth0_vlan: left promiscuous mode [ 436.400259][T17441] loop0: detected capacity change from 0 to 512 [ 436.426871][T17445] loop3: detected capacity change from 0 to 128 [ 436.436150][T17441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.454277][T17441] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.484394][T17449] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 436.491160][T17449] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 436.491264][T17449] vhci_hcd vhci_hcd.0: Device attached [ 436.501636][T17454] usbip_core: unknown command [ 436.501645][T17454] vhci_hcd: unknown pdu 3281309441 [ 436.501727][T17454] usbip_core: unknown command [ 436.505649][ T28] vhci_hcd: stop threads [ 436.505659][ T28] vhci_hcd: release socket [ 436.505668][ T28] vhci_hcd: disconnect device [ 436.546934][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 436.550003][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 436.588350][T17459] loop3: detected capacity change from 0 to 128 [ 436.630047][T17459] bio_check_eod: 206 callbacks suppressed [ 436.630134][T17459] syz.3.4060: attempt to access beyond end of device [ 436.630134][T17459] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 436.671855][T17227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.762434][T17465] loop0: detected capacity change from 0 to 1764 [ 436.779819][T17465] iso9660: Unknown parameter 'RZ' [ 437.266005][ T29] audit: type=1400 audit(1722220027.585:4256): avc: denied { bind } for pid=17480 comm="syz.3.4068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 437.286238][ T29] audit: type=1400 audit(1722220027.595:4257): avc: denied { read } for pid=17480 comm="syz.3.4068" dev="sockfs" ino=62325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 437.322176][T17487] loop0: detected capacity change from 0 to 128 [ 437.518859][T17494] loop3: detected capacity change from 0 to 256 [ 437.582303][T17499] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 437.593687][T17494] IPVS: stopping backup sync thread 17499 ... [ 437.656730][T17503] loop2: detected capacity change from 0 to 256 [ 437.672381][T17503] FAT-fs (loop2): Directory bread(block 64) failed [ 437.679030][T17503] FAT-fs (loop2): Directory bread(block 65) failed [ 437.686769][T17503] FAT-fs (loop2): Directory bread(block 66) failed [ 437.693414][T17503] FAT-fs (loop2): Directory bread(block 67) failed [ 437.700018][T17503] FAT-fs (loop2): Directory bread(block 68) failed [ 437.707745][T17503] FAT-fs (loop2): Directory bread(block 69) failed [ 437.730721][T17506] loop4: detected capacity change from 0 to 1764 [ 437.739348][T17503] FAT-fs (loop2): Directory bread(block 70) failed [ 437.755312][T17503] FAT-fs (loop2): Directory bread(block 71) failed [ 437.764351][T17506] iso9660: Unknown parameter 'RZ' [ 437.771698][T17503] FAT-fs (loop2): Directory bread(block 72) failed [ 437.785463][T17503] FAT-fs (loop2): Directory bread(block 73) failed [ 437.901232][T17515] loop3: detected capacity change from 0 to 128 [ 438.234760][T17527] FAULT_INJECTION: forcing a failure. [ 438.234760][T17527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.247976][T17527] CPU: 0 UID: 0 PID: 17527 Comm: syz.1.4084 Not tainted 6.11.0-rc1-syzkaller #0 [ 438.257005][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 438.267129][T17527] Call Trace: [ 438.270405][T17527] [ 438.273431][T17527] dump_stack_lvl+0xf2/0x150 [ 438.278189][T17527] dump_stack+0x15/0x20 [ 438.282369][T17527] should_fail_ex+0x229/0x230 [ 438.287129][T17527] should_fail+0xb/0x10 [ 438.291290][T17527] should_fail_usercopy+0x1a/0x20 [ 438.296405][T17527] _copy_from_iter+0xd3/0xb00 [ 438.301140][T17527] ? kmalloc_reserve+0x16e/0x190 [ 438.306075][T17527] ? __build_skb_around+0x196/0x1f0 [ 438.311568][T17527] ? __alloc_skb+0x21f/0x310 [ 438.316168][T17527] ? __virt_addr_valid+0x1ed/0x250 [ 438.321327][T17527] ? __check_object_size+0x35b/0x510 [ 438.326651][T17527] netlink_sendmsg+0x460/0x6e0 [ 438.331482][T17527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.336835][T17527] __sock_sendmsg+0x140/0x180 [ 438.341533][T17527] ____sys_sendmsg+0x312/0x410 [ 438.346442][T17527] __sys_sendmsg+0x1e9/0x280 [ 438.351144][T17527] __x64_sys_sendmsg+0x46/0x50 [ 438.355935][T17527] x64_sys_call+0x26f8/0x2e00 [ 438.360625][T17527] do_syscall_64+0xc9/0x1c0 [ 438.365177][T17527] ? clear_bhb_loop+0x55/0xb0 [ 438.369877][T17527] ? clear_bhb_loop+0x55/0xb0 [ 438.374575][T17527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.380491][T17527] RIP: 0033:0x7f735fe77299 [ 438.384923][T17527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.404557][T17527] RSP: 002b:00007f735eaf7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.412997][T17527] RAX: ffffffffffffffda RBX: 00007f7360005f80 RCX: 00007f735fe77299 [ 438.421212][T17527] RDX: 0000000000000000 RSI: 0000000020008100 RDI: 0000000000000003 [ 438.429193][T17527] RBP: 00007f735eaf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.437265][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.445243][T17527] R13: 000000000000000b R14: 00007f7360005f80 R15: 00007ffd51d2c438 [ 438.453380][T17527] [ 438.512217][T17529] loop3: detected capacity change from 0 to 256 [ 438.579393][T17540] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 438.590751][T17529] IPVS: stopping backup sync thread 17540 ... [ 438.642679][T17547] loop3: detected capacity change from 0 to 128 [ 438.676237][ T29] audit: type=1400 audit(1722220029.005:4258): avc: denied { getopt } for pid=17550 comm="syz.3.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.757905][T17566] tipc: Started in network mode [ 438.762966][T17566] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 438.778174][T17562] netlink: 'syz.3.4095': attribute type 10 has an invalid length. [ 438.788157][T17566] tipc: Enabled bearer , priority 10 [ 438.818850][T17562] loop3: detected capacity change from 0 to 1024 [ 438.856675][T17562] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 438.871574][T17562] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 438.895744][T17562] EXT4-fs (loop3): orphan cleanup on readonly fs [ 438.937684][T17562] EXT4-fs error (device loop3): __ext4_get_inode_loc:4436: comm syz.3.4095: Invalid inode table block 0 in block_group 0 [ 438.987580][T17562] EXT4-fs (loop3): Remounting filesystem read-only [ 438.994202][T17562] EXT4-fs (loop3): 1 truncate cleaned up [ 439.079888][T17562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.119617][T17562] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 439.137932][T17562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.183424][T17562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4095'. [ 439.217610][T17562] loop3: detected capacity change from 0 to 136 [ 439.244234][T17580] FAULT_INJECTION: forcing a failure. [ 439.244234][T17580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.257383][T17580] CPU: 0 UID: 0 PID: 17580 Comm: syz.2.4102 Not tainted 6.11.0-rc1-syzkaller #0 [ 439.257474][T17562] iso9660: Unknown parameter 'overòiderpckperm' [ 439.266466][T17580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 439.266482][T17580] Call Trace: [ 439.266490][T17580] [ 439.266497][T17580] dump_stack_lvl+0xf2/0x150 [ 439.293642][T17580] dump_stack+0x15/0x20 [ 439.297825][T17580] should_fail_ex+0x229/0x230 [ 439.302574][T17580] should_fail+0xb/0x10 [ 439.306788][T17580] should_fail_usercopy+0x1a/0x20 [ 439.312154][T17580] _copy_to_iter+0x246/0xaf0 [ 439.316759][T17580] ? __virt_addr_valid+0x1ed/0x250 [ 439.321892][T17580] ? __check_object_size+0x35b/0x510 [ 439.327242][T17580] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 439.332801][T17562] loop3: detected capacity change from 0 to 1024 [ 439.332874][T17580] __skb_datagram_iter+0xce/0x5c0 [ 439.332905][T17580] skb_copy_datagram_iter+0x41/0x130 [ 439.332928][T17580] netlink_recvmsg+0x1a4/0x780 [ 439.354361][T17580] ? __pfx_netlink_recvmsg+0x10/0x10 [ 439.359641][T17580] sock_recvmsg+0x13f/0x170 [ 439.364171][T17580] ____sys_recvmsg+0xf9/0x280 [ 439.368863][T17580] do_recvmmsg+0x2eb/0x720 [ 439.373364][T17580] __x64_sys_recvmmsg+0xf9/0x170 [ 439.378603][T17580] x64_sys_call+0x1b8b/0x2e00 [ 439.383310][T17580] do_syscall_64+0xc9/0x1c0 [ 439.387984][T17580] ? clear_bhb_loop+0x55/0xb0 [ 439.392767][T17580] ? clear_bhb_loop+0x55/0xb0 [ 439.397456][T17580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.403407][T17580] RIP: 0033:0x7fa0e7607299 [ 439.407874][T17580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.427538][T17580] RSP: 002b:00007fa0e6287048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.435964][T17580] RAX: ffffffffffffffda RBX: 00007fa0e7795f80 RCX: 00007fa0e7607299 [ 439.443965][T17580] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 439.451938][T17580] RBP: 00007fa0e62870a0 R08: 0000000020003700 R09: 0000000000000000 [ 439.459907][T17580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.467875][T17580] R13: 000000000000000b R14: 00007fa0e7795f80 R15: 00007ffc79d32ca8 [ 439.475864][T17580] [ 439.479796][T17562] ext4: Unknown parameter 'mask' [ 439.488275][T17582] loop4: detected capacity change from 0 to 128 [ 439.557584][T17587] loop3: detected capacity change from 0 to 1024 [ 439.575584][T17589] loop4: detected capacity change from 0 to 128 [ 439.580552][T17590] FAULT_INJECTION: forcing a failure. [ 439.580552][T17590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.595038][T17590] CPU: 0 UID: 0 PID: 17590 Comm: syz.2.4104 Not tainted 6.11.0-rc1-syzkaller #0 [ 439.604097][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 439.614218][T17590] Call Trace: [ 439.617499][T17590] [ 439.620498][T17590] dump_stack_lvl+0xf2/0x150 [ 439.625187][T17590] dump_stack+0x15/0x20 [ 439.629485][T17590] should_fail_ex+0x229/0x230 [ 439.634285][T17590] should_fail+0xb/0x10 [ 439.638464][T17590] should_fail_usercopy+0x1a/0x20 [ 439.643508][T17590] _copy_to_user+0x1e/0xa0 [ 439.647946][T17590] simple_read_from_buffer+0xa0/0x110 [ 439.653380][T17590] proc_fail_nth_read+0xfc/0x140 [ 439.658443][T17590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.664003][T17590] vfs_read+0x1a2/0x6e0 [ 439.668277][T17590] ? __rcu_read_unlock+0x4e/0x70 [ 439.673228][T17590] ? __fget_files+0x1da/0x210 [ 439.677948][T17590] ksys_read+0xeb/0x1b0 [ 439.682197][T17590] __x64_sys_read+0x42/0x50 [ 439.686765][T17590] x64_sys_call+0x2a36/0x2e00 [ 439.691520][T17590] do_syscall_64+0xc9/0x1c0 [ 439.696054][T17590] ? clear_bhb_loop+0x55/0xb0 [ 439.700892][T17590] ? clear_bhb_loop+0x55/0xb0 [ 439.705591][T17590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.711504][T17590] RIP: 0033:0x7fa0e7605d7c [ 439.716013][T17590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 439.736980][T17590] RSP: 002b:00007fa0e6287040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.745463][T17590] RAX: ffffffffffffffda RBX: 00007fa0e7795f80 RCX: 00007fa0e7605d7c [ 439.753450][T17590] RDX: 000000000000000f RSI: 00007fa0e62870b0 RDI: 0000000000000004 [ 439.761435][T17590] RBP: 00007fa0e62870a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.769427][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.777423][T17590] R13: 000000000000000b R14: 00007fa0e7795f80 R15: 00007ffc79d32ca8 [ 439.785674][T17590] [ 439.791399][T17589] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.803732][ T9023] tipc: Node number set to 4269801488 [ 439.816210][T17587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.831168][T17597] loop2: detected capacity change from 0 to 256 [ 439.839603][T17589] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 439.986544][T17599] loop0: detected capacity change from 0 to 512 [ 439.994778][T17597] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 440.010341][T17599] EXT4-fs: Ignoring removed orlov option [ 440.019829][T16844] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.082219][T17599] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 440.093917][T17599] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 440.104140][T17599] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4109: Corrupt directory, running e2fsck is recommended [ 440.120183][T17610] loop2: detected capacity change from 0 to 256 [ 440.129964][T17609] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.137053][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 440.137066][ T29] audit: type=1400 audit(1722220030.465:4260): avc: denied { name_connect } for pid=17607 comm="syz.4.4110" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 440.171259][T17599] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 440.184586][T17599] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4109: corrupted in-inode xattr: overlapping e_value [ 440.222915][T17599] EXT4-fs (loop0): Remounting filesystem read-only [ 440.230766][T17599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.245851][T16867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.258361][T17610] IPVS: stopping backup sync thread 17615 ... [ 440.265714][T17599] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 440.274109][T17599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.300210][T17599] loop0: detected capacity change from 0 to 512 [ 440.307274][T17599] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 440.316934][T17599] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 440.326381][T17599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4109: bg 0: block 18: invalid block bitmap [ 440.339495][T17599] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 440.348571][T17599] EXT4-fs (loop0): 1 truncate cleaned up [ 440.354586][T17599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.366861][T17599] ext2 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.392984][T17227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.412259][T17627] loop0: detected capacity change from 0 to 128 [ 440.460323][T17631] loop0: detected capacity change from 0 to 512 [ 440.486253][T17631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.499793][T17631] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.525862][T17227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.550212][T17644] FAULT_INJECTION: forcing a failure. [ 440.550212][T17644] name failslab, interval 1, probability 0, space 0, times 0 [ 440.563012][T17644] CPU: 0 UID: 0 PID: 17644 Comm: syz.0.4123 Not tainted 6.11.0-rc1-syzkaller #0 [ 440.572062][T17644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 440.582158][T17644] Call Trace: [ 440.585839][T17644] [ 440.588867][T17644] dump_stack_lvl+0xf2/0x150 [ 440.593529][T17644] dump_stack+0x15/0x20 [ 440.597736][T17644] should_fail_ex+0x229/0x230 [ 440.602518][T17644] ? __kvmalloc_node_noprof+0x72/0x170 [ 440.607984][T17644] should_failslab+0x8f/0xb0 [ 440.612593][T17644] __kmalloc_node_noprof+0xa8/0x380 [ 440.617817][T17644] __kvmalloc_node_noprof+0x72/0x170 [ 440.623109][T17644] rhashtable_init_noprof+0x312/0x450 [ 440.628559][T17644] rhltable_init_noprof+0x1e/0x40 [ 440.633666][T17644] nf_tables_newtable+0x54d/0xec0 [ 440.638724][T17644] nfnetlink_rcv+0xb1d/0x15b0 [ 440.643517][T17644] netlink_unicast+0x593/0x670 [ 440.648281][T17644] netlink_sendmsg+0x5cc/0x6e0 [ 440.653047][T17644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.658377][T17644] __sock_sendmsg+0x140/0x180 [ 440.663140][T17644] ____sys_sendmsg+0x312/0x410 [ 440.667976][T17644] __sys_sendmsg+0x1e9/0x280 [ 440.672620][T17644] __x64_sys_sendmsg+0x46/0x50 [ 440.677392][T17644] x64_sys_call+0x26f8/0x2e00 [ 440.682079][T17644] do_syscall_64+0xc9/0x1c0 [ 440.686656][T17644] ? clear_bhb_loop+0x55/0xb0 [ 440.691342][T17644] ? clear_bhb_loop+0x55/0xb0 [ 440.696104][T17644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.702002][T17644] RIP: 0033:0x7f5f469a7299 [ 440.706464][T17644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.726488][T17644] RSP: 002b:00007f5f45627048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.734940][T17644] RAX: ffffffffffffffda RBX: 00007f5f46b35f80 RCX: 00007f5f469a7299 [ 440.743003][T17644] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 440.750978][T17644] RBP: 00007f5f456270a0 R08: 0000000000000000 R09: 0000000000000000 [ 440.759025][T17644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.767012][T17644] R13: 000000000000000b R14: 00007f5f46b35f80 R15: 00007ffdd2b49768 [ 440.774974][T17644] [ 440.898358][T17658] loop0: detected capacity change from 0 to 512 [ 440.909290][T17658] EXT4-fs: Ignoring removed orlov option [ 440.925246][T17658] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 440.936786][T17658] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 440.937234][T17665] loop2: detected capacity change from 0 to 128 [ 440.947057][T17658] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4127: Corrupt directory, running e2fsck is recommended [ 440.979945][T17658] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 440.980287][T17661] netlink: 'syz.3.4128': attribute type 10 has an invalid length. [ 440.995928][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4128'. [ 441.009608][T17658] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4127: corrupted in-inode xattr: overlapping e_value [ 441.048050][T17658] EXT4-fs (loop0): Remounting filesystem read-only [ 441.068343][T17658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.081076][T17658] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 441.089535][T17658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.129262][T17658] loop0: detected capacity change from 0 to 512 [ 441.139318][T17658] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 441.147734][T17673] loop3: detected capacity change from 0 to 512 [ 441.154798][T17658] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 441.164184][T17658] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4127: bg 0: block 18: invalid block bitmap [ 441.176864][T17658] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 441.189370][T17658] EXT4-fs (loop0): 1 truncate cleaned up [ 441.195664][T17658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.208613][T17658] ext2 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.243613][T17673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.263035][T17227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.288449][T17679] ================================================================== [ 441.296563][T17679] BUG: KCSAN: data-race in compact_zone / isolate_migratepages_block [ 441.304627][T17679] [ 441.306941][T17679] read to 0xffff88823fffab90 of 8 bytes by task 17637 on cpu 1: [ 441.314642][T17679] compact_zone+0x2374/0x2910 [ 441.319310][T17679] try_to_compact_pages+0x388/0x920 [ 441.324496][T17679] __alloc_pages_direct_compact+0x6f/0x1e0 [ 441.330291][T17679] __alloc_pages_slowpath+0x236/0xd70 [ 441.335703][T17679] __alloc_pages_noprof+0x26d/0x360 [ 441.340902][T17679] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 441.346267][T17679] alloc_pages_noprof+0xe1/0x100 [ 441.351200][T17679] __vmalloc_node_range_noprof+0x719/0xef0 [ 441.356994][T17679] __kvmalloc_node_noprof+0x121/0x170 [ 441.362356][T17679] xt_alloc_entry_offsets+0x47/0x50 [ 441.367546][T17679] translate_table+0xa3/0xf70 [ 441.372305][T17679] do_ipt_set_ctl+0x7bd/0x8b0 [ 441.376973][T17679] nf_setsockopt+0x195/0x1b0 [ 441.381561][T17679] ip_setsockopt+0xea/0x100 [ 441.386058][T17679] tcp_setsockopt+0x93/0xb0 [ 441.390555][T17679] sock_common_setsockopt+0x64/0x80 [ 441.395751][T17679] smc_setsockopt+0x182/0x7a0 [ 441.400424][T17679] __sys_setsockopt+0x1d8/0x250 [ 441.405267][T17679] __x64_sys_setsockopt+0x66/0x80 [ 441.410282][T17679] x64_sys_call+0x2a0e/0x2e00 [ 441.414954][T17679] do_syscall_64+0xc9/0x1c0 [ 441.419452][T17679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.425337][T17679] [ 441.427649][T17679] write to 0xffff88823fffab90 of 8 bytes by task 17679 on cpu 0: [ 441.435350][T17679] isolate_migratepages_block+0x24a5/0x2740 [ 441.441233][T17679] compact_zone+0x1e0f/0x2910 [ 441.445900][T17679] try_to_compact_pages+0x388/0x920 [ 441.451087][T17679] __alloc_pages_direct_compact+0x6f/0x1e0 [ 441.456897][T17679] __alloc_pages_slowpath+0x236/0xd70 [ 441.462290][T17679] __alloc_pages_noprof+0x26d/0x360 [ 441.467681][T17679] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 441.473054][T17679] alloc_pages_noprof+0xe1/0x100 [ 441.477989][T17679] io_pages_map+0xbe/0x4e0 [ 441.482395][T17679] io_allocate_scq_urings+0x10d/0x300 [ 441.487774][T17679] io_uring_create+0x51f/0x920 [ 441.492527][T17679] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 441.497995][T17679] __x64_sys_io_uring_setup+0x31/0x40 [ 441.503375][T17679] x64_sys_call+0x173c/0x2e00 [ 441.508048][T17679] do_syscall_64+0xc9/0x1c0 [ 441.512550][T17679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.518436][T17679] [ 441.520759][T17679] value changed: 0x00000000001f9000 -> 0x00000000001fe800 [ 441.527862][T17679] [ 441.530174][T17679] Reported by Kernel Concurrency Sanitizer on: [ 441.536320][T17679] CPU: 0 UID: 0 PID: 17679 Comm: syz.4.4136 Not tainted 6.11.0-rc1-syzkaller #0 [ 441.545421][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 441.555467][T17679] ================================================================== [ 441.564515][T17673] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.614540][T16867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.631119][T17681] loop0: detected capacity change from 0 to 8192 [ 441.639899][T17681] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.687197][T17682] loop4: detected capacity change from 0 to 1024 [ 441.693868][T17682] EXT4-fs: Ignoring removed orlov option [ 441.699556][T17682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 441.707851][T17684] FAULT_INJECTION: forcing a failure. [ 441.707851][T17684] name failslab, interval 1, probability 0, space 0, times 0 [ 441.720536][T17684] CPU: 0 UID: 0 PID: 17684 Comm: syz.0.4135 Not tainted 6.11.0-rc1-syzkaller #0 [ 441.729568][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 441.739710][T17684] Call Trace: [ 441.743147][T17684] [ 441.746102][T17684] dump_stack_lvl+0xf2/0x150 [ 441.750819][T17684] dump_stack+0x15/0x20 [ 441.755342][T17684] should_fail_ex+0x229/0x230 [ 441.760351][T17684] ? __get_vm_area_node+0xf7/0x1b0 [ 441.765548][T17684] should_failslab+0x8f/0xb0 [ 441.770322][T17684] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 441.776121][T17684] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 441.781542][T17684] __get_vm_area_node+0xf7/0x1b0 [ 441.786532][T17684] __vmalloc_node_range_noprof+0x2eb/0xef0 [ 441.792372][T17684] ? htable_create+0xee/0x430 [ 441.797123][T17684] ? __pfx_bpf_ringbuf_output+0x10/0x10 [ 441.802697][T17684] ? bpf_ringbuf_output+0x132/0x150 [ 441.807946][T17684] ? pcpu_block_refresh_hint+0x11f/0x180 [ 441.813669][T17684] ? htable_create+0xee/0x430 [ 441.818359][T17684] vmalloc_noprof+0x5e/0x70 [ 441.822881][T17684] ? htable_create+0xee/0x430 [ 441.827674][T17684] htable_create+0xee/0x430 [ 441.832198][T17684] hashlimit_mt_check_common+0x597/0x6a0 [ 441.838025][T17684] hashlimit_mt_check+0x64/0x80 [ 441.842898][T17684] xt_check_match+0x259/0x4b0 [ 441.847672][T17684] ? try_module_get+0xae/0x1a0 [ 441.852500][T17684] ? xt_find_match+0x1c1/0x1e0 [ 441.857281][T17684] translate_table+0xb44/0x1040 [ 441.862529][T17684] ? _copy_from_user+0x9a/0xd0 [ 441.867871][T17684] do_ip6t_set_ctl+0x7cc/0x8c0 [ 441.872705][T17684] ? __rcu_read_unlock+0x4e/0x70 [ 441.877669][T17684] nf_setsockopt+0x195/0x1b0 [ 441.882283][T17684] ipv6_setsockopt+0x126/0x140 [ 441.887106][T17684] udpv6_setsockopt+0x95/0xb0 [ 441.891834][T17684] sock_common_setsockopt+0x64/0x80 [ 441.897134][T17684] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 441.903116][T17684] __sys_setsockopt+0x1d8/0x250 [ 441.908044][T17684] __x64_sys_setsockopt+0x66/0x80 [ 441.913083][T17684] x64_sys_call+0x2a0e/0x2e00 [ 441.917921][T17684] do_syscall_64+0xc9/0x1c0 [ 441.922445][T17684] ? clear_bhb_loop+0x55/0xb0 [ 441.927136][T17684] ? clear_bhb_loop+0x55/0xb0 [ 441.931822][T17684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.937776][T17684] RIP: 0033:0x7f5f469a7299 [ 441.942187][T17684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.962298][T17684] RSP: 002b:00007f5f45606048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 441.970786][T17684] RAX: ffffffffffffffda RBX: 00007f5f46b36058 RCX: 00007f5f469a7299 [ 441.978754][T17684] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 441.986726][T17684] RBP: 00007f5f456060a0 R08: 00000000000004a8 R09: 0000000000000000 [ 441.994705][T17684] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.002703][T17684] R13: 000000000000006e R14: 00007f5f46b36058 R15: 00007ffdd2b49768 [ 442.010690][T17684] [ 442.014375][T17684] warn_alloc: 1 callbacks suppressed [ 442.014388][T17684] syz.0.4135: vmalloc error: size 65736, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 442.021380][T17682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.034215][T17684] CPU: 0 UID: 0 PID: 17684 Comm: syz.0.4135 Not tainted 6.11.0-rc1-syzkaller #0 [ 442.034242][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 442.065470][T17684] Call Trace: [ 442.068754][T17684] [ 442.071722][T17684] dump_stack_lvl+0xf2/0x150 [ 442.076366][T17684] dump_stack+0x15/0x20 [ 442.080580][T17684] warn_alloc+0x145/0x1b0 [ 442.084926][T17684] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 442.090408][T17684] __vmalloc_node_range_noprof+0x310/0xef0 [ 442.096221][T17684] ? __pfx_bpf_ringbuf_output+0x10/0x10 [ 442.101772][T17684] ? bpf_ringbuf_output+0x132/0x150 [ 442.106998][T17684] ? pcpu_block_refresh_hint+0x11f/0x180 [ 442.112707][T17684] ? htable_create+0xee/0x430 [ 442.117441][T17684] vmalloc_noprof+0x5e/0x70 [ 442.121973][T17684] ? htable_create+0xee/0x430 [ 442.126691][T17684] htable_create+0xee/0x430 [ 442.131246][T17684] hashlimit_mt_check_common+0x597/0x6a0 [ 442.136967][T17684] hashlimit_mt_check+0x64/0x80 [ 442.141829][T17684] xt_check_match+0x259/0x4b0 [ 442.146562][T17684] ? try_module_get+0xae/0x1a0 [ 442.150452][T17637] syz.1.4122 (17637) used greatest stack depth: 8864 bytes left [ 442.151329][T17684] ? xt_find_match+0x1c1/0x1e0 [ 442.164807][T17684] translate_table+0xb44/0x1040 [ 442.169734][T17684] ? _copy_from_user+0x9a/0xd0 [ 442.174504][T17684] do_ip6t_set_ctl+0x7cc/0x8c0 [ 442.179251][T17684] ? __rcu_read_unlock+0x4e/0x70 [ 442.184199][T17684] nf_setsockopt+0x195/0x1b0 [ 442.188777][T17684] ipv6_setsockopt+0x126/0x140 [ 442.193556][T17684] udpv6_setsockopt+0x95/0xb0 [ 442.198219][T17684] sock_common_setsockopt+0x64/0x80 [ 442.203444][T17684] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 442.209402][T17684] __sys_setsockopt+0x1d8/0x250 [ 442.214310][T17684] __x64_sys_setsockopt+0x66/0x80 [ 442.219394][T17684] x64_sys_call+0x2a0e/0x2e00 [ 442.224056][T17684] do_syscall_64+0xc9/0x1c0 [ 442.228604][T17684] ? clear_bhb_loop+0x55/0xb0 [ 442.233266][T17684] ? clear_bhb_loop+0x55/0xb0 [ 442.237928][T17684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.243875][T17684] RIP: 0033:0x7f5f469a7299 [ 442.248325][T17684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.267996][T17684] RSP: 002b:00007f5f45606048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 442.276476][T17684] RAX: ffffffffffffffda RBX: 00007f5f46b36058 RCX: 00007f5f469a7299 [ 442.284462][T17684] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 442.292449][T17684] RBP: 00007f5f456060a0 R08: 00000000000004a8 R09: 0000000000000000 [ 442.300770][T17684] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.308849][T17684] R13: 000000000000006e R14: 00007f5f46b36058 R15: 00007ffdd2b49768 [ 442.316893][T17684] [ 442.320104][T17684] Mem-Info: [ 442.323303][T17684] active_anon:4988 inactive_anon:5608 isolated_anon:0 [ 442.323303][T17684] active_file:7566 inactive_file:3878 isolated_file:1 [ 442.323303][T17684] unevictable:0 dirty:333 writeback:0 [ 442.323303][T17684] slab_reclaimable:2155 slab_unreclaimable:21331 [ 442.323303][T17684] mapped:20653 shmem:1397 pagetables:631 [ 442.323303][T17684] sec_pagetables:0 bounce:0 [ 442.323303][T17684] kernel_misc_reclaimable:0 [ 442.323303][T17684] free:490760 free_pcp:80937 free_cma:0 [ 442.368256][T17684] Node 0 active_anon:19952kB inactive_anon:22432kB active_file:30264kB inactive_file:15512kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:82612kB dirty:1332kB writeback:0kB shmem:5588kB writeback_tmp:0kB kernel_stack:3200kB pagetables:2524kB sec_pagetables:0kB all_unreclaimable? no [ 442.396373][T17684] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.423362][T17684] lowmem_reserve[]: 0 2866 7844 0 [ 442.428584][T17684] Node 0 DMA32 free:433008kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953948kB mlocked:0kB bounce:0kB free_pcp:14072kB local_pcp:8088kB free_cma:0kB [ 442.457181][T17684] lowmem_reserve[]: 0 0 4978 0 [ 442.461969][T17684] Node 0 Normal free:1514672kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:19952kB inactive_anon:22432kB active_file:30264kB inactive_file:15512kB unevictable:0kB writepending:1332kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:309692kB local_pcp:1452kB free_cma:0kB [ 442.492789][T17684] lowmem_reserve[]: 0 0 0 0 [ 442.497336][T17684] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 442.510063][T17684] Node 0 DMA32: 5*4kB (M) 2*8kB (UM) 2*16kB (M) 5*32kB (UM) 4*64kB (UM) 4*128kB (UM) 6*256kB (UM) 3*512kB (UM) 5*1024kB (UM) 7*2048kB (UM) 100*4096kB (UM) = 433124kB [ 442.526723][T17684] Node 0 Normal: 1437*4kB (UME) 1274*8kB (UME) 1043*16kB (UME) 619*32kB (UME) 688*64kB (UME) 806*128kB (UME) 265*256kB (UME) 622*512kB (UME) 841*1024kB (UM) 9*2048kB (UM) 12*4096kB (UM) = 1514708kB [ 442.546426][T17684] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 442.556013][T17684] 13679 total pagecache pages [ 442.560690][T17684] 809 pages in swap cache [ 442.565037][T17684] Free swap = 108700kB [ 442.569178][T17684] Total swap = 124996kB [ 442.573580][T17684] 2097051 pages RAM [ 442.578593][T17684] 0 pages HighMem/MovableOnly [ 442.583313][T17684] 80172 pages reserved [ 442.611336][T16844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.